Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File: 3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier: bBjUnrplz4ebN+IRN+s5xoIe6PI/NGPezbumgt8C4oI=
Subject key identifier: 06:EC:FE:C8:9C:42:A5:24:5B:E9:6B:4D:CC:A7:34:F7:E4:D4:70:7A
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 01995BD7DF12EEB551B94D1572F0E0705E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number: 1130
Signing time: Thu 18 Sep 2025 08:01:37 +0000
Manifest this update: Thu 18 Sep 2025 08:01:37 +0000
Manifest next update: Fri 19 Sep 2025 08:01:37 +0000
Files and hashes: 1: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: gipixWSRt6g+4q3zTi+Ztd7UmBdXLjonX8UW9t/TdzM=)
2: To63YyOS4m4xGKG36WLK52zQE8c.roa (hash: tp9xM1hLtDqI8FvsSwdqSoCI37g77m4oJd7PdWAciIs=)
3: rNJomldCeu_xMB-3_GrfVy4SpuA.roa (hash: 0qwCuh+Crxi2V764XIv8ArKA6g54Zdfi93Itg0+iAvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 08:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5b:d7:df:12:ee:b5:51:b9:4d:15:72:f0:e0:70:5e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Sep 18 08:01:37 2025 GMT
Not After : Sep 19 08:01:37 2025 GMT
Subject: CN=06ecfec89c42a5245be96b4dcca734f7e4d4707a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:05:4a:79:c2:a7:1d:f0:25:cb:f9:6f:62:
ab:b9:c6:28:62:da:ed:56:d8:b3:ee:82:f4:b4:e5:
c4:e7:bf:a3:14:00:85:e7:55:2b:2f:05:71:3d:27:
b9:31:4e:d5:a7:63:70:ae:12:28:26:cf:c2:da:ec:
0e:2a:e3:19:96:5b:49:ee:6b:10:e6:ea:a7:38:54:
6c:82:af:92:8a:3b:d7:a1:fd:f9:15:1c:06:d1:4e:
bc:05:a6:cc:b4:de:c7:f5:27:f5:a7:c4:43:f1:6b:
c8:11:36:db:3f:02:29:4d:a2:bc:65:eb:66:b1:d0:
9b:13:8b:43:b1:7d:b3:99:d9:a9:79:fb:fb:38:f6:
e5:85:51:ff:72:b9:c4:84:36:92:05:eb:56:2e:11:
a1:ee:07:3f:02:bb:16:97:e1:ac:ad:3e:75:44:c2:
bf:d3:82:36:74:50:2b:f5:b9:74:29:24:d8:68:e4:
be:3f:aa:68:8c:94:1c:22:a1:f1:f5:0b:5e:dc:de:
19:98:ef:8e:4d:6f:19:25:9b:0b:48:9a:04:21:ea:
c4:4f:13:62:d3:c5:63:02:5a:ed:62:0f:14:75:91:
99:bd:aa:67:c9:9f:54:04:34:e9:36:2f:61:29:53:
5b:5f:e7:da:2f:71:47:ef:5b:06:4d:22:4b:9e:0d:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EC:FE:C8:9C:42:A5:24:5B:E9:6B:4D:CC:A7:34:F7:E4:D4:70:7A
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1b:b8:34:e3:9c:a7:ae:98:55:11:50:b2:eb:9c:43:71:0c:
54:57:6f:cc:38:9a:cd:17:6b:f4:12:29:4b:17:49:9d:19:19:
bd:97:55:ae:95:20:47:5f:29:82:aa:b6:76:66:ab:7d:ce:6e:
a7:75:7f:12:48:31:6b:24:d0:dc:2e:99:f2:da:4f:c7:77:37:
de:91:8e:70:48:93:76:ca:50:2a:7b:c7:a0:cd:f1:f4:94:d8:
c3:4f:16:49:34:bb:c4:fc:b7:47:6d:7a:fd:49:9e:b2:08:dc:
5c:e8:2c:6a:d0:84:9a:4b:c4:73:a1:be:ff:f6:a8:8d:63:5e:
0d:fc:fb:27:c1:68:6c:8d:0d:1b:1d:eb:57:08:78:bd:34:14:
04:2d:2e:e8:d8:78:41:1e:f6:7e:13:c5:9f:b9:fc:ab:66:9d:
a9:bc:1c:c4:46:5f:32:a5:1f:92:3b:a4:1d:53:f4:1d:9b:36:
15:82:14:f8:cf:82:99:d8:d3:e9:9c:cb:6a:34:40:59:32:e5:
29:10:d4:5a:d2:3c:cf:af:b8:50:03:4e:7a:ad:6a:7f:9a:6c:
89:0d:ce:ce:0c:1e:66:af:82:7d:16:a5:7e:c0:70:e0:8f:ac:
ad:b8:27:44:d0:f9:92:7f:48:fa:c1:44:96:e0:10:f3:ac:c7:
20:27:84:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:32:52 2025 by rpki-client