Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File: 3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier: pE+v6rfqlTzDLs2RQ2H6+06xqUt+AFmNWaWkt56tnjQ=
Subject key identifier: 96:06:47:1C:87:81:A5:F3:CA:F8:A9:00:32:52:40:A9:16:B5:90:97
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 019860C922CF2C9A540BB8C7078825B0F041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number: 10AE
Signing time: Thu 31 Jul 2025 14:00:50 +0000
Manifest this update: Thu 31 Jul 2025 14:00:50 +0000
Manifest next update: Fri 01 Aug 2025 14:00:50 +0000
Files and hashes: 1: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: Bq+RihM7FffOXsaYJsu6Kl6Ugd9wqocwEjWe4eGsqlI=)
2: To63YyOS4m4xGKG36WLK52zQE8c.roa (hash: tp9xM1hLtDqI8FvsSwdqSoCI37g77m4oJd7PdWAciIs=)
3: rNJomldCeu_xMB-3_GrfVy4SpuA.roa (hash: 0qwCuh+Crxi2V764XIv8ArKA6g54Zdfi93Itg0+iAvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:c9:22:cf:2c:9a:54:0b:b8:c7:07:88:25:b0:f0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Jul 31 14:00:50 2025 GMT
Not After : Aug 1 14:00:50 2025 GMT
Subject: CN=9606471c8781a5f3caf8a900325240a916b59097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:62:ab:59:96:51:69:6e:05:a3:e2:1d:50:33:
3b:e6:8b:0c:ef:df:9b:5d:b7:e1:55:e9:6f:a5:49:
16:cb:c8:d8:2e:28:8d:af:c6:b7:c2:ff:ff:49:fb:
5a:8c:21:9d:ec:a2:10:ab:0a:55:fa:cf:09:79:59:
cf:af:47:b7:00:1f:ae:24:82:ce:70:b0:61:26:da:
f0:eb:51:c5:a4:c9:97:b7:20:44:06:6a:9e:8d:11:
20:6c:28:2f:d9:e5:55:23:f4:c8:8f:16:56:e7:36:
92:03:6c:bc:04:c9:ba:e6:6a:f1:5b:72:9e:1a:cf:
8c:f5:d3:c7:94:45:59:8f:ec:c1:32:fb:3c:e0:ff:
ac:63:5a:7e:1a:94:cd:71:d4:06:08:73:b4:14:fb:
1a:f7:6d:08:e6:48:3c:5a:b7:25:9d:21:c3:fe:8e:
21:92:de:c3:38:61:97:7c:20:65:c4:0b:18:a8:58:
1a:71:f9:92:94:c5:68:58:4e:eb:f7:4b:ae:3e:8a:
82:a0:45:de:8b:16:f6:be:4a:d3:ca:1f:7e:b4:97:
21:6d:8d:73:8a:b2:ed:9e:d6:62:99:c7:16:dc:4d:
60:f8:ee:a0:a3:bd:73:ce:14:5d:38:70:ad:3b:fe:
ef:cc:b8:c5:78:a3:f9:36:58:e8:4f:49:4f:9a:42:
2f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:06:47:1C:87:81:A5:F3:CA:F8:A9:00:32:52:40:A9:16:B5:90:97
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:95:d0:2b:68:f7:dc:73:7c:a7:76:5d:a4:ca:1d:32:86:75:
fc:d1:c9:fa:da:d6:d0:b3:00:1d:44:bd:83:91:89:53:5b:74:
5b:17:a0:a7:0e:93:f5:17:11:0b:bb:a0:85:2c:18:9f:b3:eb:
3e:28:d4:4e:5c:5f:86:e7:4e:cc:e4:de:ba:44:51:10:ad:7d:
15:23:5e:ee:45:ad:17:38:1b:89:1b:1a:49:8e:53:91:1c:1f:
93:49:fc:31:53:d8:25:90:ac:82:3e:6d:7b:e8:07:70:81:10:
0e:29:45:3c:cc:da:64:51:b2:11:76:8b:dc:5b:2b:b8:4d:fe:
f4:0d:c7:4f:0c:3d:22:1d:27:b5:41:a2:43:65:40:32:11:d4:
2e:b2:af:fe:c6:f3:0f:36:64:de:7e:86:fc:df:44:a9:04:4a:
95:f2:aa:a7:d6:3e:56:d9:ca:8a:3e:99:4c:13:28:47:d4:59:
59:d5:af:da:c7:8a:0b:3b:e5:c6:d0:a7:52:8c:0d:c3:78:63:
2d:d1:3b:6e:f0:f1:ea:31:1d:48:bf:5a:f7:d3:06:82:01:b7:
eb:32:20:e4:68:33:95:d6:ff:4b:d1:64:30:7b:e5:08:e6:24:
8d:fe:36:7d:00:26:c1:c1:0c:b2:b9:4e:0c:19:d6:3f:5d:ea:
1f:bc:26:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 19:56:09 2025 by rpki-client