Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
File: 3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json)
Hash identifier: 37QXihbYeDL9EfzgvwVf1leRZk+8ioYzmYtAtBfd8ks=
Subject key identifier: 23:30:0A:14:8C:DD:B1:A1:8D:2D:F1:B4:DE:ED:CD:20:26:BE:F6:67
Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Certificate issuer: /CN=def838503cfbc05283fdeadd4644a47bfd783fce
Certificate serial: 019922FA26F672C9E196AA53E67AC2E76884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
Manifest number: 089B
Signing time: Sun 07 Sep 2025 07:00:43 +0000
Manifest this update: Sun 07 Sep 2025 07:00:43 +0000
Manifest next update: Mon 08 Sep 2025 07:00:43 +0000
Files and hashes: 1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: iH7WXGulZ4fyaAh98JytX1ny7g0jmgQjdX7djH23lSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:26:f6:72:c9:e1:96:aa:53:e6:7a:c2:e7:68:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce
Validity
Not Before: Sep 7 07:00:43 2025 GMT
Not After : Sep 8 07:00:43 2025 GMT
Subject: CN=23300a148cddb1a18d2df1b4deedcd2026bef667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:94:d7:0a:70:30:5a:5a:c9:72:7f:85:fe:
f9:ee:3f:3d:8e:ce:f5:a9:0e:ee:ca:02:a7:eb:8a:
32:66:82:99:47:f6:c0:b6:ef:4f:66:0f:94:21:bb:
52:ea:7f:39:21:5c:29:27:6a:d3:d1:6c:dc:6d:11:
92:30:79:2f:09:ff:bb:9c:f7:03:f6:7a:02:ec:a4:
97:30:19:0e:d4:b7:7a:78:53:29:be:f8:29:30:01:
1d:06:94:eb:53:7d:35:ae:6d:80:cd:4c:ea:06:68:
2e:8a:bc:0f:91:45:97:14:e8:ab:9a:6c:b3:18:d1:
74:46:06:d2:d3:31:69:85:97:07:38:1d:96:9b:2f:
43:e7:68:df:f3:f6:14:02:64:16:a6:9a:da:57:7d:
0c:ff:f0:fa:f4:6d:19:af:ed:75:bd:dd:2c:a2:a8:
49:9a:49:70:89:10:f5:53:57:2f:8d:cf:6d:69:71:
3c:5b:14:80:a4:b7:c9:6f:c5:9d:72:ac:f0:2b:ea:
41:ca:ec:9f:83:c5:73:f6:cb:86:6e:04:99:28:84:
69:3e:26:de:78:41:63:0a:5a:af:af:7e:3a:0f:41:
a4:18:3c:30:a6:30:0f:78:28:e8:09:71:6e:6e:94:
3c:70:f8:26:56:74:55:1f:3b:dc:a5:79:d2:fe:b1:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:30:0A:14:8C:DD:B1:A1:8D:2D:F1:B4:DE:ED:CD:20:26:BE:F6:67
X509v3 Authority Key Identifier:
keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:43:91:58:92:dc:43:22:15:7b:9f:74:63:1b:2c:d9:ce:c6:
32:d4:04:1a:2f:13:f0:61:57:29:3a:ee:01:89:07:2d:0a:ad:
5f:74:b2:e5:c4:b3:1f:7d:8c:35:41:6c:13:08:a5:ea:ea:6a:
46:d3:80:4f:a6:ee:e9:53:9f:74:ca:42:d8:d6:a0:67:fc:bb:
73:91:eb:18:4c:7d:5f:b6:be:33:46:2c:61:be:37:01:f7:3a:
e1:58:33:a9:c6:91:1b:db:da:e4:5f:c2:c2:ad:e6:56:6f:38:
d6:0d:d9:85:8b:99:f8:6d:67:97:eb:62:5d:df:b5:1d:ac:fa:
e2:b0:99:6e:c2:6c:0b:5d:8c:02:4a:0e:d6:af:ea:2f:e0:ba:
6b:8b:a0:54:c6:84:8c:c0:ef:f8:29:9b:78:7f:b0:04:5c:4e:
80:d1:39:c6:be:de:4f:a0:47:a9:4c:d7:97:46:12:c4:c4:5a:
cd:f5:bd:61:a0:80:6c:e4:d4:40:5f:b3:ac:7b:9b:c9:2b:c1:
be:43:ad:87:c2:61:e7:1a:d1:99:da:ee:55:84:ea:9f:bd:e1:
54:63:d4:5d:6b:9e:83:ad:85:09:f6:f1:d4:49:4a:f2:e6:4d:
f8:ee:ca:3e:60:b9:39:56:4e:0b:59:88:ce:44:e3:f3:58:6e:
37:06:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:22 2025 by rpki-client