Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: nD6l9JWhTP6mZc77FQpFCwLuReTs7ovtVFLDIG7Q00w=
Subject key identifier: B6:8E:36:6A:F0:22:F4:91:25:81:44:BD:6A:49:42:BD:DC:79:47:F5
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 019931FF47461275E9EE0E0034B34585B174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 1681
Signing time: Wed 10 Sep 2025 05:00:37 +0000
Manifest this update: Wed 10 Sep 2025 05:00:37 +0000
Manifest next update: Thu 11 Sep 2025 05:00:37 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: xkFvg1yw+fDt/2DFioUWwDU+NTRo2vdq6ypq0ECYXWM=)
2: cTvIsND0rcbhO2LRnW_ioplG7i0.roa (hash: cEDaT4nTfiZsrwarP2rDKx77YlDRn3t6MrTdDfbMfn0=)
3: ejCuuXb3IPaAQbLGykjSnhsrUI0.roa (hash: 2O/6jwQ1UqJYAgAcDjt8a/MDPHZ138YPWORfwXR/3iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:47:46:12:75:e9:ee:0e:00:34:b3:45:85:b1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Sep 10 05:00:37 2025 GMT
Not After : Sep 11 05:00:37 2025 GMT
Subject: CN=b68e366af022f491258144bd6a4942bddc7947f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:36:13:a8:97:bc:1a:f3:97:35:ca:c0:3d:
b3:6d:d4:15:42:88:02:49:eb:f1:86:4d:fb:05:7c:
ce:7f:10:49:41:5f:a3:5b:f8:8b:79:10:b6:f1:1e:
a5:a9:62:13:9b:91:2a:3c:94:64:c9:96:0f:42:53:
9d:d2:a3:ba:c5:ca:1f:be:59:61:46:05:fd:31:49:
e1:de:bf:b2:0a:3d:2a:bd:31:33:1e:b5:02:65:0e:
da:69:3e:a9:f0:3a:b0:15:d4:6f:3d:8d:c4:6b:52:
df:e9:58:22:94:82:27:07:83:7e:de:22:e6:e9:c8:
c4:16:79:1c:2c:5b:ec:f3:32:b2:71:d2:12:61:8b:
63:44:e7:4a:10:80:20:37:5a:19:cd:6b:f8:b9:28:
3e:d3:96:de:05:58:57:5e:b1:e1:c9:72:ab:94:2d:
2a:25:c1:c3:ab:88:36:ab:77:cd:5f:ca:70:0f:4a:
d5:b3:7b:02:9f:d2:d6:2a:14:e5:6e:90:2b:4e:93:
a8:49:6f:fe:28:59:d3:7e:66:50:9d:c2:f9:37:b9:
3d:e3:4b:ff:0f:36:28:8f:c9:de:9d:81:3d:c7:03:
80:7f:bc:6e:6c:00:da:bd:c5:da:9b:66:6b:7f:e6:
67:e3:c2:2b:1e:6a:da:40:ba:60:fd:d3:be:f0:ab:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8E:36:6A:F0:22:F4:91:25:81:44:BD:6A:49:42:BD:DC:79:47:F5
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:75:9a:4d:1e:f0:d3:26:25:a8:c2:fa:09:74:0b:00:42:12:
87:6d:bc:67:21:77:cb:41:f1:7f:d5:e5:54:03:33:7c:dc:4f:
05:88:ed:ca:4b:06:ca:db:3c:bf:0c:0b:e2:bd:5f:62:bd:00:
10:6a:d8:94:b4:6b:23:58:a8:91:2a:a4:c6:7e:eb:32:a2:68:
24:26:9d:e0:1c:b4:ed:df:44:bf:64:40:00:57:9b:e2:92:2d:
5f:e1:1a:16:8a:7a:74:d9:74:40:ee:d8:5a:01:4e:18:77:e5:
8c:3c:82:a7:31:70:ff:62:1e:d4:9f:3a:28:b0:c7:1d:6b:7a:
b0:98:b3:fe:70:ff:03:2d:8e:34:2c:97:0c:37:5e:bc:35:23:
c4:00:d3:47:4f:8a:89:56:21:72:95:f1:d4:74:f7:0d:55:6a:
91:d2:0b:5b:88:6c:de:9a:04:78:42:ca:3b:66:48:08:f3:28:
c3:e9:eb:79:ee:24:e8:27:73:4b:0f:4c:ff:c1:8b:e6:60:c4:
1f:0c:27:a3:bb:71:35:b3:e5:3e:74:d6:1f:98:e8:d7:6d:f3:
eb:64:3b:dd:a1:8f:5e:e4:b9:3c:e1:49:59:e3:ac:c2:31:30:
48:71:b0:4d:08:0b:cf:55:b4:ab:dc:2b:b9:94:27:00:3b:18:
b3:91:95:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:33:44 2025 by rpki-client