Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
File: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft (raw, json)
Hash identifier: YQJlw0y+xwyODnXPqpBoY5Hil3TBr5ww+STqH8Kkabc=
Subject key identifier: D3:89:AE:29:C2:F7:A9:A0:5E:96:B4:E0:FB:F7:23:CC:AF:A7:1B:C3
Authority key identifier: DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
Certificate issuer: /CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Certificate serial: 01991DD4C2F297FDA1E8F259E3757E4298F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
Manifest number: 0A74
Signing time: Sat 06 Sep 2025 07:01:46 +0000
Manifest this update: Sat 06 Sep 2025 07:01:46 +0000
Manifest next update: Sun 07 Sep 2025 07:01:46 +0000
Files and hashes: 1: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl (hash: gNQ75om3SBsXlUf0JUUfJuELEHU1HQXB8f5Dawug6Dk=)
2: EiOjn6Cn36HWuMJFodH0EVbfYdc.roa (hash: prKCNtfilLl42pcGEF7Kjg7za6QhPHVZeIUhroTyVuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:d4:c2:f2:97:fd:a1:e8:f2:59:e3:75:7e:42:98:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Validity
Not Before: Sep 6 07:01:46 2025 GMT
Not After : Sep 7 07:01:46 2025 GMT
Subject: CN=d389ae29c2f7a9a05e96b4e0fbf723ccafa71bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:61:72:91:70:91:e5:3e:97:37:dd:41:e8:
87:b6:80:8d:c8:e2:57:d1:e9:76:6b:61:3a:a8:29:
1e:db:87:93:66:6e:1a:e9:fd:36:48:6a:6d:75:c6:
a1:db:2d:e4:1c:f0:69:ee:82:7b:b3:9a:04:fc:8c:
34:eb:38:4c:b2:19:cf:42:0b:e5:74:2d:89:e1:23:
55:03:37:4b:77:a7:d5:50:0d:40:7e:66:da:b6:db:
7c:e4:23:2e:08:51:2f:5f:78:8d:c0:3b:36:77:22:
16:19:a2:51:f8:e2:a7:82:57:97:44:ec:cd:cd:66:
98:8a:b5:b6:5a:ce:9f:62:0b:3a:60:98:23:67:e5:
22:26:30:d7:99:bf:78:b5:42:89:aa:d5:5f:6a:b5:
38:45:4d:92:a4:d9:f4:67:d2:6b:93:c7:f2:4d:05:
de:8d:7b:09:82:18:d1:26:33:c8:30:93:9f:49:6c:
98:91:6d:80:de:41:76:60:cb:b7:68:73:ac:38:1c:
5a:ff:47:f9:11:c6:92:88:a1:8b:75:43:90:64:cc:
12:16:eb:1a:da:c3:a8:93:5e:61:75:ba:34:e3:a8:
a8:31:8b:29:91:ff:9f:36:ac:e7:75:51:33:1e:24:
48:8d:a5:30:69:94:d1:4b:93:2f:12:a2:8c:c6:f7:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:89:AE:29:C2:F7:A9:A0:5E:96:B4:E0:FB:F7:23:CC:AF:A7:1B:C3
X509v3 Authority Key Identifier:
keyid:DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5f:01:62:00:2d:be:7b:ed:2b:c5:e7:7f:85:04:41:1a:9e:
ae:f8:69:b2:b3:70:07:ef:40:72:72:b6:32:75:5f:30:d7:80:
11:f5:90:57:1f:a6:47:76:34:6b:7e:e2:8b:00:a9:21:67:39:
ba:83:f5:6a:86:e3:3e:a7:87:d4:e5:27:d9:ad:cb:87:12:1f:
4f:23:33:21:c4:83:e1:b8:dd:23:51:80:c5:cb:7f:37:d1:a5:
7f:bd:04:74:7e:9a:cb:22:b4:6a:61:ed:d6:32:a8:c4:9b:89:
46:40:b0:ea:87:75:2f:a5:b0:e5:9f:97:2e:d2:77:8a:68:07:
bb:b3:d5:5a:9a:03:24:92:f6:00:78:57:6c:1d:66:b1:f0:10:
c3:9d:0a:fa:56:f3:60:9b:f3:a6:08:4f:e6:01:ff:77:58:ea:
d2:a6:6f:5d:0a:57:57:07:c9:8c:59:9f:ba:a3:56:3f:7c:d3:
8d:b5:6c:89:2d:29:9f:b5:da:95:4d:cf:15:79:3a:db:2a:33:
28:ac:be:45:bd:79:55:bd:cf:4b:b8:e8:62:7a:3b:e1:77:5d:
00:f1:cd:67:c2:46:ee:85:f2:cc:a2:1b:73:a6:56:3b:4e:a1:
59:0b:cd:69:72:19:4e:58:24:31:c1:da:59:cf:64:a2:dd:f6:
30:63:52:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:00:34 2025 by rpki-client