Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
File: PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft (raw, json)
Hash identifier: TGYwdv1mS7s0Nh0VBh6lLFh9lq+N4vQ5n4ZkJoB8uZE=
Subject key identifier: 3E:1C:4A:C5:1A:48:68:04:77:E8:65:7B:6C:A4:FC:1F:2B:06:72:52
Authority key identifier: 3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
Certificate issuer: /CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Certificate serial: 019923A06F205552DE336D0F2D0D5C994169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
Manifest number: 0FEF
Signing time: Sun 07 Sep 2025 10:02:20 +0000
Manifest this update: Sun 07 Sep 2025 10:02:20 +0000
Manifest next update: Mon 08 Sep 2025 10:02:20 +0000
Files and hashes: 1: PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl (hash: keK5xYTsM3oqw8nGCk+HIvaxbUN0rhCg9xjUk07T3wQ=)
2: lFB-3tPNMg7_ita4wpHXyFs1Wtg.roa (hash: 2vQA+DCbD+mwH0gGh6uSgSbBtdD3lkqqjcblNuRAAAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:6f:20:55:52:de:33:6d:0f:2d:0d:5c:99:41:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8dfe109de831d32fd78a58cc5c1d149a4553d2
Validity
Not Before: Sep 7 10:02:20 2025 GMT
Not After : Sep 8 10:02:20 2025 GMT
Subject: CN=3e1c4ac51a48680477e8657b6ca4fc1f2b067252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:1a:63:ae:5a:91:ae:46:cd:21:c5:0c:e8:
a5:4b:f2:b0:96:b9:5c:cd:3e:03:1d:20:ac:17:0e:
bc:e7:14:9e:e1:91:b3:57:f4:8d:e9:be:6e:a3:6e:
81:6f:a7:57:c7:b1:3c:1a:9c:28:88:dc:90:4f:a7:
5e:36:f5:a6:12:4e:0e:e6:ac:cb:4d:32:49:12:d0:
5b:bd:8f:9a:df:c4:5e:79:a2:81:43:2b:98:61:b0:
14:1c:cf:24:08:e0:e9:ba:d1:93:0a:b6:3c:8f:a4:
b1:b3:cf:0c:2c:03:6c:77:c4:35:af:7b:9d:f5:cf:
42:2f:3b:cc:89:cd:6a:55:f1:12:91:b0:d8:f7:5c:
1f:00:a0:a9:42:3a:5d:ac:a6:b0:49:d7:cb:57:7e:
d2:09:f4:98:e1:35:32:5a:61:84:37:ca:36:59:be:
4f:78:aa:7c:db:c4:d0:8a:2d:50:6d:60:4e:68:0a:
62:b7:d8:3d:a6:ce:54:0f:38:71:fe:5d:ae:80:d1:
c7:af:68:6b:f5:2c:d3:c0:60:51:2e:e6:1d:d1:bb:
12:42:ec:f3:b5:71:34:55:8d:6a:5f:d1:db:9e:29:
0d:3b:0f:c4:0b:90:1f:70:8b:30:1f:0f:79:d8:71:
da:e6:a1:9b:ec:a9:2c:76:4c:a6:8a:95:1c:77:2f:
61:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1C:4A:C5:1A:48:68:04:77:E8:65:7B:6C:A4:FC:1F:2B:06:72:52
X509v3 Authority Key Identifier:
keyid:3C:8D:FE:10:9D:E8:31:D3:2F:D7:8A:58:CC:5C:1D:14:9A:45:53:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI3-EJ3oMdMv14pYzFwdFJpFU9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d57969-ea5f-4518-92e1-53a0680f9710/1/PI3-EJ3oMdMv14pYzFwdFJpFU9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:59:b3:28:be:7c:67:4c:0b:36:1d:4e:45:be:7c:b0:1b:2b:
91:27:7a:2a:15:79:3b:3e:86:c3:e6:af:2f:fc:df:cf:8a:12:
d4:11:dc:6b:33:d0:7e:0b:16:d1:cc:c4:c0:db:f0:ce:a6:29:
1d:fc:10:e4:ec:ef:f4:fb:ea:51:02:45:19:ff:d2:68:dd:7b:
af:73:91:ad:26:76:34:73:52:c9:8e:50:30:70:7f:fa:9d:d3:
35:de:a7:7c:19:d9:8b:39:27:f6:85:61:11:33:38:cb:69:cc:
aa:5b:68:ac:8e:67:a6:47:e3:03:e8:a9:a1:cc:a5:49:30:05:
7a:e4:bb:f1:41:63:4d:5c:69:16:45:bb:3f:e2:30:56:93:61:
44:75:e9:32:d2:b6:4e:a8:eb:56:3f:8a:09:46:5f:6f:fd:ba:
a4:8f:6b:b7:41:e0:47:cd:e1:fe:2a:f0:de:c2:cb:83:b7:de:
76:ef:20:5c:24:13:48:25:9e:c6:67:99:c6:ef:7c:75:ed:ec:
ed:cd:da:b7:b6:26:9b:50:c5:a0:04:5c:3f:66:d9:2b:a3:d5:
f0:ab:70:97:76:a4:41:ef:5c:cf:91:c5:7b:41:fa:b0:6a:72:
80:a3:b0:5d:af:40:0f:61:c8:54:8a:f7:62:b9:f6:24:f4:6f:
fe:59:a7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:13 2025 by rpki-client