Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: ThthX4vm8zkiflFelACB7IyzH+CRDa7kz0LhTWthRh0=
Subject key identifier: F1:73:BC:B0:54:B6:3C:37:90:B4:98:56:DD:49:2B:9C:28:8B:6E:A5
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 01992330E83364F0561EC245DE3215668884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 08:00:31 +0000
Manifest this update: Sun 07 Sep 2025 08:00:31 +0000
Manifest next update: Mon 08 Sep 2025 08:00:31 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: AFgs2aMhP9aeU/Rx/GGDc8XGMX6F0ML9fGrHyOyvpgY=)
2: urKpUlRihT17e4-sYhWpyMcE8Ac.roa (hash: OKr8BwUnDAnQRh/fja/ALDyKIeKec2Yi0x2apcZhAec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:e8:33:64:f0:56:1e:c2:45:de:32:15:66:88:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Sep 7 08:00:31 2025 GMT
Not After : Sep 8 08:00:31 2025 GMT
Subject: CN=f173bcb054b63c3790b49856dd492b9c288b6ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:cb:b9:33:d3:f7:f2:97:69:1a:5a:72:78:
ab:cd:df:de:4d:c4:0a:a1:3b:dd:dd:8c:d3:66:fb:
88:42:a6:7c:aa:f1:ca:90:f5:b7:42:df:82:4f:21:
fd:2c:41:76:43:6e:f4:b2:1d:a2:40:89:a1:e2:5a:
d8:8a:cb:dd:98:49:05:7b:d2:f3:ab:57:5b:1c:2a:
86:e1:e7:b6:12:3e:1d:b1:04:29:b4:3d:22:7b:57:
8e:d3:04:7a:47:9f:a4:e2:99:3f:9b:ae:03:98:4d:
e0:55:19:67:50:9f:96:45:d2:ef:2a:81:48:fd:b0:
46:00:71:8e:48:1f:65:ae:59:ef:4f:94:0a:89:23:
8f:2d:5b:99:e0:51:99:6f:f2:54:35:c7:29:56:45:
b1:68:cb:56:b2:14:40:a1:38:46:d9:5c:6c:08:57:
bf:39:e2:cd:b0:73:ec:b2:67:6b:48:0a:9c:c4:84:
b5:ae:d2:38:61:a7:9c:9d:84:4f:15:ee:71:9f:4c:
ef:19:59:f2:4b:8f:04:6c:96:dc:c5:de:f7:a3:fe:
1c:32:7d:7d:c8:2e:f0:fc:89:b8:54:ae:e2:38:5b:
45:99:cf:de:d9:9e:ac:5f:0b:73:3b:75:d2:c2:6d:
c3:f6:84:93:5f:88:86:db:1e:ac:ac:84:b5:26:5a:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:73:BC:B0:54:B6:3C:37:90:B4:98:56:DD:49:2B:9C:28:8B:6E:A5
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:aa:88:23:11:f9:73:e2:36:79:38:f4:b6:fe:9a:a3:0b:0a:
22:ad:72:44:cb:25:17:05:b3:85:3a:d7:40:8e:e1:c9:9e:fc:
8a:92:8e:73:e1:21:8a:41:5d:ca:a3:44:b3:ab:fb:e7:96:f5:
06:13:e4:56:2c:cb:15:11:75:72:b5:9c:77:89:4c:70:08:9f:
d3:4a:5a:c8:bd:b0:c8:f2:c6:f7:c1:0d:63:c5:c4:54:80:4b:
4a:f5:31:e2:2a:c9:9d:cb:8a:15:98:d4:04:1a:00:db:e2:24:
22:d2:af:c1:9f:e5:f4:bb:9b:c1:30:f1:0e:00:1e:23:40:5c:
1c:d1:cd:36:5a:23:70:48:d9:e2:de:d5:08:2f:36:9b:94:ee:
5d:1e:bf:dc:f7:ad:8b:fb:56:65:39:a9:4f:d7:36:b9:41:e7:
23:a8:58:6b:61:30:61:9f:d7:45:1b:9c:6f:80:47:4e:5f:5b:
11:ed:24:ef:7b:78:76:1f:c1:a5:d8:5f:84:65:94:a6:e4:e8:
73:84:bb:a9:64:f9:aa:74:6f:fe:c3:af:f7:ca:7b:d3:8c:5a:
35:3d:a3:ac:6a:c2:fd:ed:55:d3:11:7f:b3:7d:4b:f9:7c:be:
da:5c:7d:75:23:9d:e3:e7:10:7f:83:b7:de:ad:b0:32:b9:1f:
9f:3d:3c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:45 2025 by rpki-client