Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: zJ3T9hC8bFW6lX4jVyimK3BF1aKIpwZNwOH3+aDdKSM=
Subject key identifier: 50:0C:80:49:CF:9F:20:44:F6:72:DB:E4:FA:CD:CB:4B:BC:60:43:91
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 0199239F3564D806AF2B7415459D41DE90E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 0FE3
Signing time: Sun 07 Sep 2025 10:01:00 +0000
Manifest this update: Sun 07 Sep 2025 10:01:00 +0000
Manifest next update: Mon 08 Sep 2025 10:01:00 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: Ho9ttxF13VSiBWZsT///bt1psW3RpglixydKBqf11oo=)
2: i8FpzgugtZcFKDdMebgRZ16RoIg.roa (hash: Z0Wnkrs5xvwFBERJB5wvtxVMhqH4ul49O/mmtU48/Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:35:64:d8:06:af:2b:74:15:45:9d:41:de:90:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Sep 7 10:01:00 2025 GMT
Not After : Sep 8 10:01:00 2025 GMT
Subject: CN=500c8049cf9f2044f672dbe4facdcb4bbc604391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:39:83:63:75:f8:55:dd:c0:11:bd:53:3d:23:
ce:b0:62:8a:d8:c1:26:b8:8e:2a:e5:ba:82:4d:4a:
c4:c8:20:51:75:4f:ae:d6:7b:6d:a8:f6:0f:8c:31:
a9:83:75:14:a3:9c:62:d1:0b:c8:f3:ba:ec:50:ff:
ef:f6:5d:41:4d:a7:96:7b:d4:31:15:55:23:ba:35:
56:08:80:dd:e3:04:ea:71:0c:77:90:b7:3f:40:02:
a8:4e:53:7f:24:86:7c:8c:0f:75:65:27:b9:5e:f8:
0e:36:a2:5a:f6:8c:ca:80:42:0a:fb:b0:ad:ee:9d:
7d:e7:be:06:f6:9e:22:0f:44:b0:d5:cd:0b:db:60:
92:8b:54:5b:a4:36:ca:98:a6:03:ba:6e:26:6d:62:
4f:e9:19:1c:c0:62:bf:00:a8:d4:e0:1d:ec:cf:0d:
b7:ed:10:ed:5a:bb:68:33:fc:3d:61:5d:2b:2e:60:
0c:1d:96:3f:4e:a7:ee:bc:88:80:cf:1d:78:ae:49:
82:45:d9:a7:04:fa:6e:7f:d1:58:13:93:51:24:1b:
bc:e9:4e:5f:4f:75:e0:bc:93:45:e5:11:42:7c:9e:
ed:4f:6a:63:aa:64:f6:db:7c:5f:55:fa:60:ba:94:
97:21:64:d0:7a:c7:1d:4c:d9:3b:9b:99:12:c6:2b:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0C:80:49:CF:9F:20:44:F6:72:DB:E4:FA:CD:CB:4B:BC:60:43:91
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:38:d7:40:32:5c:3a:dc:a9:04:b9:87:ac:12:9f:e0:6d:14:
0d:1d:dd:d5:90:da:88:e2:70:5e:86:91:3b:20:bd:d9:9c:0e:
4f:66:69:f3:19:34:0b:f0:23:02:35:d4:70:99:39:53:13:80:
41:a3:79:8a:55:5f:41:a8:22:6d:ac:0a:34:84:f9:45:5d:ee:
f5:e2:44:68:70:62:d5:44:ef:72:2e:4d:b4:9e:f9:c0:94:a8:
f4:d5:29:70:38:2d:83:1d:cc:9f:39:ab:46:ce:e6:16:ca:6f:
95:cc:a1:5a:37:e7:e9:3a:53:d2:7c:08:13:e4:6d:8a:6d:1c:
98:c5:04:df:a6:70:6d:41:6f:47:8b:cc:ce:05:ad:0a:f9:a3:
e3:d1:7c:d0:ff:40:39:07:8c:de:b5:c6:88:bd:72:9c:54:67:
e2:b8:c7:26:a5:95:aa:30:1a:0a:8d:41:df:aa:93:87:3e:2d:
5e:5f:70:18:e8:c6:40:71:e2:ef:07:47:68:0a:e7:a4:38:00:
0f:ef:bc:31:38:40:13:41:3f:90:d4:ec:47:4f:0e:6c:3b:df:
43:4c:91:60:f4:f6:95:39:ce:50:87:7d:f4:1b:02:c9:80:24:
79:cd:20:48:66:2b:51:20:12:07:9d:bb:c7:40:7f:50:4b:ef:
86:31:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:58 2025 by rpki-client