Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
File: 3wBu2HGlzgDSu_lovAlA7lhqPOs.mft (raw, json)
Hash identifier: w/QJultddGH+u4ElY3drc29v9zog2Oyis7vPX6Tow3g=
Subject key identifier: F6:2A:CF:41:61:F6:D2:2D:E0:BC:4B:4F:93:3F:83:5C:08:DC:03:65
Authority key identifier: DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
Certificate issuer: /CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Certificate serial: 019A2AE7A92F2C4FDF8139E3680F630BB5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
Manifest number: 01C0
Signing time: Tue 28 Oct 2025 13:00:16 +0000
Manifest this update: Tue 28 Oct 2025 13:00:16 +0000
Manifest next update: Wed 29 Oct 2025 13:00:16 +0000
Files and hashes: 1: 3wBu2HGlzgDSu_lovAlA7lhqPOs.crl (hash: d5DYcnG8Hbf3goP8W0MuLQ1U665iW0Vp+GkpnI/q/XU=)
2: xlhZPy2tgq9KnJAF-W8wAfARZ5I.roa (hash: gkGnuQfXZLAxpDNGgxfjG9Qut5Hb3M/1cK2A/dmc9SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:e7:a9:2f:2c:4f:df:81:39:e3:68:0f:63:0b:b5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df006ed871a5ce00d2bbf968bc0940ee586a3ceb
Validity
Not Before: Oct 28 13:00:16 2025 GMT
Not After : Oct 29 13:00:16 2025 GMT
Subject: CN=f62acf4161f6d22de0bc4b4f933f835c08dc0365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:70:15:79:7d:f3:89:e9:f6:33:75:e7:31:
02:19:60:7a:7a:2d:09:7c:3c:de:2c:c1:5e:61:37:
60:eb:c7:26:52:8c:ac:55:90:4a:0a:81:88:f7:82:
8a:2d:19:27:9a:f1:ac:5b:fe:ee:ea:48:9c:5b:38:
ed:b9:03:f2:b8:f6:de:bd:57:a2:f0:7f:cd:94:76:
37:c9:34:4a:25:32:e0:f2:e3:3b:9f:0f:47:da:f0:
5c:bf:a6:5b:eb:ba:08:53:2e:fb:4b:ed:03:65:83:
e7:4d:58:be:bb:3d:74:1c:80:e7:39:c6:03:8b:40:
a4:93:58:d9:6d:47:61:ec:28:6a:6e:61:8e:a5:f4:
2f:13:0e:66:e4:24:5a:4a:0a:d4:c8:a0:ec:35:cf:
c7:5b:3a:4f:b8:7d:57:00:43:32:21:83:6b:6c:59:
9a:56:cc:cb:ef:73:96:8a:0a:36:01:83:19:e5:ea:
7d:05:89:6b:af:3d:ab:f1:ed:fb:53:d1:70:f0:4e:
79:ea:64:34:32:16:5f:31:69:ff:ec:e8:fc:5b:61:
d9:0a:55:4a:a4:81:19:10:6a:b7:ab:1c:3f:c2:aa:
19:c7:2d:63:a2:8d:3d:0b:61:2e:9e:e1:11:d0:5f:
9b:93:c1:2c:75:8d:54:aa:b5:1d:34:ee:69:a8:ef:
2b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2A:CF:41:61:F6:D2:2D:E0:BC:4B:4F:93:3F:83:5C:08:DC:03:65
X509v3 Authority Key Identifier:
keyid:DF:00:6E:D8:71:A5:CE:00:D2:BB:F9:68:BC:09:40:EE:58:6A:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wBu2HGlzgDSu_lovAlA7lhqPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/3wBu2HGlzgDSu_lovAlA7lhqPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a5:8f:92:5e:17:c4:b6:da:ef:ca:45:01:83:e8:a2:9b:68:
9f:f7:fd:4b:bd:56:20:b2:78:53:f6:ed:54:11:ab:45:3f:e8:
6f:77:cf:96:0b:14:58:69:ef:4b:3a:12:ea:65:76:03:d5:a5:
12:28:e9:a5:ce:67:89:c6:c5:ed:cd:5b:e6:8d:ad:6b:0a:ae:
7a:f7:80:7c:44:ee:18:4c:b5:b1:e3:d8:a9:1a:23:64:e6:a2:
58:ca:a8:61:f0:e8:c6:5f:75:30:69:ea:bd:b8:0f:97:c2:8a:
10:3d:44:59:23:56:e9:39:b5:87:f5:c0:3b:4f:e9:96:ae:7f:
8f:ea:0e:a8:2d:36:e3:05:8f:2e:3d:62:56:6b:78:29:3f:e7:
d5:12:2e:87:c1:39:25:e2:31:3e:aa:f7:64:73:80:a3:f8:9d:
68:96:89:7e:d3:e9:e1:34:54:65:06:7e:39:ad:be:12:2e:d5:
a3:31:cf:1f:e5:16:3e:00:47:2d:cc:52:26:6a:98:c2:64:84:
25:0f:55:92:dc:5d:76:35:10:be:9e:93:40:ba:51:90:8a:cc:
9e:09:7b:36:d7:dc:ac:31:76:8d:c9:52:52:f1:a4:17:46:b2:
ac:7a:82:a1:07:0d:37:df:f7:02:ee:52:ac:dd:80:6e:c0:53:
29:3c:35:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:17:17 2025 by rpki-client