Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
File: rV3Hd3t3orNHfGernSbMeqAvOIk.mft (raw, json)
Hash identifier: 3G3DHemc65xCx5Tm2FeKHbod30dFPHhd4fy8+OGkyso=
Subject key identifier: 4C:1B:5A:43:2B:D4:42:92:8E:7A:BC:D3:F1:C8:AF:4B:E6:2B:31:10
Authority key identifier: AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
Certificate issuer: /CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Certificate serial: 019921E7539B3FDAC3904DA79D36CB34C33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
Manifest number: 15EC
Signing time: Sun 07 Sep 2025 02:00:32 +0000
Manifest this update: Sun 07 Sep 2025 02:00:32 +0000
Manifest next update: Mon 08 Sep 2025 02:00:32 +0000
Files and hashes: 1: rV3Hd3t3orNHfGernSbMeqAvOIk.crl (hash: JXMKtjfwDd58ACmiQmUCRlvGyWUCG9qHTkqshy2byto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:53:9b:3f:da:c3:90:4d:a7:9d:36:cb:34:c3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5dc7777b77a2b3477c67ab9d26cc7aa02f3889
Validity
Not Before: Sep 7 02:00:32 2025 GMT
Not After : Sep 8 02:00:32 2025 GMT
Subject: CN=4c1b5a432bd442928e7abcd3f1c8af4be62b3110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8a:4d:12:5e:eb:c6:66:1a:ff:d3:97:de:9e:
aa:83:06:6d:10:df:c3:fa:89:6b:23:e1:de:e6:d7:
06:3d:da:7a:d8:cf:34:05:8c:ea:0c:69:77:6c:52:
d0:0f:45:a0:17:45:67:fa:44:66:06:20:a7:95:46:
cd:e5:8f:2d:9e:a4:ce:b4:9a:a6:6f:5a:78:8c:f9:
3f:96:58:98:c2:39:d7:c7:1a:a0:df:ff:99:04:ce:
7b:45:75:c7:a2:67:ba:e0:f5:f5:9f:c2:ed:59:ed:
93:72:3d:b7:d9:e3:af:77:a7:ae:11:e7:ab:b5:97:
17:f9:dc:58:f6:db:6e:b6:99:ba:3b:9e:45:af:35:
19:e7:4d:7d:2f:ab:b4:79:80:44:b8:d7:26:66:e5:
78:e8:5a:0b:1e:c4:57:65:c9:5e:09:19:8d:95:ca:
2e:ac:05:52:9d:98:ca:61:e2:5b:5d:ac:25:00:90:
75:a7:67:80:91:cc:77:f1:61:34:38:c6:24:06:73:
ee:e0:52:31:39:c4:cb:02:3f:30:ab:37:ff:84:44:
8a:40:51:69:23:a6:cb:6d:ea:91:fc:34:ad:46:3c:
51:91:68:60:bb:8b:a7:47:c3:db:f6:44:09:86:f3:
6d:bd:b3:ac:45:4e:27:b1:56:72:3d:9a:9c:5f:b8:
84:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1B:5A:43:2B:D4:42:92:8E:7A:BC:D3:F1:C8:AF:4B:E6:2B:31:10
X509v3 Authority Key Identifier:
keyid:AD:5D:C7:77:7B:77:A2:B3:47:7C:67:AB:9D:26:CC:7A:A0:2F:38:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV3Hd3t3orNHfGernSbMeqAvOIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/655868-3b79-4447-b465-f409458c04d5/1/rV3Hd3t3orNHfGernSbMeqAvOIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1b:de:1c:5c:7b:43:0b:63:7f:c8:6c:04:41:36:38:9c:92:
73:c4:84:a9:f1:cf:a3:2d:9c:b0:87:3e:2e:bf:76:d3:1d:01:
4b:d6:dd:ff:2c:21:c7:68:6a:1f:f5:24:22:dc:dc:d5:0b:58:
e0:3d:07:66:85:e7:65:66:28:eb:fc:0f:1c:b1:51:d1:1f:8a:
09:c3:9b:84:8f:4d:be:97:9a:63:ab:9c:7f:e0:06:f3:87:a0:
6c:9e:80:c0:23:bb:6c:af:17:17:de:e3:7c:c1:3d:36:c7:13:
d8:9b:0a:8b:88:a6:dd:80:56:48:dd:66:d3:4b:31:2a:f4:72:
f3:80:b6:3b:cb:7a:40:3c:01:93:c3:b1:6d:cb:e2:ed:6e:cd:
48:4c:e3:15:93:ae:bd:03:b7:02:88:8a:bb:21:1b:60:96:04:
f4:60:82:cc:32:94:66:eb:58:e2:db:c8:4b:62:32:ff:93:78:
d7:22:25:ad:05:38:60:a2:28:61:86:2e:73:98:e9:06:70:2f:
2a:17:a5:7a:6d:cf:ae:37:17:a4:1b:a0:5d:fa:e0:78:13:8d:
fe:03:e0:55:b8:e0:76:98:6f:5c:bc:f9:cc:59:80:7f:26:07:
11:86:84:d1:25:ac:2a:3b:50:c7:68:44:26:17:30:6c:db:9f:
c2:ac:60:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:53 2025 by rpki-client