Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier: q1xWZZrIZ3y2zhjoNyFUTCW3R/7v5wUt6LhbPSfoXf4=
Subject key identifier: 30:0A:6F:F1:4E:B7:EB:6F:BC:48:31:01:0A:8B:AF:66:D0:B5:28:8B
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer: /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial: 019921B272FE4EF778EAE563675589260F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 01:02:46 +0000
Manifest this update: Sun 07 Sep 2025 01:02:46 +0000
Manifest next update: Mon 08 Sep 2025 01:02:46 +0000
Files and hashes: 1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: ksCnSNRuj8CmVjMPtnwWe8/yD6yDwMawRrWI6t0XEW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:72:fe:4e:f7:78:ea:e5:63:67:55:89:26:0f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Validity
Not Before: Sep 7 01:02:46 2025 GMT
Not After : Sep 8 01:02:46 2025 GMT
Subject: CN=300a6ff14eb7eb6fbc4831010a8baf66d0b5288b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:09:06:91:09:93:a4:d4:6f:a1:da:c5:dc:c4:
21:29:8e:fe:98:9d:b5:07:b0:48:64:11:58:1b:5b:
59:95:44:5f:9b:d8:33:ae:61:24:a7:4e:4f:18:73:
d1:93:b1:cc:92:84:a1:65:43:f3:94:4f:4a:22:0c:
c1:bc:36:5b:0b:70:93:f1:41:e4:af:42:00:f1:4e:
7a:c7:3a:96:fd:47:e0:08:ad:4c:55:8a:49:18:d5:
4b:07:6b:c4:23:12:7d:54:9a:d4:0b:8d:91:ce:3e:
41:cc:03:8e:7c:d3:ea:fd:80:03:59:13:08:ea:2d:
d5:bc:64:c1:85:b6:fe:dc:20:c1:2a:4e:4d:16:ca:
bb:32:8c:49:a2:5f:2d:06:f2:59:e6:44:3d:2a:91:
72:29:3d:1c:52:14:67:09:d0:99:9a:35:4b:ba:a7:
8c:7d:43:77:12:6d:b5:d3:da:57:ec:b7:8d:e3:f7:
ef:26:de:90:c7:25:10:88:5d:e0:6a:d3:e4:96:62:
49:eb:40:65:12:65:55:2d:63:13:f1:bb:4a:fb:17:
2b:74:db:2d:44:ce:e4:ed:0a:9f:dd:50:3f:fb:8a:
0d:8b:d0:a7:cf:64:a3:21:cd:0a:1a:39:05:fb:7b:
73:5c:b6:c7:1b:b0:30:09:35:c8:9b:d4:2c:d4:28:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0A:6F:F1:4E:B7:EB:6F:BC:48:31:01:0A:8B:AF:66:D0:B5:28:8B
X509v3 Authority Key Identifier:
keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3b:84:ad:29:f7:9e:3e:86:9d:b8:51:20:ce:87:5e:4f:39:
8d:44:ea:0f:59:50:52:fc:b6:21:65:f6:db:64:e3:16:6c:e0:
65:08:97:fe:3b:21:5e:51:85:35:af:81:d1:72:ab:19:c5:ad:
c8:46:b9:41:49:e5:fc:79:88:40:64:05:11:74:e7:71:dc:fa:
ba:19:a7:c2:b7:ab:29:48:91:56:3e:aa:57:a7:7f:64:31:e2:
0a:21:02:ed:c3:c6:fa:99:c4:41:37:db:5b:33:bf:b2:1c:9b:
9c:b8:f1:78:a1:20:e6:58:aa:71:8e:bf:e7:e8:f1:7a:1d:32:
f6:10:71:a0:fc:7c:09:93:08:67:dc:e3:09:f9:74:f0:ce:48:
87:22:d0:c0:be:02:ff:2c:3e:28:8e:23:24:16:bc:06:8d:82:
63:7d:a4:09:76:6e:18:b3:70:6c:b6:78:1f:2d:83:1a:3f:dd:
0d:a7:3f:4d:f1:86:f9:a0:45:82:61:e8:f7:21:f1:38:25:b2:
86:07:4e:07:a9:c6:60:c8:7c:f8:a8:c4:c5:e8:c5:01:26:b8:
77:54:98:65:47:f6:f0:8d:57:f5:11:7c:b2:dd:2d:05:45:40:
38:5a:df:43:fb:34:08:47:bc:a5:5b:bf:77:75:9c:ea:35:c8:
04:ff:85:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:51 2025 by rpki-client