Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.mft
File: 3o4Hg5SzQMHO5Hn55hOh69KzaG0.mft (raw, json)
Hash identifier: Qcgj15mJj7UKlfsLth224tNuc9K9oKSIKXgIA4hQcNg=
Subject key identifier: F8:72:24:D0:00:40:A0:F4:B7:66:81:ED:62:88:93:B0:95:BA:77:96
Authority key identifier: DE:8E:07:83:94:B3:40:C1:CE:E4:79:F9:E6:13:A1:EB:D2:B3:68:6D
Certificate issuer: /CN=de8e078394b340c1cee479f9e613a1ebd2b3686d
Certificate serial: 019922FAE2B675C01487C8B690BD3FBE3BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o4Hg5SzQMHO5Hn55hOh69KzaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.mft
Manifest number: C6
Signing time: Sun 07 Sep 2025 07:01:31 +0000
Manifest this update: Sun 07 Sep 2025 07:01:31 +0000
Manifest next update: Mon 08 Sep 2025 07:01:31 +0000
Files and hashes: 1: 3o4Hg5SzQMHO5Hn55hOh69KzaG0.crl (hash: NtswhQFe+E4+Rup6Ch8FW5GM5xi/VwMcbbf/4SIhlf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o4Hg5SzQMHO5Hn55hOh69KzaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:e2:b6:75:c0:14:87:c8:b6:90:bd:3f:be:3b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e078394b340c1cee479f9e613a1ebd2b3686d
Validity
Not Before: Sep 7 07:01:31 2025 GMT
Not After : Sep 8 07:01:31 2025 GMT
Subject: CN=f87224d00040a0f4b76681ed628893b095ba7796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ed:7b:98:38:e2:a2:a7:ae:68:99:18:42:b3:
55:c8:3b:13:86:32:0a:aa:0e:90:ca:da:48:82:ec:
7d:60:03:23:cf:0a:c5:05:9b:63:58:41:58:fe:a1:
b7:c4:a0:c2:b7:52:00:14:23:7f:46:9b:be:7a:3f:
fd:b2:5c:a2:96:97:64:d7:e0:3e:06:ee:85:f9:e2:
4d:28:26:44:29:ce:14:8e:e7:c3:58:cb:ba:6c:eb:
fb:15:c7:4d:76:7b:6a:59:69:4e:48:b1:00:77:01:
23:7f:57:6b:cb:2a:1a:f7:e6:b4:a2:66:17:9a:5c:
64:89:6e:3c:e9:6b:25:81:5f:c5:5a:68:86:10:76:
2a:d9:4d:f6:a5:62:ec:29:1f:1e:6f:41:f1:5a:73:
66:d8:1d:ad:5f:d8:7d:07:0a:6f:e3:0e:0c:87:0d:
60:7e:62:42:34:36:86:72:d8:2c:50:c2:48:13:52:
0f:1d:c8:91:49:94:82:b6:1a:93:e9:5e:bd:8b:c4:
42:3b:db:99:ad:4d:98:c9:86:44:0e:ba:1b:9b:98:
ae:0d:56:98:c9:44:d0:56:8c:93:79:ff:34:a7:ea:
6e:87:cf:5a:e5:94:fb:09:12:bf:59:76:b9:f7:0e:
fa:89:07:a6:93:be:5e:81:51:e0:00:14:80:ee:c3:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:72:24:D0:00:40:A0:F4:B7:66:81:ED:62:88:93:B0:95:BA:77:96
X509v3 Authority Key Identifier:
keyid:DE:8E:07:83:94:B3:40:C1:CE:E4:79:F9:E6:13:A1:EB:D2:B3:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o4Hg5SzQMHO5Hn55hOh69KzaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d8:76:b9:f6:38:cb:f3:48:65:fe:57:4c:a6:7a:8a:e5:14:
0b:bf:93:fb:c6:7f:58:c2:89:9f:82:23:48:a5:00:6c:a7:57:
15:e4:67:39:0c:d6:ab:ea:ea:10:f6:cc:ea:c4:e6:de:ea:b9:
d3:96:ff:64:db:c9:e5:a5:ea:0d:2c:1f:d0:ea:f7:3c:ec:0f:
16:18:33:7c:02:1f:24:8a:56:c2:89:42:60:f8:64:61:0b:52:
3a:61:00:7e:c9:42:77:e0:d7:5e:29:fa:11:07:79:57:9b:10:
a9:5e:6e:a2:7b:f1:97:0c:ad:95:a3:a8:13:d4:ac:26:e8:f8:
84:67:ab:04:00:9c:82:4f:91:62:ca:98:5b:b2:2f:74:05:a3:
da:1b:98:e8:8b:ae:45:52:5a:f7:c2:46:2a:6e:2a:71:a0:00:
fb:ea:a1:06:8e:9b:1e:8e:1d:4a:68:7e:80:ce:ab:2d:86:cd:
09:ac:e8:d3:24:b2:19:a7:05:eb:78:0a:58:28:81:04:3b:5b:
3b:dd:ca:ba:c5:52:68:2c:e1:91:92:5b:40:29:61:68:5d:dd:
d7:e6:59:02:48:b7:f2:7e:f5:3d:8f:12:14:8e:32:5a:55:bc:
4c:6b:dc:3f:70:b7:07:82:c9:ca:8a:d5:dd:5e:d5:bd:d6:6a:
de:a2:ac:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:30 2025 by rpki-client