Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
File: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json)
Hash identifier: d71KXUU6FPNS91HMWjF5rCN0rjtqqzTJOC1adEhMsAM=
Subject key identifier: E6:44:FF:EC:54:B4:3F:BB:5A:16:53:5E:FB:53:B0:10:4F:38:A4:12
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial: 0199221E7C511537250B2B7A857CDD07FC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
Manifest number: 0FAF
Signing time: Sun 07 Sep 2025 03:00:47 +0000
Manifest this update: Sun 07 Sep 2025 03:00:47 +0000
Manifest next update: Mon 08 Sep 2025 03:00:47 +0000
Files and hashes: 1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: DT4m7KET9K6cPLzAvIjegMfHdQOw1SFj7mfLFXszsuw=)
2: s199ikwEffBbz4N51o9Z93m71rk.roa (hash: Tb9twTEkz+iPQZdYGEiHKKRquApELQ9qVFqV3IE19gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:7c:51:15:37:25:0b:2b:7a:85:7c:dd:07:fc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Validity
Not Before: Sep 7 03:00:47 2025 GMT
Not After : Sep 8 03:00:47 2025 GMT
Subject: CN=e644ffec54b43fbb5a16535efb53b0104f38a412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:31:47:14:d7:19:19:6c:7a:ff:a0:61:2d:
1d:0c:dc:0f:f5:5e:2e:7e:c5:96:ac:ec:e1:ac:f8:
8f:42:8a:67:05:ec:86:50:c2:7b:59:59:27:6c:d7:
ad:ce:32:e5:4a:b3:1f:b9:20:81:22:88:a3:39:a0:
6b:34:47:77:95:de:65:78:10:1d:7c:c7:0e:08:0f:
11:59:1e:21:37:5d:a7:59:f9:44:25:e5:bc:a1:e5:
2b:e8:0d:9c:ea:53:46:87:61:a0:66:ba:e9:82:d6:
6b:c4:0d:28:06:2c:fd:0a:3b:af:ba:af:95:d1:a7:
81:3d:c2:1c:14:02:24:8b:fa:bf:04:86:c8:62:e2:
f0:d8:5a:5a:dc:88:50:8f:ee:88:25:9d:79:98:2a:
2c:d3:98:4e:7a:95:84:a3:a7:4d:74:3c:9a:8b:d2:
99:0a:59:07:54:c3:64:64:02:6f:43:ba:07:4c:7f:
d5:89:e5:f0:b4:1c:e5:d9:02:48:d7:ce:b8:26:76:
0b:b8:d2:9d:72:81:c2:91:bf:3f:28:c0:51:df:da:
bf:59:58:c4:3c:ed:34:07:7b:f7:2b:ec:61:a6:f2:
b1:ef:4a:e4:22:4a:de:5e:31:f3:18:d5:62:ef:eb:
17:bd:5c:dd:0e:c4:11:77:c3:08:01:8a:11:19:96:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:44:FF:EC:54:B4:3F:BB:5A:16:53:5E:FB:53:B0:10:4F:38:A4:12
X509v3 Authority Key Identifier:
keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2f:a7:f0:38:20:f3:55:16:8f:9f:d5:e0:ad:43:83:bc:96:
a4:75:3b:c8:d4:2c:02:24:93:76:27:d8:74:a3:ce:91:e1:90:
d4:0e:27:ef:33:1b:c3:ee:19:cd:95:8d:45:ee:01:dc:5d:dc:
59:19:a5:87:98:69:8b:a8:ce:2f:33:06:be:6f:8a:e1:28:7d:
a1:85:6c:da:63:bd:78:08:a9:fc:08:4b:f6:e2:c5:43:81:14:
99:1f:e9:71:60:c5:b3:58:9c:ac:12:67:47:99:6a:fb:78:a1:
b5:1c:d9:2e:9a:51:4e:8b:61:c3:25:14:60:a3:09:9a:c6:a3:
53:91:26:22:1f:a6:41:af:0f:de:bd:e9:6a:cb:ca:43:6c:88:
da:68:c8:b2:12:34:5b:a1:1c:c5:82:89:a8:48:87:23:78:c2:
12:f6:d9:b8:1e:81:a7:1f:a2:3b:29:a4:7b:b2:34:ea:da:c8:
ad:ad:30:d0:ef:74:71:f2:89:74:25:52:c0:42:b5:ea:6e:41:
1b:79:38:80:51:30:e9:9d:6f:89:3d:dc:13:2f:c0:c4:0c:94:
f5:6a:63:f3:cd:27:e5:87:5c:e3:7e:c8:fa:d9:e5:13:d4:8a:
b7:d6:e8:ce:34:fd:70:c7:cd:da:5c:4b:55:44:3c:77:7a:6f:
c8:23:63:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:20 2025 by rpki-client