Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
File: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft (raw, json)
Hash identifier: N0VPOhyehU+L/23PWaEnl74DUtzMzaSS0sLppyYOqO4=
Subject key identifier: B9:EE:5D:68:39:B6:0C:55:9B:93:18:EC:AD:BD:0E:FC:F0:4C:E4:3D
Authority key identifier: DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
Certificate issuer: /CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Certificate serial: 019923A0E8733A3D93ED8199053AEE122E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
Manifest number: 0126
Signing time: Sun 07 Sep 2025 10:02:51 +0000
Manifest this update: Sun 07 Sep 2025 10:02:51 +0000
Manifest next update: Mon 08 Sep 2025 10:02:51 +0000
Files and hashes: 1: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl (hash: 645tww9l6lALAbvxPhEUzTNzZDZNQiNlqU2BJIBPMJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:e8:73:3a:3d:93:ed:81:99:05:3a:ee:12:2e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Validity
Not Before: Sep 7 10:02:51 2025 GMT
Not After : Sep 8 10:02:51 2025 GMT
Subject: CN=b9ee5d6839b60c559b9318ecadbd0efcf04ce43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:67:f3:3a:73:09:f8:e7:e4:b4:81:5f:d7:
5a:9d:b2:b9:41:95:b3:61:42:02:64:45:9a:c4:3f:
87:02:95:b1:92:f7:2c:a8:3c:ce:8e:dd:b4:19:98:
69:04:03:36:c0:28:1c:f4:22:98:4e:30:55:78:5c:
91:a3:41:d5:5f:e3:39:76:00:c6:9e:92:82:ac:54:
65:93:ed:cd:f6:a1:45:74:c2:1d:87:e2:91:4e:61:
39:96:c4:51:e2:a6:92:c2:ae:75:97:aa:44:ae:64:
45:d0:fb:dc:84:f4:77:5d:47:c8:36:bc:a2:40:cb:
2b:fc:df:90:40:1f:09:c0:d0:da:d8:c5:bc:95:6f:
de:25:37:67:b3:e3:66:3a:29:8e:05:76:75:1c:9a:
d8:a3:2b:16:78:ac:0d:6c:e2:66:48:21:92:af:0c:
55:74:08:31:3c:c0:9b:e6:31:5c:75:3e:44:49:7f:
56:2f:a1:a6:6e:94:e9:3a:1a:85:8d:e3:ef:6a:b0:
6c:dd:b9:21:d7:b1:2c:06:76:02:1e:dc:aa:00:8f:
89:8d:56:49:7c:c7:44:73:85:9d:af:80:5e:88:a4:
91:94:e1:f4:98:e0:39:3c:cd:c2:03:6c:48:02:5f:
f0:ed:dd:37:de:a8:68:46:a4:8f:12:85:2f:ab:d6:
73:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EE:5D:68:39:B6:0C:55:9B:93:18:EC:AD:BD:0E:FC:F0:4C:E4:3D
X509v3 Authority Key Identifier:
keyid:DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d8:8b:92:99:d4:9b:b0:97:de:77:56:fe:ad:22:ae:f8:17:
94:11:54:e9:fd:03:51:0f:e4:ab:d5:af:24:4a:fb:eb:99:a6:
e1:a2:87:ce:16:a8:1c:32:bd:40:68:36:61:9d:d3:6b:80:46:
17:b3:4a:0d:49:63:56:a2:c5:fb:f6:cc:83:7b:82:50:62:ea:
aa:f2:92:a1:25:79:0e:d5:c1:89:8a:86:14:b8:23:55:67:f8:
6d:6b:dc:00:52:80:b2:71:0c:b1:40:07:7b:36:95:21:1b:1e:
1b:7d:98:a6:b2:6f:49:f1:2b:e8:6b:7e:33:73:57:d4:f5:5f:
9a:5d:52:71:19:5b:4f:ff:fa:f0:5f:f8:d0:4f:8f:17:8c:a1:
76:92:b3:89:96:60:34:33:9e:fd:32:30:cf:2e:a3:25:b0:62:
f4:66:19:d9:9c:c4:84:03:db:c9:26:77:ba:bb:c5:12:8f:fa:
c9:d3:13:ed:27:11:91:63:fc:89:80:20:ff:23:a2:d6:8d:77:
90:c0:5b:fc:7e:33:79:06:b4:dc:04:ed:8c:68:ab:6d:97:88:
f5:3a:47:93:ce:c4:67:e2:31:21:41:af:7a:12:b0:f5:f8:33:
0e:f8:23:54:33:8c:a4:2a:06:9d:41:39:68:b0:d7:b6:19:b5:
bd:ec:63:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:41 2025 by rpki-client