Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier: oWdRYp9++Mi/wyHTVyPW0tto/hUzqnOGb6DxcM71eYY=
Subject key identifier: 8E:E9:AB:5E:06:0A:06:02:8E:CE:31:61:C8:97:00:53:A0:6F:47:50
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 0199183F5AC0748F979564A1BE71B2CF41E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number: 166D
Signing time: Fri 05 Sep 2025 05:00:29 +0000
Manifest this update: Fri 05 Sep 2025 05:00:29 +0000
Manifest next update: Sat 06 Sep 2025 05:00:29 +0000
Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: jEuaeCVziXR+SKtUUklzjx35fv8O0HGT0778HTQRjm8=)
2: b5tCOGfZlXjj3Rp4LI2wyRIwTZc.roa (hash: Ux81ccFaPxD7MPa+kjPcqatGWLTvR5GEGbxi2D0f0BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:5a:c0:74:8f:97:95:64:a1:be:71:b2:cf:41:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: Sep 5 05:00:29 2025 GMT
Not After : Sep 6 05:00:29 2025 GMT
Subject: CN=8ee9ab5e060a06028ece3161c8970053a06f4750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3f:de:52:e9:72:41:18:84:97:76:74:13:f7:
a5:f3:e5:fa:32:5b:e8:e0:98:64:4f:5f:be:b2:4c:
cc:38:ad:f9:76:27:0a:d8:38:cf:2c:79:01:fb:0c:
3b:05:7c:be:c5:e3:19:ba:08:69:bb:34:1a:d2:5b:
81:a8:db:1e:44:33:bb:15:18:db:68:ed:ba:85:57:
49:48:ae:fa:48:67:61:87:c0:af:8d:25:40:91:08:
63:8a:b6:cf:a0:d3:22:eb:9f:19:09:55:d8:65:0a:
aa:40:29:b9:76:62:14:b3:e6:5b:08:44:fd:92:13:
9e:de:12:fd:ed:b3:52:8c:3f:7b:c2:b6:2a:31:1b:
3a:90:c8:56:09:22:e9:ad:bf:e3:75:99:2d:9e:a8:
f6:66:1a:07:6a:e8:f8:30:ae:e9:ca:39:0c:0b:c4:
b1:aa:7e:c4:04:5d:33:08:09:00:da:09:54:42:b9:
ab:ee:22:b9:ac:2d:ed:6d:85:90:51:68:51:a5:6c:
bb:25:f8:10:15:c7:46:89:0f:34:33:25:86:29:ad:
42:4e:a4:58:32:6a:b3:d7:58:61:9c:a2:a3:c6:53:
29:99:8b:8b:0b:e9:09:bc:d1:e3:37:f0:a1:39:d2:
56:ce:93:c3:0b:f6:68:93:85:6c:a9:ae:a6:6d:8d:
e3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E9:AB:5E:06:0A:06:02:8E:CE:31:61:C8:97:00:53:A0:6F:47:50
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:da:2b:00:ad:b9:dd:33:f5:c1:d4:d7:cc:22:04:7b:39:42:
21:89:1b:d3:b2:f9:f1:34:ae:09:d4:40:1f:9f:0c:ec:5e:9c:
95:49:7b:09:94:be:2f:6c:7d:54:2a:29:b1:71:1b:1b:f4:73:
28:57:ba:89:0f:6b:74:33:d6:6b:eb:13:0f:0e:e6:23:66:11:
42:57:51:c3:d3:17:ec:1d:52:22:f5:d8:f8:7a:d2:df:5b:cf:
ae:75:f6:98:cb:95:c0:e2:d0:1d:24:d7:bd:94:cc:ff:ee:b5:
36:36:47:6f:f6:ce:ff:dd:ce:b9:ee:5e:8b:f6:2e:40:c2:2d:
92:07:44:2f:83:83:56:ad:12:54:08:c5:a8:0f:b1:a2:a1:6c:
5e:33:b5:f5:73:da:13:b4:6c:18:b0:9d:8d:14:1e:90:72:e3:
42:1f:5f:c3:08:32:6b:3d:1e:11:bc:85:b2:6d:66:35:bf:01:
a8:33:14:75:92:71:60:66:6b:2e:b5:93:1b:b6:f7:47:79:60:
67:da:8f:f5:40:0f:95:21:ba:a6:a3:31:d4:fc:d0:bd:1a:b4:
74:28:3a:7f:99:02:e7:5e:b9:11:ce:40:7c:bd:86:71:ce:eb:
81:43:a8:25:ad:89:92:ea:4a:8c:83:ee:91:85:c7:13:7c:ff:
e3:13:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:26 2025 by rpki-client