Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File: 3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier: Sl724jzcGNjO4OGzYa4D9r2wiOYD0mZGJjcX1G6MIgk=
Subject key identifier: 15:78:5C:F9:19:26:F5:C7:B7:A8:88:BC:C9:61:4C:14:1D:72:3C:34
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer: /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial: 01992E5A474F1FD9646A50FB1EAAFB0F2449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number: 167C
Signing time: Tue 09 Sep 2025 12:01:32 +0000
Manifest this update: Tue 09 Sep 2025 12:01:32 +0000
Manifest next update: Wed 10 Sep 2025 12:01:32 +0000
Files and hashes: 1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: u5WK9H5FTYtah+UeVjJQc+fQBGygGENOXejcwOAO/mI=)
2: Fv3sE2iVskV-mDIZ6tC2kUlGAaA.roa (hash: H3F5XuYvkLtvyyyPb3WNBs3Jib+ztvm2aFiyN79ql3U=)
3: Lf6gNW4pB2_3G8WJ1gs4diM2dp4.roa (hash: KsApADDkWth8orQKJUtme8wDWNYjMSX9ur5fZXW4Ab8=)
4: MC2jKTT_qt4dQPRJuzCLJkn3dIY.roa (hash: 690YFNoA6dF93SoBbsIHXRbUtNVseAW76vFSFSdgmtM=)
5: Y7R0jQTyur7PS79n24V95dokJ1E.roa (hash: kBuKXhAOJMq8DqLXajUVs2ZVCA0WRxqfHOvHHVdd1e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:5a:47:4f:1f:d9:64:6a:50:fb:1e:aa:fb:0f:24:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Validity
Not Before: Sep 9 12:01:32 2025 GMT
Not After : Sep 10 12:01:32 2025 GMT
Subject: CN=15785cf91926f5c7b7a888bcc9614c141d723c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:24:92:41:13:ce:23:21:17:eb:d6:ad:fe:
5e:7c:02:7c:c4:b8:27:79:10:58:ec:f9:68:5a:ed:
c5:dc:82:a8:dc:d9:63:59:66:50:a4:92:d7:ff:fb:
10:f5:12:3a:87:05:90:6c:8f:c0:57:33:23:2a:85:
63:42:c1:a6:d2:6c:71:a5:7e:cc:3b:02:bd:73:29:
bb:5e:31:6f:16:a9:8f:05:e7:b3:fd:d8:7c:1b:34:
02:c0:a9:8e:94:fd:71:5f:23:7d:66:ce:bb:11:11:
34:1b:52:68:9d:76:21:99:1c:b0:6a:1a:b7:89:9b:
1b:97:27:0d:50:3b:9a:5e:26:97:b4:23:8d:af:0a:
e4:39:38:56:c8:c6:ca:f9:65:a7:44:55:1f:78:b7:
43:07:42:3a:27:69:0f:19:b7:c9:3e:a5:01:63:1f:
94:57:46:3c:ed:e0:c3:8b:57:09:95:a6:45:3b:98:
40:34:85:4c:bf:72:8b:59:b7:01:c8:7c:dd:1a:f7:
a6:80:56:af:b2:c4:1d:39:0a:8a:8f:5e:c9:5b:96:
2e:43:3c:98:ed:b9:e1:1d:d2:fb:3c:43:bd:14:24:
a8:a6:ce:70:9b:e3:39:6a:31:2c:10:fc:c5:43:df:
8b:70:08:8b:50:e4:75:19:3d:5d:42:8d:47:83:5f:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:78:5C:F9:19:26:F5:C7:B7:A8:88:BC:C9:61:4C:14:1D:72:3C:34
X509v3 Authority Key Identifier:
keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4d:16:20:9e:49:37:c7:00:fa:43:8b:e9:25:0e:50:37:44:
b5:fa:d5:ad:db:a3:41:ff:f3:75:59:c3:ec:14:2a:72:5f:c1:
91:81:3f:ee:55:e2:59:2a:fb:5b:ab:84:1a:ee:b3:50:f5:51:
de:84:ba:24:f2:d8:b5:ca:e0:c3:b1:f1:f9:e1:d0:d5:2d:9e:
3f:4f:e4:42:95:8a:91:2a:12:69:83:db:7a:5b:96:1d:23:cb:
cf:4c:ff:1b:61:ef:bd:8c:ca:c5:49:e1:07:4c:24:a2:71:d4:
75:b0:f1:be:3a:56:82:87:54:21:3d:27:8b:fc:42:fc:ad:b0:
11:05:f3:e1:10:bc:ab:fa:5d:88:43:b2:1b:ea:a3:7f:49:e0:
77:ba:ef:46:4e:44:2d:55:ad:36:2a:64:58:27:93:4d:1c:49:
18:19:41:ed:29:bc:19:c9:c1:fb:11:56:3f:ef:3d:cf:31:cc:
e9:71:f3:79:8f:53:36:5b:16:c9:35:68:86:fe:8d:68:5c:ec:
3c:26:87:b9:6d:f5:21:e0:2a:ac:7f:c0:b0:ec:9a:e5:8d:6d:
51:3c:6f:13:76:0f:e9:05:98:5a:cf:33:9f:bf:2f:16:98:6d:
95:b8:a7:02:12:4a:6c:a3:34:fd:3d:aa:a3:28:48:35:65:9a:
a8:e8:d1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:17:30 2025 by rpki-client