
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier: r2+DS4bcFnb4Z2L49xFNHbPNxIq0BrK2h3tblaElALo=
Subject key identifier: 31:E3:AD:4A:19:36:84:8D:F0:E5:DD:0F:0C:C4:B0:35:75:62:2C:E0
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial: 019922C36E4DB745DDB2FAC86867A250C4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number: 0ADB
Signing time: Sun 07 Sep 2025 06:00:57 +0000
Manifest this update: Sun 07 Sep 2025 06:00:57 +0000
Manifest next update: Mon 08 Sep 2025 06:00:57 +0000
Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: kAjxjMODUkq097rZYJqEUXpQrCuBoEQ2Rck7wThu0jA=)
2: dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa (hash: s+UDqFCEg39f4gk9fs9ZUXaGmiKaVpMOQ/J8CYcOuY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:6e:4d:b7:45:dd:b2:fa:c8:68:67:a2:50:c4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Validity
Not Before: Sep 7 06:00:57 2025 GMT
Not After : Sep 8 06:00:57 2025 GMT
Subject: CN=31e3ad4a1936848df0e5dd0f0cc4b03575622ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:75:9a:b8:5f:13:ab:7a:ac:70:f2:f9:10:9c:
6a:a7:a6:ff:94:99:77:09:69:85:8c:27:eb:96:02:
32:e4:07:07:3a:52:10:64:9d:51:01:fe:c2:22:c7:
fe:22:ad:42:3f:7f:d0:9f:c8:f2:12:c1:34:3f:65:
34:c7:d0:27:ff:a4:f4:40:80:60:b4:1d:b8:02:0b:
09:d7:63:ae:be:d2:40:75:c4:87:47:c7:14:0d:04:
71:1f:73:b8:2b:a8:2d:5a:aa:02:f6:a9:7d:5c:40:
ef:ec:6b:f6:ac:c1:7d:37:91:08:95:97:2a:0e:aa:
de:09:58:53:41:09:60:e3:f0:18:80:20:af:24:1e:
b7:9a:a5:f0:e4:4c:83:bf:63:04:f0:08:f6:5c:bc:
55:aa:a8:b6:a3:14:7a:d6:65:d8:b3:5e:7b:ef:4f:
cd:bf:0d:2d:6e:8f:5c:7a:b3:89:35:34:01:8e:cf:
59:24:79:23:af:3e:a1:ed:1b:e0:0d:08:6e:0e:41:
9c:83:90:98:d4:79:80:09:79:4b:c0:31:82:77:fe:
d6:51:d6:f6:be:33:c6:67:96:3b:be:01:7b:76:36:
ed:b6:13:a2:23:f4:d6:94:a2:9a:33:0f:9e:d1:6d:
5f:f1:64:2b:79:da:ec:6a:90:24:95:84:5f:04:f7:
1e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E3:AD:4A:19:36:84:8D:F0:E5:DD:0F:0C:C4:B0:35:75:62:2C:E0
X509v3 Authority Key Identifier:
keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8d:80:84:11:f3:06:2a:88:4b:6b:e1:09:73:e5:e6:c7:19:
8e:77:bc:97:57:bf:eb:ab:a9:f2:17:92:c9:7f:df:ce:5c:21:
67:ad:68:bf:e8:db:47:78:fd:b3:5d:90:60:fa:09:c7:bd:ce:
b4:2f:db:a4:10:31:bd:0f:75:19:70:48:17:9f:b5:e6:21:a2:
7c:a2:8e:c0:f9:d6:44:05:58:85:0f:99:11:06:e3:c3:bc:9a:
4b:2d:d2:92:df:d6:df:d3:f8:1e:73:41:c6:80:3c:82:ce:0d:
a2:30:fa:5f:42:60:66:f9:12:d1:c4:46:38:25:9c:ac:79:7c:
b1:d6:9a:4e:a2:fb:d6:c7:b4:df:5c:1b:d2:e0:e1:23:2f:3f:
67:f7:e6:c9:ca:85:6a:48:3c:bd:75:95:3e:cf:4f:85:a0:40:
54:6f:51:08:e7:ee:8f:cb:e1:91:49:13:68:18:dc:8e:2c:e5:
e1:c3:90:00:23:d9:44:b4:bd:57:19:fe:17:b5:a5:70:19:59:
17:b1:d0:76:67:3e:89:c2:1e:22:15:07:7c:08:e9:aa:70:44:
ba:bb:e5:4b:80:78:36:b9:6c:9d:3b:93:a8:db:93:58:46:f5:
8b:00:55:1e:b2:6b:4a:8f:b5:db:6c:4a:51:42:10:9e:1e:14:
81:cf:13:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:43 2025 by rpki-client