Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: VhldOryWh9IRNyeR6/7TQp3eiMn20CnYS9uMfODUItI=
Subject key identifier: 92:EF:A9:2A:C0:4C:60:CB:28:A5:04:58:2F:CE:17:6E:A3:37:C4:8A
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 01992330DD6FF5F4FFB87C3920727D44D8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 161E
Signing time: Sun 07 Sep 2025 08:00:28 +0000
Manifest this update: Sun 07 Sep 2025 08:00:28 +0000
Manifest next update: Mon 08 Sep 2025 08:00:28 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: 6vo93a06T/5VrvQ2iycIf5dMrk1Utvz3+GEEkmUq+44=)
2: 6BKOzeR_jkv8Td7naSCpGwK2cbo.roa (hash: NdsdWgq7FNtTGsjv+sGoOHpLX3rHnRlY3SsmvrWzKc4=)
3: gTmhFIzM7If-kzl01cWeEzcqqns.roa (hash: lUpkvjKsmC5D6MNw62q7fvgUR6asOsGbY3c+E0HzKW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:dd:6f:f5:f4:ff:b8:7c:39:20:72:7d:44:d8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Sep 7 08:00:28 2025 GMT
Not After : Sep 8 08:00:28 2025 GMT
Subject: CN=92efa92ac04c60cb28a504582fce176ea337c48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:48:6c:13:c8:d5:4f:68:43:26:fa:60:19:
3d:92:a1:cb:9b:cb:1f:85:aa:b8:c1:cc:3b:a6:28:
ba:fb:d8:8a:c4:20:71:70:c8:1f:3a:6c:0d:b1:2e:
39:8a:51:b1:27:f6:8d:97:f6:ff:0b:f6:4b:f1:2c:
71:5c:4b:9c:6e:45:79:fd:72:0a:e0:04:be:d8:7c:
69:87:d9:58:dd:9d:ba:57:c0:75:5f:4e:63:f5:f0:
b4:80:6a:6b:2f:7e:15:0a:66:e4:76:37:8a:f2:e3:
61:00:02:36:71:16:08:95:3b:6b:dd:9c:4a:1f:b9:
10:91:30:2a:45:7c:1e:be:b9:57:50:f6:02:49:d7:
5a:06:50:6b:4e:a7:2d:b2:ca:56:b4:4e:3b:69:9f:
05:b4:c6:3c:97:20:d8:e0:71:db:94:ff:17:0d:c5:
62:7c:8b:93:ba:a8:e5:b0:56:dc:14:65:54:a2:90:
94:b5:05:75:77:d7:55:40:e3:f2:7d:94:75:36:55:
90:99:08:99:a5:0c:3f:25:29:41:f1:63:d2:f2:e4:
b6:82:d9:5e:4d:c7:c6:f9:ed:9e:df:5b:4f:19:20:
7e:78:f7:87:89:00:c9:98:f6:51:45:a9:4b:2a:c4:
d8:b3:9d:7d:49:fd:e6:96:ed:58:d4:31:3e:83:c3:
12:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EF:A9:2A:C0:4C:60:CB:28:A5:04:58:2F:CE:17:6E:A3:37:C4:8A
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:67:b3:d5:f8:35:3a:b9:09:2c:e9:1a:4e:68:e5:1c:f1:f5:
c1:87:1d:e6:6a:52:ef:54:4c:86:cd:19:bd:07:41:b6:d6:97:
51:c5:1a:24:c8:81:0c:cb:46:bc:2d:c3:a4:a7:25:18:6f:8f:
c3:c7:d3:58:63:a1:17:d8:dc:9e:80:8b:7c:11:5c:6a:1b:a8:
38:8a:30:22:3d:9b:64:ce:64:e1:40:65:f8:91:f7:af:ae:f9:
d5:e4:92:09:77:b6:1a:48:4b:a6:4a:ba:dc:07:ab:2a:2e:64:
13:ee:e6:44:18:76:77:23:dd:71:7a:df:df:cc:21:17:e8:4a:
1e:f3:2a:07:ad:04:6d:29:de:7f:4f:68:eb:94:fa:16:47:6d:
85:05:e9:07:94:d3:f2:a7:75:4f:9a:b6:16:67:21:31:67:56:
7b:c8:c3:c5:92:eb:70:1e:a4:bc:0f:9f:4b:5e:1a:9e:7d:a7:
0f:27:75:be:3a:ae:0c:02:54:63:81:00:76:0f:05:51:b3:0c:
71:7c:61:05:30:28:d1:33:3f:53:51:f9:ca:01:0f:60:37:d5:
af:b9:09:57:be:1f:b3:7d:72:c4:c2:98:d1:02:66:bb:8f:d0:
91:65:95:0d:02:d0:db:1b:74:08:e6:5a:68:34:08:ce:af:6d:
a0:05:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:21 2025 by rpki-client