Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: VqeuBStGzl95gpcUYUaTZBCCV12eCCH/omJ+0fafu9o=
Subject key identifier: 8E:07:D2:80:1A:97:6D:92:A3:DD:BC:01:77:57:0C:79:D5:1E:20:FE
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 01992D7E422F84C630D30EFD7CF3CF5931B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 167C
Signing time: Tue 09 Sep 2025 08:01:13 +0000
Manifest this update: Tue 09 Sep 2025 08:01:13 +0000
Manifest next update: Wed 10 Sep 2025 08:01:13 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: 0Iw0l6a07xmhwJIAPZIhwNxwBFjJeslUoJeOCcE5ycU=)
2: CgFc8x26QM3VY1KiLgccdsxhrXo.roa (hash: P9EWdQX/EOCp7WZ5gfsQmoM4qU0udbuMuOqDFw597IY=)
3: RonOUjE1P34U6vbbFs9w9AsGyN0.roa (hash: fOrx68LqSTvTWV0sMnHRK4WODfXfA787GTb+IyVk3b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:7e:42:2f:84:c6:30:d3:0e:fd:7c:f3:cf:59:31:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Sep 9 08:01:13 2025 GMT
Not After : Sep 10 08:01:13 2025 GMT
Subject: CN=8e07d2801a976d92a3ddbc0177570c79d51e20fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:fa:aa:82:43:f0:0a:bd:1b:22:13:a3:dd:
ed:23:11:4d:22:2f:71:fe:6a:85:1e:fb:52:93:fb:
2e:66:33:d4:a5:3d:70:24:ed:e7:96:22:5c:ee:5b:
43:78:e3:15:3b:07:3c:a9:10:99:f4:3c:19:0a:83:
71:2b:b0:bc:e4:06:e2:c9:d1:c8:46:ed:4b:da:de:
79:05:59:e9:78:2b:4b:a3:c6:01:ff:50:6c:a5:3c:
48:83:04:46:cf:d2:c1:ac:d0:db:3c:de:9e:a0:ee:
28:98:fa:ae:36:14:6e:24:53:4c:8b:3d:84:34:7c:
21:0a:9f:57:f5:e1:56:91:53:45:aa:8d:13:93:ce:
55:44:04:89:ec:08:20:b2:47:bc:0e:3e:94:51:87:
eb:69:bb:fb:36:28:90:22:36:86:fb:63:04:53:7d:
e5:1f:9c:fa:c5:e8:84:81:7c:e2:0a:fe:e2:37:eb:
54:3b:57:c2:1a:09:ea:92:77:f3:43:c5:34:47:e5:
e5:91:70:f1:d2:a0:1d:26:6a:cd:73:d4:08:43:bf:
39:f9:0f:8a:0d:08:70:a2:5a:d7:dd:43:3b:a9:01:
d1:10:24:01:8b:49:e4:84:8f:b3:ae:65:e9:b6:c8:
6b:2d:f0:e7:85:7c:54:68:3c:c7:db:f7:84:16:a4:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:07:D2:80:1A:97:6D:92:A3:DD:BC:01:77:57:0C:79:D5:1E:20:FE
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ed:2a:47:9a:6e:4a:27:a6:94:0c:42:8b:43:01:33:77:6d:
ff:44:d6:8f:6b:ea:35:ef:50:40:77:4b:ec:93:4e:94:5b:12:
2a:5c:8d:f7:aa:61:7f:bc:a6:6f:62:f4:8a:3a:0f:19:0e:83:
be:b0:46:1f:85:68:12:7f:ef:89:91:f8:21:44:fe:de:d8:63:
33:00:eb:2a:8d:d2:fd:28:65:e5:92:93:a4:aa:5e:0f:dc:70:
27:6c:80:39:c6:3d:7a:94:4c:d4:c3:90:c7:23:3c:a0:9d:7a:
75:e6:21:0b:56:60:50:37:5f:56:4b:cd:2e:8b:11:30:a4:3d:
f5:ad:f4:e2:d2:ab:85:86:a7:3d:f7:87:e3:65:e4:9f:b8:19:
48:33:29:19:62:2c:26:ce:df:a8:a8:02:e6:93:26:7d:26:f4:
c4:cf:63:62:ff:79:dc:61:a7:0f:6c:d5:f3:c1:e0:8c:ea:b5:
95:1b:ce:53:44:64:d8:23:fc:d6:1b:e5:aa:3a:2f:11:ca:e2:
f0:63:0c:36:14:df:36:29:c4:b8:49:6d:63:5f:86:cb:8a:e4:
bd:cc:81:40:db:3f:58:ec:4f:c9:78:5c:67:3a:22:f9:ee:ff:
f2:f2:cc:f3:fa:b6:36:60:ef:ae:88:24:a4:6a:7e:be:f5:75:
d9:c3:25:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:41:03 2025 by rpki-client