Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
File: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json)
Hash identifier: OpZDz0j+9Np/GN/dF3RVxh4+W7nzsscIDx7kXvAQ4QA=
Subject key identifier: 61:CC:35:44:F9:EF:F3:D3:C3:CE:39:A4:9F:17:5A:EB:01:57:73:D2
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Certificate issuer: /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial: 01992255CCB33B03497DB1BF73B3486E8B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 04:01:12 +0000
Manifest this update: Sun 07 Sep 2025 04:01:12 +0000
Manifest next update: Mon 08 Sep 2025 04:01:12 +0000
Files and hashes: 1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: 0KhzEV4bWYrGJEYiJpg6BQ79IB7dliKKAgZcGDarW7Q=)
2: aKn5wX9zpC6koraTjDd3gqhXdek.roa (hash: UCw+VdmiwuxVJRZ+XJIJQKAozSvDmGpk4Pb8r0Al3WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:cc:b3:3b:03:49:7d:b1:bf:73:b3:48:6e:8b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Validity
Not Before: Sep 7 04:01:12 2025 GMT
Not After : Sep 8 04:01:12 2025 GMT
Subject: CN=61cc3544f9eff3d3c3ce39a49f175aeb015773d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:cd:90:65:e2:4d:16:9a:9a:34:c5:9e:e2:
72:44:bc:69:fb:a1:3e:7f:5f:58:1c:f2:39:0e:c0:
77:23:72:44:55:c5:d1:0c:12:f8:90:18:40:ac:a2:
8f:f8:7b:b7:45:47:fc:75:2a:eb:2f:78:20:7a:b5:
7b:ff:8f:7d:28:65:80:98:b9:a8:20:c5:3c:34:93:
1a:b6:06:36:c3:bd:c9:92:fb:00:cf:40:6c:f8:2d:
5f:48:59:3a:6e:7e:ea:ac:41:f6:3c:74:da:93:9e:
6a:62:9b:f2:f8:b2:4b:5d:7f:58:70:02:5a:bb:60:
2d:36:8d:35:7c:5d:58:a3:56:b9:73:88:5d:58:0c:
20:e8:a0:56:7c:4b:8e:9e:39:40:e4:c2:1d:7f:24:
95:f7:e2:76:c7:d0:79:55:f6:db:c0:a6:ab:29:95:
0f:59:2e:fd:f4:84:fc:32:b2:2d:55:94:d9:78:7e:
48:7b:42:3b:1a:a0:0e:02:da:f5:05:dc:1a:77:f8:
19:d1:18:f9:d1:c9:3d:7f:94:21:00:b2:81:60:09:
b1:c1:7d:c0:58:5f:58:7b:6a:e7:76:52:f7:d8:3c:
29:61:ab:ad:bb:58:e0:9a:52:21:cd:01:ab:cc:93:
39:2a:4f:57:64:c1:d3:3b:f3:9f:9c:60:86:a4:67:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CC:35:44:F9:EF:F3:D3:C3:CE:39:A4:9F:17:5A:EB:01:57:73:D2
X509v3 Authority Key Identifier:
keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2e:fa:39:ce:9c:aa:a4:11:ad:94:b5:31:79:ee:48:1f:ce:
bf:95:05:48:d3:5d:7e:87:6d:a0:92:8d:36:20:10:75:85:be:
51:f2:d5:d9:70:83:c7:cb:8e:5b:5d:b9:31:e1:21:e0:dd:d4:
fa:e1:ce:b5:2d:09:e1:8d:f5:99:5e:fd:2f:98:d4:ed:81:67:
26:9d:8f:57:b4:ad:ff:86:ee:44:a2:24:ba:48:06:53:f3:23:
b3:6b:47:5f:19:07:2d:b7:24:99:92:b7:21:73:dc:ff:2a:76:
20:38:3e:d0:4c:c6:8f:7b:5c:c1:66:b1:f9:14:af:8a:7b:d0:
4c:ce:c6:6a:07:54:62:a5:82:1c:f5:56:31:90:ff:4a:93:5b:
20:ec:50:a7:ee:23:81:25:c8:93:cb:08:1f:5d:ce:38:ee:21:
14:83:89:df:47:b2:88:67:2d:d4:83:4b:73:ab:d1:bb:73:70:
03:5f:5d:18:66:9b:04:e1:d8:1e:32:4a:c6:5b:2e:e8:6f:c2:
77:f7:b3:fb:20:b3:30:62:80:93:12:57:40:a9:17:7e:c2:3d:
75:79:0c:d0:60:6a:b1:d7:1f:be:ed:1b:f5:94:32:88:f7:ac:
98:d1:71:85:e2:d6:0f:e2:34:e3:1d:62:95:16:d6:1c:78:07:
b1:66:c9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:46 2025 by rpki-client