
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
File: 3EviU3WUInayZECX3D1ah1r7ivE.mft (raw, json)
Hash identifier: BxN8GUSKhYG9vAlsIw6ot/F0iZeLQYebRxowigySBHI=
Subject key identifier: ED:BC:D8:C3:47:57:53:51:22:91:C0:45:51:E8:F2:C6:2A:06:A1:DE
Authority key identifier: DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1
Certificate issuer: /CN=dc4be25375942276b2644097dc3d5a875afb8af1
Certificate serial: 0199180A7077AFFD0CFF0932675B28E0857B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
Manifest number: 0920
Signing time: Fri 05 Sep 2025 04:02:41 +0000
Manifest this update: Fri 05 Sep 2025 04:02:41 +0000
Manifest next update: Sat 06 Sep 2025 04:02:41 +0000
Files and hashes: 1: 3EviU3WUInayZECX3D1ah1r7ivE.crl (hash: z8n7YP02tdA7rF8tPCuG5pIvcNcWxgBz7isBv99F7wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:70:77:af:fd:0c:ff:09:32:67:5b:28:e0:85:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4be25375942276b2644097dc3d5a875afb8af1
Validity
Not Before: Sep 5 04:02:41 2025 GMT
Not After : Sep 6 04:02:41 2025 GMT
Subject: CN=edbcd8c3475753512291c04551e8f2c62a06a1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:08:69:1d:f3:0c:c0:5c:0e:11:23:6e:17:2c:
4b:57:4b:5d:f9:69:f2:c3:3c:49:a8:d0:23:95:d4:
8f:73:ce:f6:12:4a:21:f6:43:b3:6d:7f:70:7e:75:
85:06:a3:36:de:2e:45:4c:8d:dc:f3:ea:be:02:07:
bd:31:03:29:f8:12:79:3b:60:67:40:42:37:d7:31:
f3:83:a6:4f:72:8b:a5:a9:6e:2a:ed:3d:eb:d6:de:
af:67:cb:bb:ac:fd:91:73:6f:75:d2:4b:36:cc:ae:
1e:a2:9d:47:30:c0:0f:1c:f9:cf:22:b4:d8:a9:16:
4d:56:2a:26:66:24:d8:ef:6e:dc:10:1e:c8:3d:ff:
56:d8:f7:d0:7c:5f:ed:a0:91:d3:c8:d3:8e:32:f0:
91:e7:b1:70:a3:0d:c9:20:e4:c9:22:02:1c:e7:50:
c2:01:40:0c:f9:3f:73:ad:78:4c:02:15:4e:21:1b:
5b:1c:7e:06:99:d4:01:d0:48:3e:2c:6a:b2:29:4c:
32:c2:bf:44:5e:52:25:48:bf:89:39:50:49:42:3d:
30:b3:1a:c1:b9:37:7b:4b:04:00:38:87:96:87:4b:
37:ca:14:66:72:89:ee:12:c5:c8:30:cb:04:27:3f:
a9:f0:5d:9e:3b:47:7e:6f:84:b4:49:10:e5:5b:c4:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BC:D8:C3:47:57:53:51:22:91:C0:45:51:E8:F2:C6:2A:06:A1:DE
X509v3 Authority Key Identifier:
keyid:DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:13:7e:bd:df:3d:21:e9:da:1c:a5:5c:2a:ca:6b:6f:54:00:
9f:df:0b:78:75:06:e6:5f:c5:eb:7a:8a:5e:6d:fc:5f:88:e1:
9b:25:11:cc:f6:b0:8b:37:05:40:5f:ba:38:69:1a:4c:cf:42:
10:17:68:ec:4a:40:b2:ea:55:51:b4:08:54:62:a4:3f:69:43:
71:f1:5a:2a:f3:19:ad:57:0d:80:fb:db:22:85:d4:e4:06:ff:
a5:52:42:55:06:05:93:bc:37:28:14:ae:71:e4:80:71:34:ef:
24:05:93:eb:54:86:a9:20:a3:ce:de:98:1a:10:57:d1:30:fd:
41:1f:0d:18:f0:aa:ed:d4:f3:45:46:e3:ea:92:86:71:8e:5b:
31:3e:07:cb:f1:f4:8e:99:6e:40:fd:79:a9:11:d5:c4:b6:3f:
3e:e7:54:09:03:49:5a:66:d5:d2:ef:03:64:03:1f:0a:ca:60:
df:9a:13:48:bb:67:87:da:e4:ce:7e:77:c9:4a:9b:58:df:3a:
96:fc:14:e7:39:c0:e5:55:2f:bf:c2:6e:ec:e3:9e:5c:a3:80:
b6:fa:a5:a2:e6:cb:1d:98:93:7a:d1:6a:6c:74:37:34:4b:b0:
c6:ba:24:10:bb:b0:86:60:17:14:27:66:d9:50:94:a2:57:ea:
de:54:a3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:03 2025 by rpki-client