Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
File: r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json)
Hash identifier: s99EH/xoNbTwosZeAaX/ixsw7G0X65C///Oxb6ZEuW4=
Subject key identifier: FE:88:D9:9A:FE:39:16:D9:87:C8:11:06:40:16:1A:1C:9C:6D:59:61
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial: 019874BD7651A3C5EE6F42301CBF8FD6B7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
Manifest number: 1620
Signing time: Mon 04 Aug 2025 11:00:30 +0000
Manifest this update: Mon 04 Aug 2025 11:00:30 +0000
Manifest next update: Tue 05 Aug 2025 11:00:30 +0000
Files and hashes: 1: N9sOXFw97UnrkSQWGmd4QE2g0Pc.roa (hash: FcVUr7Wqd51Nq1eKBFPb0ZOL/WKLNXNrrGtgMRztb2M=)
2: p6HHOYDEee_YFxcXEQQw4tj_loo.roa (hash: XVgmeoKKw2smz01W8p65Y0a7sBeyS3+sdPmsdrroyxo=)
3: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: B4Ua/f15wMpUJr82/yO3VH3s4kdDBfYW0mhl5kl/4TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:76:51:a3:c5:ee:6f:42:30:1c:bf:8f:d6:b7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Validity
Not Before: Aug 4 11:00:30 2025 GMT
Not After : Aug 5 11:00:30 2025 GMT
Subject: CN=fe88d99afe3916d987c8110640161a1c9c6d5961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:93:da:09:e9:39:6d:e0:82:82:bd:fa:37:b1:
7e:f2:26:ed:40:32:73:c7:75:98:ad:cb:00:a3:10:
bc:a6:e0:73:72:97:7c:e1:d4:4a:1e:78:81:9a:40:
7b:22:20:c2:21:59:5d:44:c7:e4:5c:3c:62:56:5a:
ae:ea:10:80:9f:9f:40:60:57:a4:0b:a1:38:87:83:
5f:3e:f5:df:cd:c1:05:0a:ad:08:2f:df:a5:3a:05:
fc:f9:ae:47:ac:7d:37:cc:c6:2c:3d:b4:8d:76:9c:
7c:9e:ff:69:68:4e:4e:f8:77:97:2b:58:18:9e:57:
8a:db:0b:37:74:95:5d:08:13:44:8b:19:bf:62:41:
02:ce:d4:4f:20:52:21:bb:29:7d:d3:bf:42:9d:97:
53:67:ab:60:18:46:b5:83:d2:e0:c8:d6:0c:66:1b:
cd:ee:e4:d1:9b:ed:48:58:fb:c5:b4:59:b9:bc:9d:
f4:cd:a6:07:1a:61:c4:23:9a:1f:bd:24:de:83:a4:
3a:18:8d:f4:16:7f:b5:4c:ab:00:8d:ab:f1:7c:dc:
bc:3f:bd:27:9c:3e:c9:db:1b:40:af:e7:e9:04:b5:
02:1e:a3:bf:20:35:48:9d:c7:8a:ab:1a:fc:5a:a6:
20:28:88:43:b2:fd:39:83:1a:07:a0:7f:7f:89:8c:
f6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:88:D9:9A:FE:39:16:D9:87:C8:11:06:40:16:1A:1C:9C:6D:59:61
X509v3 Authority Key Identifier:
keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:95:28:fc:6f:96:66:48:98:27:04:25:5d:b4:9d:4f:7d:76:
81:b7:eb:15:70:68:7d:1d:ff:17:18:0f:1c:b4:c1:1c:d1:24:
b9:72:ef:05:14:68:c7:97:47:8b:41:92:35:ee:37:d0:a2:df:
74:da:b5:71:e2:ce:e6:13:8a:cd:ed:63:f5:5e:03:92:80:bc:
80:32:85:5e:f4:9b:93:9b:09:fb:81:b0:24:97:20:5b:70:8d:
31:0b:30:72:99:35:02:16:f3:46:57:f4:61:a9:9f:70:c5:c2:
1d:92:c4:8b:05:d9:d1:16:83:83:8a:2e:cd:e8:bd:6e:5b:48:
b7:98:00:23:e9:05:62:9e:bf:f4:a4:7b:d6:12:c9:cc:23:1c:
4c:ff:fc:12:35:c4:9e:ea:34:b7:f4:64:86:83:5e:bf:e0:ec:
44:b7:9b:45:11:e0:20:67:b2:ea:8a:df:0a:ff:83:cc:de:41:
12:59:cf:89:1e:3a:7d:58:e1:51:10:a1:a8:00:95:10:3f:ef:
ca:41:2f:79:2d:8e:5a:4d:9e:a3:42:69:b1:45:b8:0a:60:7f:
fc:b5:06:7a:f9:64:4c:fc:35:9d:2d:7f:90:37:6d:1c:37:ac:
ca:49:27:e7:b9:9e:a4:2b:f3:ef:23:51:0b:68:cc:5c:0f:e9:
17:68:08:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:06:02 2025 by rpki-client