Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json)
Hash identifier: H1KDljlbm0zfWP2EW1oDd3QEomtNu7TuoXSSaIQRrcQ=
Subject key identifier: E0:A9:5A:4F:D2:60:6C:68:EE:8C:ED:0A:7C:0A:31:B9:2D:A2:E2:1B
Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538
Certificate serial: 0198A15F6B41F99F674EFE94523682110DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
Manifest number: 08C2
Signing time: Wed 13 Aug 2025 03:00:41 +0000
Manifest this update: Wed 13 Aug 2025 03:00:41 +0000
Manifest next update: Thu 14 Aug 2025 03:00:41 +0000
Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: 112yBxIAqx5bocHscaL/wyY9KhWasF51zl5SGjztjG0=)
2: ij43C7xr8xTz-pjXAc9irjAaFXA.roa (hash: TchsYLXYDpTrG6rR/zLX/7ji8qJkl2gfrI50UG67KC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:5f:6b:41:f9:9f:67:4e:fe:94:52:36:82:11:0d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538
Validity
Not Before: Aug 13 03:00:41 2025 GMT
Not After : Aug 14 03:00:41 2025 GMT
Subject: CN=e0a95a4fd2606c68ee8ced0a7c0a31b92da2e21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:88:c6:24:88:0b:0e:48:0e:45:6c:b7:9c:4e:
54:39:f8:c7:a2:8f:6b:4e:d6:97:8e:9f:a8:7d:4c:
cb:04:eb:f8:3c:6b:53:de:5c:f2:a0:23:7f:02:91:
8a:84:46:51:86:08:10:43:ac:2c:97:91:77:e8:7b:
93:d7:69:d0:a9:a1:bb:10:32:aa:a4:63:df:94:40:
53:0b:31:6d:f5:f5:b9:44:37:f1:d8:a5:4b:cb:d8:
a0:65:73:ff:22:13:58:0b:d4:8f:0f:7a:98:1b:39:
7d:01:e7:78:3f:42:44:03:62:81:ef:fd:81:b6:0a:
78:76:9c:f6:7e:12:a7:f3:c5:3f:65:88:19:5a:40:
83:ea:40:4c:b5:89:c4:4b:07:df:80:56:85:26:b6:
83:fc:08:27:62:bd:b1:1a:99:2c:04:6f:b0:3d:42:
74:a6:17:1e:a7:ba:bb:21:6e:51:21:ef:a5:6b:c3:
dd:92:5f:d1:81:fc:81:29:63:bf:bb:84:e1:07:63:
1f:00:ff:07:ec:c3:37:22:85:17:d7:ce:d3:90:ae:
73:29:8d:54:4e:0f:f4:95:7a:28:24:58:52:58:fb:
eb:46:17:12:2e:91:a8:24:69:a1:c7:81:1b:db:d3:
6f:56:f8:d0:4a:fe:ea:37:e6:5a:b7:ac:8f:62:1f:
09:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A9:5A:4F:D2:60:6C:68:EE:8C:ED:0A:7C:0A:31:B9:2D:A2:E2:1B
X509v3 Authority Key Identifier:
keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:36:5f:ba:cb:c5:2b:4e:9d:c6:66:b7:dd:86:00:e0:b1:1d:
c0:83:32:f9:39:66:39:c3:62:43:3e:7f:e9:f8:cf:94:fc:b4:
03:6e:11:ff:13:c9:93:98:f5:46:8a:62:69:90:08:41:76:ff:
5f:a3:4f:f1:69:b9:70:0d:6a:8f:1c:c5:25:1e:6e:23:b2:f4:
77:f4:41:c7:e2:ac:52:27:28:d0:50:dc:a3:7c:ee:9e:be:2a:
e0:fa:f4:a8:70:2b:41:ae:51:5f:ec:9c:2d:a5:54:09:d6:82:
73:12:36:e4:f9:da:4e:b1:30:f1:37:da:8e:d5:31:66:ee:d9:
fc:d2:1f:00:65:32:0d:16:e9:e5:40:ce:1d:2f:5b:47:87:42:
7d:b1:c3:71:de:bd:b8:41:b1:4b:5e:c8:e7:24:7d:b4:2d:66:
2d:86:7c:ee:40:a0:83:26:ec:38:6b:ef:97:63:28:95:64:4e:
5c:ca:fe:6b:74:e5:98:f1:7c:db:aa:fe:8b:5b:16:32:66:7f:
dd:a0:5f:fc:5d:4a:51:09:6d:cd:de:26:b5:5d:79:41:e0:bd:
79:14:dd:6f:6b:70:81:62:a0:4b:77:83:f3:12:71:ff:33:89:
ca:41:60:99:92:ec:08:38:0a:cf:55:5b:86:94:15:5f:7f:80:
1d:07:2e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:38:01 2025 by rpki-client