Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
File: 3vwmhsKavvGPQLMOfpUTJHpm7xM.mft (raw, json)
Hash identifier: 05Gkmtd5708/JFNZb5DiNmXmtOyU+oevqbIr+gtV2K8=
Subject key identifier: 1E:92:3E:2E:67:85:9C:78:A9:3B:BB:2E:AD:B6:75:CA:E0:70:26:44
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Certificate issuer: /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial: 019873744774C16FB083CF3DBD5665124BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 05:00:56 +0000
Manifest this update: Mon 04 Aug 2025 05:00:56 +0000
Manifest next update: Tue 05 Aug 2025 05:00:56 +0000
Files and hashes: 1: 2jede6KT-wWXlr-gV_HV5g4z3cE.roa (hash: mv6a2TTy4FTvxK1u9z+/AeZmzO5akrk+XnGtMMkB+UQ=)
2: 3vwmhsKavvGPQLMOfpUTJHpm7xM.crl (hash: 44CNz3fnmid4WT4YougzBFelfPtQVga5mNoJYV3m8YU=)
3: IJD_U3KWZ58BdYUivTasUkoSb14.roa (hash: QMy/+qKyMyM01JHQHllqOzvjbF1AM/QefZV5csA0T9s=)
4: NxF2Cyt5llnCNI_vXdmc9sDjjDg.roa (hash: R2BQ5eg/vIm8OWNUAn8Iiim/Pq6eL5zypKjZ8nuw8W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:47:74:c1:6f:b0:83:cf:3d:bd:56:65:12:4b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
Validity
Not Before: Aug 4 05:00:56 2025 GMT
Not After : Aug 5 05:00:56 2025 GMT
Subject: CN=1e923e2e67859c78a93bbb2eadb675cae0702644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f1:39:04:89:2b:d0:08:e5:10:d0:91:2a:af:
be:98:eb:e5:72:a3:a9:94:fd:a9:46:79:6d:d7:84:
b9:0a:4a:be:af:e6:10:4f:7f:04:4f:0c:e2:26:a0:
c9:20:20:30:e9:18:bd:ec:2c:ed:da:ee:e1:3e:98:
4b:27:1f:10:4a:a1:55:57:8e:f4:b4:a3:12:7b:ba:
0a:fe:35:93:b4:1e:50:fe:12:f4:bf:9f:ac:2f:17:
24:91:de:b8:1e:fe:2c:79:9f:77:20:83:12:df:f6:
c9:ec:55:a4:d5:ec:67:de:63:20:9c:5d:86:0e:5d:
82:9d:19:8c:59:9d:c0:f6:bb:1d:db:fc:1f:8c:07:
ea:66:5a:03:0b:1c:9b:a0:95:0a:9a:dc:57:05:07:
b8:e6:82:6b:96:4e:9e:71:5c:4f:b4:f1:7e:5d:d8:
fa:dc:b3:33:d2:54:3b:d9:86:54:8c:82:2f:6e:ee:
1d:be:c6:a8:4b:4b:ba:33:90:b9:aa:c2:74:40:9f:
88:3b:8d:ee:31:cf:e4:04:99:a9:2e:e3:d2:3c:16:
b4:df:31:43:d3:fe:2f:06:39:b6:33:bf:d2:b9:82:
1e:3f:19:07:51:e4:78:4b:70:00:e0:74:48:ea:a3:
30:2f:2b:47:20:ee:4c:b6:6a:50:49:29:ea:5e:36:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:92:3E:2E:67:85:9C:78:A9:3B:BB:2E:AD:B6:75:CA:E0:70:26:44
X509v3 Authority Key Identifier:
keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:97:11:8e:5d:a1:01:34:9c:62:22:ba:e6:44:6c:2c:33:da:
81:42:53:5d:d9:03:e3:ab:d1:98:9f:d8:99:0e:19:b9:f3:10:
98:fe:93:55:1d:65:a7:26:8e:d1:b8:c7:36:8d:70:3e:9c:31:
79:0a:68:be:66:e3:9a:cd:24:dd:81:3a:ae:42:fe:cf:c2:4a:
10:39:eb:94:a7:3e:c6:8f:ca:26:e2:19:c2:96:fd:2e:57:43:
5a:92:e2:75:45:41:bb:f2:8f:de:4b:1d:61:17:48:35:9f:99:
13:7c:4b:a2:29:5b:70:cc:13:0d:02:c6:5f:b4:df:f1:e3:a5:
d7:5b:bb:55:68:2b:e5:24:de:a3:1e:72:df:d7:5e:7d:b7:f6:
a3:db:f3:f7:d0:a9:54:31:29:87:9b:4e:74:8d:db:9f:9d:23:
a7:7b:3c:a8:f9:ea:b9:74:eb:56:d5:25:93:a5:7d:6c:04:b3:
da:33:9a:98:b8:61:9a:df:db:b4:49:2b:c3:48:18:ad:10:45:
d9:58:e5:27:05:2a:2b:d7:a7:86:8f:0c:05:16:34:07:e4:da:
95:27:90:7b:5f:b1:f8:46:fe:9b:fe:48:81:6b:1c:2d:38:6f:
5b:33:3e:6e:9c:8e:ab:4a:9a:e6:22:7c:91:b9:28:1b:a9:75:
c6:73:51:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:08 2025 by rpki-client