Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: S8tnQo1iPQ41iqwAy+hKBPoozD6iuo21BvDc2BcKFg0=
Subject key identifier: C5:97:D9:C5:02:5A:79:84:4D:F2:73:4C:61:B7:EC:CC:D6:4A:C3:EB
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 01988A69DE8791095D7778661A8825E3F4EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 162C
Signing time: Fri 08 Aug 2025 16:00:50 +0000
Manifest this update: Fri 08 Aug 2025 16:00:50 +0000
Manifest next update: Sat 09 Aug 2025 16:00:50 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: Aep1OrVaOjGRbPZzVADrtLZDTeQ6DzYBQdj84Wj8uHU=)
2: 4iSMhBF2xZj26lycKx2j1fhAtX8.roa (hash: 5NzSosDSsdztn+kQLtfES98hJSpuF/nYSnJEW3vMqlE=)
3: MCaozM05EgQpOj9KWtfk_EMYWf0.roa (hash: I6Y0DISsiTz+oGPxMCPt4OQoH1zQxzx22/aiFTgMNtU=)
4: qMfArzwkX8G0WDNHJN4uX2h7ong.roa (hash: J4HIUTvl0CZ/07KSIMq+Jwo8Hxn+rCK5OIiJhW9OzqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:de:87:91:09:5d:77:78:66:1a:88:25:e3:f4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Aug 8 16:00:50 2025 GMT
Not After : Aug 9 16:00:50 2025 GMT
Subject: CN=c597d9c5025a79844df2734c61b7ecccd64ac3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:79:df:43:02:cd:ed:78:98:07:e0:ea:50:
b2:97:63:0b:28:ff:58:1c:53:c1:bc:78:35:31:9a:
56:46:f6:de:ab:d8:b1:8a:ce:86:63:5d:7d:20:58:
e5:13:5c:1a:85:a3:54:d8:d8:db:15:46:f3:97:f2:
09:24:d7:5f:c3:3d:40:fb:1e:aa:fd:d6:67:a7:75:
89:aa:9e:64:de:6c:49:d6:c0:98:4b:e0:8a:aa:ff:
64:17:99:94:20:f0:41:e3:e6:95:0b:e0:bc:7e:db:
f1:32:57:d0:7c:8d:c1:47:99:bc:8d:c9:bc:8c:5b:
35:cb:22:82:f6:27:b5:99:0c:14:16:b7:8e:2d:3a:
9f:aa:1b:23:33:6e:cc:be:87:45:16:49:fc:87:3b:
9b:5d:7d:1e:ed:3c:66:41:d3:08:05:74:5f:22:8d:
be:a3:81:67:f2:e3:6b:4c:f1:3d:68:97:36:da:77:
1c:53:dc:e8:1c:8b:ff:d7:df:4d:03:df:48:99:00:
74:c5:f8:10:73:f4:99:a4:08:b4:91:86:2b:ff:2c:
95:66:2d:fc:0c:7f:79:dd:18:bc:3d:0b:62:35:a9:
62:4f:91:a7:b3:30:76:dc:e6:ba:af:f1:29:a9:21:
9c:42:5e:12:a0:b6:79:db:2b:0d:93:3b:2a:75:2b:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:97:D9:C5:02:5A:79:84:4D:F2:73:4C:61:B7:EC:CC:D6:4A:C3:EB
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:20:54:ba:b8:9b:33:21:04:79:e5:ba:7d:fe:d3:92:93:39:
0a:ff:97:5b:69:11:74:fe:cf:90:2f:40:77:78:9a:a5:14:92:
f6:66:4f:6f:84:c3:35:c3:79:1d:50:84:f4:8c:20:32:aa:71:
aa:08:93:6e:4e:2e:01:fe:32:f6:e5:20:bf:f7:e0:d4:62:fe:
13:3a:00:6a:5f:7d:e4:f6:8f:fe:5b:6d:6d:f4:15:6d:a8:6a:
bc:2b:de:d7:45:a0:5a:99:67:66:73:0e:d9:d2:ee:ee:e1:e6:
59:00:bf:c0:9a:12:92:ee:65:02:10:6f:30:f2:6a:42:8b:23:
29:f0:0c:36:77:a0:88:44:f9:95:5e:03:ee:44:a5:61:19:0b:
1e:b7:fb:0d:79:91:8c:da:90:81:7f:f9:db:db:c5:10:fe:b0:
a4:36:ed:2e:53:06:d5:41:b1:eb:de:c1:5f:6e:bf:25:82:69:
d9:fb:4c:4d:8d:c2:5d:d0:9b:d2:de:20:ab:ca:a8:ae:aa:69:
59:0d:8d:49:57:52:f2:08:1b:a6:2c:7a:dc:42:77:d5:9f:39:
6e:ad:49:df:9d:55:8a:42:14:f1:ba:89:46:4b:ce:81:bd:05:
1e:83:f7:af:65:c3:90:93:af:a5:45:2a:a4:24:13:95:62:76:
ec:8c:1d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:42:39 2025 by rpki-client