
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier: Dy3WoXJn/X6O7ce4WW+PJbcOUheq41gHyu4wKq6Vhp0=
Subject key identifier: 86:ED:FD:53:3F:64:51:52:AE:5B:F2:98:18:E8:1D:C7:CA:71:A9:6C
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial: 019880C1DE42450DFE227C2B00B9D6AAFB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number: 072C
Signing time: Wed 06 Aug 2025 19:00:45 +0000
Manifest this update: Wed 06 Aug 2025 19:00:45 +0000
Manifest next update: Thu 07 Aug 2025 19:00:45 +0000
Files and hashes: 1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: eIlqcv45MfxTgW3hWaDShMZ+g9mYiGPscoXEjY/lnh4=)
2: MpZzldQi5IW1vH72zsN86ALdCYo.roa (hash: hGLTyfZCRDqAerkM2L4I96QJCTHMEKoFxuiSvfkJH1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c1:de:42:45:0d:fe:22:7c:2b:00:b9:d6:aa:fb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
Validity
Not Before: Aug 6 19:00:45 2025 GMT
Not After : Aug 7 19:00:45 2025 GMT
Subject: CN=86edfd533f645152ae5bf29818e81dc7ca71a96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:f4:0c:cc:4d:a2:69:ca:46:55:23:00:3f:
ab:d1:e4:49:47:89:8d:ad:88:06:51:f6:cb:47:67:
f0:e2:71:18:b3:e9:7c:66:53:07:3d:f3:05:0e:07:
ce:80:d6:08:16:0d:5f:1f:63:1c:34:61:9e:89:3e:
fe:27:ce:5a:25:aa:1b:ca:a9:28:c1:60:22:87:77:
04:3e:8e:f5:bd:17:46:c4:4d:d4:dd:86:db:d3:d7:
b5:37:81:ab:ed:e2:52:11:99:fc:d2:51:9e:84:ff:
11:ad:c0:ae:dc:23:db:f4:d8:9c:4b:03:ef:89:8a:
f0:20:b5:f0:d7:be:1b:5a:a8:e7:87:f3:2d:9e:6a:
a1:f0:01:7c:ae:cf:db:f2:15:bb:ae:00:26:e9:44:
b7:2a:70:fa:af:c3:a7:34:30:51:b6:f9:28:36:1e:
ee:78:c5:80:9d:ca:a8:23:5d:d2:62:a7:a8:0b:c7:
08:f3:ee:0f:e9:8a:a2:08:0f:6e:d0:f8:c2:a2:1a:
5d:7e:8e:6c:9e:80:be:61:a4:9a:3e:b2:b0:21:00:
ce:71:d4:15:30:84:f7:44:de:7a:89:90:b6:67:3f:
55:81:4e:fb:ce:1b:10:5d:fb:c0:94:e5:80:80:40:
b8:94:6f:b9:22:49:58:bf:d9:fe:51:80:58:e7:11:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:ED:FD:53:3F:64:51:52:AE:5B:F2:98:18:E8:1D:C7:CA:71:A9:6C
X509v3 Authority Key Identifier:
keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:06:ac:17:47:3b:5d:7f:87:3a:d0:36:c9:62:eb:2d:f6:86:
b7:17:dc:85:c7:f1:48:6b:ab:ae:42:32:ec:8d:ea:43:39:8f:
4f:f7:8e:86:ae:4f:75:96:f9:d2:d0:17:65:8c:12:fb:34:06:
8f:f0:a4:68:9e:c1:41:24:a9:9d:34:51:23:2e:a6:c9:c2:ec:
f6:86:4e:6a:a9:c3:7d:82:6f:a5:b2:18:35:d3:11:35:3a:70:
3f:6f:5c:69:d1:c9:81:e4:6a:0a:ce:cd:b4:1f:0c:8d:11:f4:
8a:67:50:62:3d:9e:7d:cf:c6:29:6f:dc:0b:d3:97:0e:9c:93:
e9:1f:19:b7:48:5b:7b:77:e6:98:7f:3d:9e:1e:78:01:25:57:
72:55:ad:08:e0:6f:7a:1e:d1:66:53:a4:c2:6d:eb:da:13:a2:
09:44:4f:ae:51:ca:ee:9f:54:d8:0c:05:94:0e:ba:f8:77:93:
84:0e:d9:0e:f6:e8:b1:e7:94:16:9c:9a:66:e0:9c:3f:f2:aa:
84:06:0b:f4:e5:56:fe:d0:54:35:67:6b:7b:ed:ab:52:a4:e7:
7a:71:7a:a0:c9:4c:1b:5a:5c:d4:22:bc:82:d1:91:4c:1c:5b:
c6:ce:54:f1:b4:18:90:4a:98:ac:39:07:f8:7a:50:ce:48:fd:
5b:d6:b9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:19:17 2025 by rpki-client