Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: uBRagtLWRvgMaTKtidNHGWPgdm8DoHGeXBL0dJOt7ZI=
Subject key identifier: 23:8A:4C:FE:93:F3:14:43:0B:89:1A:76:0D:B9:10:0E:03:D3:B3:AB
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 019889218547B53D414BEFA28B5B1A06D97A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 10:02:11 +0000
Manifest this update: Fri 08 Aug 2025 10:02:11 +0000
Manifest next update: Sat 09 Aug 2025 10:02:11 +0000
Files and hashes: 1: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: JVrRbWbkn6DNDw4zmyRPBf0cA3Y6ARzjTTgNcKyutXM=)
2: zwiEAg55TtHyIaM_PRVFnX4DSAo.roa (hash: ylKaMThBpY1ZvZheIftHUUCXqnEHukLo3wFRWG0DpZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:85:47:b5:3d:41:4b:ef:a2:8b:5b:1a:06:d9:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Aug 8 10:02:11 2025 GMT
Not After : Aug 9 10:02:11 2025 GMT
Subject: CN=238a4cfe93f314430b891a760db9100e03d3b3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:42:33:68:b2:90:15:9f:d5:f0:2b:62:17:aa:
be:d6:02:ad:fd:a4:88:5a:df:38:5c:06:ee:82:66:
5f:c4:c9:9e:e6:90:5d:13:2d:a1:25:7f:a1:0f:83:
15:f3:fb:53:26:d5:8e:5d:37:31:2a:63:fb:3d:85:
49:98:dc:70:d7:d3:ca:0b:86:36:d3:4f:c3:0d:83:
ab:81:ab:18:59:6d:b6:fb:e7:9b:17:6b:6b:54:ea:
79:f4:72:cf:bf:2c:26:3b:38:3a:84:e0:c8:3c:ad:
c5:5b:e5:35:3a:48:5b:37:35:5a:96:13:29:b9:ff:
60:15:92:4a:6c:5e:27:5b:9c:fc:8b:48:98:84:1b:
00:7c:8c:92:aa:44:92:40:b5:b4:90:c6:27:9f:17:
d3:77:e3:a5:6e:e7:e7:2c:f8:06:b4:6a:94:47:d0:
d4:4a:de:6d:e4:31:3c:2b:65:ab:c6:77:d8:c5:75:
21:8d:c2:14:97:dc:f9:6e:cf:b2:3f:a2:ca:08:6d:
eb:f4:3a:46:d5:5b:c4:73:48:4f:28:43:fe:e9:88:
88:6a:60:21:1c:76:98:8e:ff:37:13:ac:5e:3a:1a:
d7:20:a8:ab:a3:94:23:98:da:06:aa:58:fb:1d:c0:
cf:d8:2c:67:02:2b:ef:e9:f3:e0:15:d1:c0:51:dd:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8A:4C:FE:93:F3:14:43:0B:89:1A:76:0D:B9:10:0E:03:D3:B3:AB
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:cc:df:08:78:49:88:e9:72:b1:c3:b3:a6:63:be:95:1b:0e:
22:8e:04:70:43:87:60:08:0f:03:d2:78:21:bd:82:46:24:97:
21:a6:f4:7b:e9:a8:a7:92:b7:18:a4:ac:d4:ba:0d:b3:9f:ee:
e8:99:4f:d5:98:4a:d3:b7:96:29:52:be:9b:9b:dc:41:56:7c:
03:22:57:cd:14:0e:df:0f:7c:2d:43:92:9f:82:ab:92:43:56:
3e:22:7a:45:c5:32:0f:25:38:8a:8b:74:de:4f:38:07:9b:24:
ea:b6:0d:10:df:29:61:42:bf:95:be:82:59:fc:56:d7:2c:b1:
6c:b2:f2:89:6b:06:73:20:50:32:6b:f3:f7:b3:1d:b0:87:5c:
c3:2e:04:e0:68:d3:04:3a:2b:1f:19:89:38:b2:d5:10:ed:24:
ba:ab:ee:8e:e6:41:9e:c3:40:6a:50:a6:2e:02:90:7e:2a:d7:
b5:47:bd:9b:d0:e3:62:b8:71:a2:7a:c3:28:44:35:71:1a:51:
6f:37:56:be:a3:cd:0f:28:d4:f5:66:b9:4d:11:4f:44:8b:1d:
ac:44:73:dc:ac:95:c9:0d:68:e2:7d:41:ca:e3:7e:c3:e5:f2:
6e:4b:1b:8a:37:4b:ce:95:4c:cc:59:51:97:33:be:da:bd:b7:
15:37:7c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:51:21 2025 by rpki-client