Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
File: 3itcv5Z6A0nYiXBLtNYfpSajHW8.mft (raw, json)
Hash identifier: BKnsCubvbMDOR0PxYaokZc7DNN33gFCWeTC8eUPkZa0=
Subject key identifier: 03:15:B0:4F:6B:1B:C7:8C:89:B0:A7:21:52:23:1D:EB:2C:A3:C6:EA
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial: 0198808AF11F748A8DAFB15960741559F41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
Manifest number: 155D
Signing time: Wed 06 Aug 2025 18:00:45 +0000
Manifest this update: Wed 06 Aug 2025 18:00:45 +0000
Manifest next update: Thu 07 Aug 2025 18:00:45 +0000
Files and hashes: 1: 3itcv5Z6A0nYiXBLtNYfpSajHW8.crl (hash: 4+P7L6oCf9M0dGXytdHHhu44I5bLKlkisiQS6xD1Pu0=)
2: RmRTHkNLraqOOzazgFQdU_YCKkM.roa (hash: 5SoXabo2aLivwm4lm+kA69S7S7+v67Nc52d80muCgcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8a:f1:1f:74:8a:8d:af:b1:59:60:74:15:59:f4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Validity
Not Before: Aug 6 18:00:45 2025 GMT
Not After : Aug 7 18:00:45 2025 GMT
Subject: CN=0315b04f6b1bc78c89b0a72152231deb2ca3c6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:90:87:1e:d7:be:28:76:9b:0b:71:10:b5:
e4:2e:49:90:db:d8:dd:f7:9c:f9:05:07:37:66:47:
4c:ec:5c:6e:4d:32:5f:b9:e3:1d:0b:7c:56:4c:09:
c7:fd:3e:56:bc:bd:36:d2:94:2d:15:81:ea:1c:8e:
d7:8a:fe:e9:59:b1:7d:ce:5e:b9:f9:45:0e:c8:88:
5b:a8:75:3f:c4:48:54:1a:15:c7:94:ae:88:4d:75:
e9:14:e4:b5:5d:e8:8a:90:d1:10:a9:55:0a:ec:56:
f1:d2:a0:4e:f8:47:60:de:b9:83:c9:ba:c7:3d:27:
a4:32:9f:ef:6d:e8:51:9e:47:7c:5f:49:d2:f6:03:
57:97:3c:5d:9f:48:83:6c:0a:2d:05:8d:40:48:40:
31:47:d4:73:51:82:0d:c3:72:bf:51:d0:e5:97:7e:
55:f4:6f:91:3a:cb:8a:cf:9d:29:14:71:0c:ce:12:
2b:16:f1:93:78:ad:21:c1:fc:a1:b7:c0:90:f7:68:
89:ae:57:3f:8d:76:23:40:a3:06:f6:9c:77:aa:52:
f6:4d:79:46:c1:41:41:94:1a:95:a8:93:72:a0:47:
85:32:4a:7a:74:5f:9c:35:63:d1:51:c7:7c:76:fe:
2e:dd:1b:de:16:88:89:d6:95:bc:97:3f:3f:49:5b:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:15:B0:4F:6B:1B:C7:8C:89:B0:A7:21:52:23:1D:EB:2C:A3:C6:EA
X509v3 Authority Key Identifier:
keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2f:31:f3:38:40:72:eb:2b:ce:44:a2:59:db:e8:4e:f0:1d:
4b:97:25:47:9a:a0:79:95:d8:ec:a3:0f:fe:07:16:ce:b4:8a:
b3:4f:c5:fe:ac:93:17:dc:8c:45:40:03:57:04:0d:07:d1:f7:
dd:a0:38:4e:96:ae:0b:95:34:3c:1a:2c:54:79:11:06:30:80:
2b:d0:0a:e7:76:d8:70:93:36:88:1f:fd:4e:d5:db:14:21:06:
de:f8:5e:11:04:42:8f:63:69:40:41:bd:2c:93:87:4c:70:1f:
e1:14:18:b0:47:a2:d5:b2:5b:3e:30:9f:df:d2:1a:2d:de:18:
7f:ae:cb:dd:01:9d:5a:17:8b:40:0e:0a:6f:7c:4d:cd:ce:83:
d2:bb:db:43:55:16:3f:46:0e:e1:7c:2a:ef:73:e7:53:7d:c2:
d8:0b:a3:fe:11:1e:ac:5d:ff:fc:1b:c1:89:69:6d:d3:22:0d:
d6:ab:86:6b:a3:13:1c:2e:66:b8:79:69:17:f5:56:3e:cb:c7:
bd:f4:ba:96:0f:96:56:a0:fe:2e:61:b2:08:32:66:28:91:ad:
54:fa:ce:e3:3c:e8:c9:cc:2d:36:e3:e5:99:b4:0c:f3:06:b6:
c7:f0:aa:93:20:a0:d7:1c:c6:13:20:38:0e:a7:1c:f7:a5:a1:
08:50:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:22 2025 by rpki-client