Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File: 3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier: Y7ziaoZJiYcl/CqYLLNJcouiYlHMzjxasg3kNNXeXyY=
Subject key identifier: A1:80:55:A4:BE:1F:75:CE:1A:FE:E5:11:F8:3F:C3:B6:98:DF:7D:03
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 01987DC131F7ECA0EA25F2BC6D4C64A9AA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number: 10BD
Signing time: Wed 06 Aug 2025 05:01:09 +0000
Manifest this update: Wed 06 Aug 2025 05:01:09 +0000
Manifest next update: Thu 07 Aug 2025 05:01:09 +0000
Files and hashes: 1: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: Z8sCb7pzrTz+Hl6xQ8yvoXprB9THDBZmqkjwIjqsIWo=)
2: To63YyOS4m4xGKG36WLK52zQE8c.roa (hash: tp9xM1hLtDqI8FvsSwdqSoCI37g77m4oJd7PdWAciIs=)
3: rNJomldCeu_xMB-3_GrfVy4SpuA.roa (hash: 0qwCuh+Crxi2V764XIv8ArKA6g54Zdfi93Itg0+iAvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:31:f7:ec:a0:ea:25:f2:bc:6d:4c:64:a9:aa:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Aug 6 05:01:09 2025 GMT
Not After : Aug 7 05:01:09 2025 GMT
Subject: CN=a18055a4be1f75ce1afee511f83fc3b698df7d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f6:3c:0b:f5:42:10:a2:f3:57:1e:87:c4:9e:
c1:6f:c2:fe:9e:ae:35:7c:56:54:99:5c:b6:5b:8a:
79:7b:14:71:5d:b7:5e:de:6e:e9:7d:f1:68:02:6a:
c6:cd:08:63:63:db:cd:3f:e6:ac:96:00:0c:28:d1:
f4:2d:a3:28:1f:66:88:3c:59:b4:59:70:7d:ce:17:
ac:92:5b:ab:4a:7e:b3:41:55:7e:42:62:ae:23:1b:
01:1f:c7:e0:27:5d:c0:b5:4d:8a:94:73:74:14:3b:
df:89:d2:53:4d:2b:e2:74:c1:2a:9b:60:9e:b6:67:
9c:f7:18:8c:b1:a1:67:7d:63:be:cf:a9:11:fc:93:
e5:a3:94:d5:3d:48:ac:87:d9:bb:99:50:a5:a4:c9:
49:ff:02:3d:ed:cb:6a:52:84:1c:4c:6c:4b:46:b1:
c0:f5:bb:ea:d5:47:04:76:46:5c:74:85:fe:b7:a1:
9e:d4:78:71:f7:ec:e7:e4:7b:0b:d9:80:31:36:9f:
11:c3:45:84:48:99:45:6d:b8:4a:9f:cc:c4:2f:3a:
04:39:fe:cd:db:a8:ce:f0:aa:e4:33:ce:06:06:0b:
89:32:06:6b:6e:1f:bc:f1:b4:ad:6f:68:34:f8:4b:
02:58:77:48:5b:12:ac:84:90:ac:eb:47:4b:34:9c:
dd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:80:55:A4:BE:1F:75:CE:1A:FE:E5:11:F8:3F:C3:B6:98:DF:7D:03
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4c:ac:cb:f7:19:d4:be:31:f7:5c:4f:bf:79:0d:fd:e7:21:
88:ee:61:62:81:4a:26:12:c5:d5:c6:1a:85:c9:8a:67:d9:3c:
f9:63:fc:54:01:fc:61:35:d1:58:2c:63:0a:4d:50:07:30:5b:
b6:bc:68:85:7e:eb:ec:92:2e:b4:05:68:1f:79:4e:f6:78:d4:
e7:a3:f8:83:8d:15:2c:f2:98:9e:a5:ec:10:4f:da:11:57:03:
68:54:b9:d8:76:4a:9a:4e:f6:04:8e:48:d2:95:f1:ab:c1:3f:
81:91:cc:30:ff:4d:9a:ec:4a:32:2f:7c:47:f6:c0:3d:2c:dc:
65:a6:f7:94:7a:29:6b:27:f4:28:44:a5:ab:cf:30:37:d2:01:
6e:c3:dc:73:0a:75:48:1c:6b:0f:d7:76:d5:be:b8:84:8c:15:
51:ac:50:7b:a8:a8:3d:0f:a0:79:3c:9e:87:fd:97:a4:6a:00:
76:1d:5f:6e:9d:75:c4:d3:a5:6a:18:d4:21:fb:0b:fe:23:4a:
65:d1:05:64:6f:b6:8e:cb:a6:58:33:6d:73:30:97:33:9d:98:
8f:a0:d4:48:ac:80:1a:e7:f4:1c:a8:25:5d:9e:e8:da:7e:74:
ca:37:97:5b:35:21:c3:73:68:52:66:1c:6b:6d:7a:25:ea:d3:
81:d0:65:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:43:10 2025 by rpki-client