Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
File: 3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft (raw, json)
Hash identifier: GGtpV2iaQ963hRyExVLED7JhmK0m0XQQ3mZlipeiQTk=
Subject key identifier: 70:89:77:40:0C:2E:57:2C:C9:F7:B9:15:BD:69:5E:BD:75:88:BA:E5
Authority key identifier: DC:C4:3A:47:09:76:F3:74:7F:68:2E:32:D2:7C:3E:CA:CE:E0:CC:59
Certificate issuer: /CN=dcc43a470976f3747f682e32d27c3ecacee0cc59
Certificate serial: 01988F591CE23CF3C4EECBFBD194107B967D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
Manifest number: C6
Signing time: Sat 09 Aug 2025 15:00:38 +0000
Manifest this update: Sat 09 Aug 2025 15:00:38 +0000
Manifest next update: Sun 10 Aug 2025 15:00:38 +0000
Files and hashes: 1: 3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl (hash: P1VLpCUQ7MLt6jRKvs2aVlOjRRj5u28SBHPOb88rq0M=)
2: ttiSctxtKk--_TjJLyKyxsLTH5M.roa (hash: cExQTThTOKNeo7f6JBcYKDPiMo9ejsGy+rMa2dC0A4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:1c:e2:3c:f3:c4:ee:cb:fb:d1:94:10:7b:96:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc43a470976f3747f682e32d27c3ecacee0cc59
Validity
Not Before: Aug 9 15:00:38 2025 GMT
Not After : Aug 10 15:00:38 2025 GMT
Subject: CN=708977400c2e572cc9f7b915bd695ebd7588bae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:62:ae:0f:88:9f:ff:aa:1e:a5:21:6e:99:
92:81:ae:7d:50:6f:67:6d:30:25:c7:ed:9c:ed:18:
96:0b:79:ee:7c:f1:bb:e4:ea:3d:a4:e8:0e:2f:89:
35:92:90:d5:92:a5:9d:49:cc:41:67:86:32:ed:64:
17:ee:4c:92:f3:08:55:1d:1d:fe:06:46:aa:3e:61:
7c:97:9f:dc:8e:7b:de:2b:b2:29:cd:d9:54:dc:6f:
e7:c4:7f:50:07:83:da:4c:72:1f:97:54:d8:15:cc:
43:25:65:f7:ed:90:68:8e:ed:26:6a:7c:0d:4e:73:
81:cc:7d:8e:df:26:af:7c:0e:69:56:fa:e7:95:df:
3b:64:98:0f:85:35:41:44:22:b1:8a:86:99:d6:ae:
6d:b0:ce:50:20:5e:76:d5:01:f3:f0:37:cd:b2:32:
f5:9a:3c:59:f8:16:f6:d5:44:dd:33:81:da:cd:1b:
3b:9c:ad:39:22:d1:a4:8e:a6:d6:85:78:a9:1a:90:
76:67:53:77:76:4c:06:47:73:3e:1a:25:98:62:81:
c1:dc:1f:38:7e:30:5a:25:a9:60:63:ad:f2:58:93:
8b:56:1d:6a:17:0c:7c:d2:6a:f4:d6:da:61:3d:93:
e0:86:e2:a7:0b:87:3c:90:e1:1d:1f:90:11:da:bd:
a3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:77:40:0C:2E:57:2C:C9:F7:B9:15:BD:69:5E:BD:75:88:BA:E5
X509v3 Authority Key Identifier:
keyid:DC:C4:3A:47:09:76:F3:74:7F:68:2E:32:D2:7C:3E:CA:CE:E0:CC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0f:30:f1:09:18:4b:68:b5:99:cd:d4:12:64:bb:b2:86:1a:
2f:6a:63:4e:3d:ee:22:aa:69:bc:03:a7:7e:8b:ab:34:69:51:
1a:e3:2b:db:e3:35:c9:1e:c0:88:d7:94:99:51:7d:6c:5e:c5:
cf:91:98:f6:bf:06:65:31:06:53:79:04:cd:a7:52:88:67:cb:
32:18:ac:b9:cc:3e:11:41:b0:8a:9d:ce:8f:01:13:6b:94:ba:
e9:53:78:ac:5c:9e:15:2f:ff:13:e8:1a:3c:da:4b:e2:a2:d3:
de:d4:1b:de:86:cf:21:2d:ad:0a:e7:33:74:d7:33:68:18:a7:
ce:9a:45:70:fe:73:77:42:d3:fb:81:3f:34:62:b6:1d:5e:1c:
ed:9f:ef:83:6d:d2:42:3f:26:94:27:cf:1c:8d:93:e8:c8:15:
52:7b:7e:52:69:f6:f9:42:fd:f0:4c:11:d5:63:b8:2e:a1:20:
54:c7:dc:7b:c7:ad:c4:a9:dd:cd:5b:e8:29:30:9f:e3:6d:f2:
60:28:51:bc:5a:09:8a:32:85:e6:4a:4e:46:f4:1d:25:0d:fd:
f4:05:2d:8d:dc:d0:47:f6:f0:c6:fe:6a:4f:a4:d1:20:a4:f1:
39:7f:f1:b2:6d:47:ce:44:c1:00:5a:44:2f:ff:66:c5:e4:4c:
5e:76:3c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:54 2025 by rpki-client