Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: gHfD35WusdQ82RCnJEmu66PyOfSXSuYU9Nst6BBHRXM=
Subject key identifier: 0F:5A:1D:79:2D:80:A0:15:E5:F9:D4:E6:1B:30:A6:5E:BE:92:58:22
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 01987298C2E1FAABB6BAF6FA8E13260FFB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 01:01:10 +0000
Manifest this update: Mon 04 Aug 2025 01:01:10 +0000
Manifest next update: Tue 05 Aug 2025 01:01:10 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: 2bK+ub1fz4p8OpV3yD5UC+C+ZjU5gfBOh4lbpowuFuQ=)
2: d-cXZlvvdlyn7ox05EmpqUd6gwY.roa (hash: nBiz8J2UJroitgcJmWpKEDt0TmsVS2dSW257R8wSk2M=)
3: ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa (hash: 0XE307HFpJ7wb9YEVzh633mz+Wdn4W7KWCgB9kPDSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:c2:e1:fa:ab:b6:ba:f6:fa:8e:13:26:0f:fb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Aug 4 01:01:10 2025 GMT
Not After : Aug 5 01:01:10 2025 GMT
Subject: CN=0f5a1d792d80a015e5f9d4e61b30a65ebe925822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9b:48:61:57:77:96:3a:cd:4c:1b:83:dd:39:
d4:78:8d:ea:4f:94:52:28:5c:3f:ac:21:4d:82:a0:
5e:81:3a:f1:2b:94:a8:3c:db:aa:4a:cf:6d:33:3d:
e0:04:2a:1e:17:aa:e0:cb:f1:65:8c:73:97:7c:a2:
30:65:2d:04:c0:a8:c6:cd:cb:8c:fb:40:9e:7d:6f:
a2:d9:ad:bb:b9:d1:a5:60:f1:af:ab:1b:c8:13:8c:
83:55:76:37:de:ac:ed:f2:02:bf:8a:20:41:d7:bf:
79:65:17:e5:1c:29:5d:b5:68:9c:61:8d:42:03:d1:
8e:97:a0:29:29:24:9c:8e:28:dd:b6:a5:fe:bd:e1:
d4:02:0b:a5:86:4d:5d:c7:56:fb:23:b9:43:c5:fa:
ea:ba:1e:4b:7e:97:63:aa:29:fa:7f:c2:36:8d:6a:
99:b7:28:92:47:05:95:85:fc:66:34:21:77:f5:ed:
dc:c9:c6:bd:27:e6:2d:b3:c1:f1:14:b8:06:20:59:
4b:d3:2f:ce:95:54:40:5a:8c:9d:2f:4e:04:ab:6f:
89:43:22:dc:78:f0:0e:c7:c0:8a:31:6c:9f:a5:8f:
39:21:47:34:4a:3b:1d:d2:ae:26:c3:f7:4a:4f:52:
d3:3d:1c:bc:4b:45:a3:f0:16:26:dd:1b:ba:ec:28:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5A:1D:79:2D:80:A0:15:E5:F9:D4:E6:1B:30:A6:5E:BE:92:58:22
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:91:2d:fb:ea:70:a4:e3:c2:10:d9:99:90:d3:0e:f2:a0:4c:
96:1d:a9:77:3d:2e:cb:7f:ff:62:bd:62:13:9e:40:43:dd:01:
e5:84:01:56:09:0d:27:52:9d:ec:06:e0:2c:25:40:d2:2a:78:
ce:c4:e0:ad:19:b9:a9:67:52:0f:ef:47:d0:5c:21:d4:45:76:
0c:5b:3f:6f:bd:7b:a5:a4:ee:12:0c:7f:02:f1:84:ee:a1:fd:
67:8e:aa:61:ca:80:39:37:6b:98:89:2e:aa:a9:f5:68:2b:2f:
83:f1:13:88:e7:76:f1:b4:19:9c:49:cf:4e:8e:c6:f0:7e:bf:
66:5c:34:99:08:98:b9:4a:0f:a1:57:3a:67:b0:f0:63:70:08:
bc:5c:f5:be:98:0c:c0:91:fa:fd:c1:aa:2b:69:f1:d8:43:d3:
e1:db:0f:dc:51:ab:3a:8c:06:b6:9b:f5:6e:c7:72:02:0f:d9:
c9:c1:2f:14:9c:0a:85:08:31:f1:3d:76:1f:c2:c8:c1:cb:ce:
8a:39:f2:c7:84:74:88:6a:b9:dc:51:b2:f9:b1:77:19:86:47:
e7:d2:4d:25:75:b5:88:61:8d:6c:69:73:50:a8:61:a1:ed:9a:
9b:8f:2c:9b:7b:fd:d7:f0:5e:08:0c:65:3b:3d:d9:cf:4c:92:
66:e0:9e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:55 2025 by rpki-client