Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: lgdaBAskL0KKK4tKKGDq8FWiIYl+q5Fv5RCRVZFmhXM=
Subject key identifier: 08:E9:14:56:57:13:D4:9B:94:5D:87:35:DE:2C:8C:C3:7D:50:9C:F6
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 019893DB14FAB2D4C1304B3A5A82DC2CE1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 4C
Signing time: Sun 10 Aug 2025 12:01:05 +0000
Manifest this update: Sun 10 Aug 2025 12:01:05 +0000
Manifest next update: Mon 11 Aug 2025 12:01:05 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: m60HEVleNnRXhXDoOja76eHjOVnKKikY+AqGiPzHw+k=)
2: Q4iWZ496HCNmYZBIWBOYyxR29Uc.roa (hash: 7wrmL3IIhgsOUmrN36LQ1NncM+5WHq2SxfG9P1s/Hs8=)
3: elJZVsJM-cu186hJqa3wLJ-HvIY.roa (hash: ARy/RhAUZB3gjAcZcQ/EM7MONeLO821NzwpDjV1Ze2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:db:14:fa:b2:d4:c1:30:4b:3a:5a:82:dc:2c:e1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Aug 10 12:01:05 2025 GMT
Not After : Aug 11 12:01:05 2025 GMT
Subject: CN=08e914565713d49b945d8735de2c8cc37d509cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3f:0a:48:e6:74:c2:dd:40:95:52:62:0c:08:
48:a8:b9:f0:13:4e:be:5c:28:85:a8:75:46:3b:c6:
80:19:b1:c4:28:21:cb:74:25:ca:bf:8e:b3:ce:4d:
90:c8:38:25:71:6a:32:3f:c1:54:58:79:2b:09:6a:
9e:db:7f:5a:a0:c6:36:81:c7:a3:36:ec:7a:94:91:
42:5c:d9:fd:56:4e:53:fa:12:a1:c5:a0:e7:d3:f3:
1f:e5:49:11:23:72:91:3d:60:07:d5:c6:68:ff:2a:
d9:04:60:8b:51:86:93:15:e2:66:75:ba:ca:b1:24:
9c:0c:cc:25:48:5b:29:4f:d7:6c:d6:df:46:9a:07:
e5:3c:9a:cc:ff:c2:59:04:ac:9e:a6:2a:c2:32:40:
de:f5:99:fc:c3:1f:f1:aa:51:30:e3:73:7c:db:55:
6b:03:66:2d:f3:ac:55:bf:90:9c:48:32:f0:b9:26:
94:88:6d:20:a7:60:e1:d8:88:ee:2d:2c:79:75:f1:
98:56:5c:0b:96:fa:da:2b:04:15:5c:f8:fe:6b:0a:
40:b2:91:f6:3e:79:23:01:81:1a:7f:62:13:52:ea:
f5:08:29:ec:86:e9:ea:7b:1a:59:9b:27:26:39:e0:
1c:15:8c:a3:f4:e4:4d:77:60:04:29:4b:5e:6a:78:
5a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E9:14:56:57:13:D4:9B:94:5D:87:35:DE:2C:8C:C3:7D:50:9C:F6
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9c:7e:ea:96:cd:d4:c6:0d:4a:df:ea:e1:96:36:95:95:0f:
7c:29:99:76:40:32:af:d9:10:38:e8:2c:77:3a:31:9b:c3:d1:
f6:2f:6e:0a:7a:c4:7c:22:fe:9a:b9:db:b0:3f:19:07:d2:35:
e6:df:29:f9:0a:9e:dd:c4:04:58:75:8a:8c:f8:e8:e8:12:9a:
f9:7a:fc:00:9e:81:75:b0:23:3c:7f:37:3d:ac:25:fe:9c:b0:
da:c2:a6:d9:e3:84:97:39:79:24:11:da:25:8e:2a:82:28:87:
aa:d4:b4:60:49:ef:d8:70:01:60:de:1b:b2:40:9b:e4:f9:70:
26:a5:55:92:1a:34:df:c0:a1:15:f1:2f:f0:37:46:1e:da:02:
fa:f5:46:2a:6c:e2:36:bd:97:e5:1d:1e:5c:f7:5a:37:6d:e1:
2b:62:0d:f2:5d:a2:97:7e:e6:a7:8f:53:a4:6c:d6:88:8c:d3:
22:a7:50:82:43:60:b6:1d:31:85:da:f1:5b:a9:c9:51:9f:85:
60:54:c2:3c:3a:3e:94:f9:24:8e:f8:3c:15:dc:89:6f:41:83:
c4:45:1d:1b:3c:7e:9c:49:6b:c7:bc:ad:94:ac:c4:5b:02:71:
a6:23:6d:37:be:40:cf:b6:ce:15:71:6f:0e:b5:41:df:c4:f8:
19:07:c4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:32:28 2025 by rpki-client