Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: Ib/ytmn8i40Bowm4sX21NfqQq19LWLsOZaG6otAzzDw=
Subject key identifier: FF:EF:7D:9A:46:DE:44:78:2D:6B:E5:10:44:0C:61:5D:A2:44:A6:F8
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01988DA22683DF34E759907A61D2C4C97134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 11ED
Signing time: Sat 09 Aug 2025 07:01:10 +0000
Manifest this update: Sat 09 Aug 2025 07:01:10 +0000
Manifest next update: Sun 10 Aug 2025 07:01:10 +0000
Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: x/VHo8eV/OLTBwCKHOrzAU2OQspZDSBEQVBA+PHm9o0=)
3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=)
4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=)
5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=)
6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=)
7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=)
8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a2:26:83:df:34:e7:59:90:7a:61:d2:c4:c9:71:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 9 07:01:10 2025 GMT
Not After : Aug 10 07:01:10 2025 GMT
Subject: CN=ffef7d9a46de44782d6be510440c615da244a6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:54:5a:ef:89:63:29:a5:01:11:66:ce:57:
41:ae:de:43:40:28:25:5a:4e:0f:4f:cb:98:4d:5b:
19:12:2d:98:85:46:ab:9a:1b:e3:53:b4:66:53:2d:
c2:de:ab:bf:c4:8e:26:a8:89:0c:a0:a7:7f:ae:80:
30:05:79:69:06:79:51:53:43:92:b6:be:74:4a:40:
f9:d3:47:59:98:a3:5c:ce:8f:19:44:43:04:b9:73:
27:1a:d5:51:c2:bc:b1:ca:fe:1a:4f:39:86:66:e0:
65:f0:1c:be:9c:91:40:46:fa:c0:a5:d8:22:66:a4:
90:98:e0:8e:29:17:a4:4f:db:63:1d:72:3f:1e:38:
9f:27:1e:df:a6:60:ad:ca:d2:9c:26:b3:b2:21:bf:
df:25:c9:78:60:b8:e0:1f:47:ec:38:f6:1e:4e:0d:
52:6b:57:4e:e8:76:47:18:a9:2d:c6:78:91:4b:74:
e6:a1:46:03:b4:30:4b:d8:aa:bb:f9:d8:be:61:9c:
e0:0b:ec:c8:63:ca:22:65:0b:5c:2f:63:de:05:68:
52:18:28:98:53:21:22:0d:be:12:91:d7:02:e5:3c:
51:6d:39:e3:04:50:0d:af:1e:3b:05:07:75:e3:67:
ad:97:60:da:97:02:75:77:9b:3a:ac:5a:7a:b8:d9:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EF:7D:9A:46:DE:44:78:2D:6B:E5:10:44:0C:61:5D:A2:44:A6:F8
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ed:86:a2:f2:c9:fc:30:33:32:85:4a:e1:be:1e:92:73:88:
5a:ad:d5:6d:f5:4f:f9:15:09:79:68:ea:c7:61:ad:d5:b9:af:
3f:af:b8:b6:26:eb:4a:3a:81:f3:3b:2a:53:b9:b8:96:0d:96:
87:b8:15:ec:af:bd:c1:b8:88:10:dc:6c:ac:47:b6:a7:ba:fa:
3a:35:80:ff:23:f0:e1:97:12:a4:95:5e:e5:68:9a:07:f5:70:
77:2d:18:e4:fe:5d:fb:cf:a2:1c:29:6b:69:17:f3:19:db:fa:
9d:de:9f:e2:c7:ac:ba:ad:19:59:b7:b6:35:8e:66:f7:9d:31:
aa:fc:a3:f3:a4:ba:74:b4:d1:f8:7d:a0:11:0a:1a:82:52:dc:
bf:56:ae:86:6e:bd:82:b6:6a:3c:48:11:b5:96:40:72:8d:63:
64:c3:b4:0e:67:31:5c:46:3e:bf:a5:ed:e4:48:ab:34:3f:0b:
d2:92:f8:57:84:32:c5:10:bf:53:98:dd:7c:75:ff:5f:db:38:
20:a5:be:a2:1d:32:ed:38:a6:c5:ad:9e:18:ed:db:fe:11:e3:
1b:cc:89:1b:37:7d:02:e7:0b:06:a4:20:23:02:e4:b7:96:b8:
66:7b:a6:96:45:1c:78:d8:2f:0b:57:bb:79:f0:88:7c:9d:59:
67:eb:71:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:17:26 2025 by rpki-client