Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json)
Hash identifier: UotRSGsOtetPZUQPtePi4iBsnECrlxglseVm/LmqDMc=
Subject key identifier: F6:2E:48:A3:21:35:D6:31:1D:63:CA:EE:62:22:97:E7:89:26:C5:83
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 01988A69C96B4F62DBEA449FD7220B9911BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
Manifest number: 39
Signing time: Fri 08 Aug 2025 16:00:45 +0000
Manifest this update: Fri 08 Aug 2025 16:00:45 +0000
Manifest next update: Sat 09 Aug 2025 16:00:45 +0000
Files and hashes: 1: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: W44PVddhzG/TPPEuCqVuu2aj8j6+IT5laq2Mt0hMpCo=)
2: Fo3iE_kBXV_uZG324P37hp7JHlo.roa (hash: vTWsg5KZNwkHAURrc4HY59QeytyAW5MDAtvE7QlOAAc=)
3: Wsal890lGBfSVCv5KTPQ4Iwb9Z8.roa (hash: 4sf4D+shg4PxizfTIk0m7V8aFTYIPfkSV1v67RUvT4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:c9:6b:4f:62:db:ea:44:9f:d7:22:0b:99:11:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Aug 8 16:00:45 2025 GMT
Not After : Aug 9 16:00:45 2025 GMT
Subject: CN=f62e48a32135d6311d63caee622297e78926c583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0b:39:17:4d:e4:70:76:ca:5f:0b:2e:7a:0a:
c1:f1:7f:1f:7b:56:11:3a:c7:b8:02:96:3a:cf:1c:
42:26:67:18:f1:bf:72:bf:69:c2:64:fe:55:9d:cc:
29:ed:21:b1:8e:f0:53:2d:51:a8:43:94:1d:29:4f:
ec:42:ab:1a:51:03:8c:ff:67:78:32:64:0f:1a:7a:
39:3f:68:99:30:28:34:aa:5e:78:16:c6:77:d3:20:
8b:58:38:c6:2a:6e:b9:c9:8d:15:40:84:04:25:f9:
3e:29:9f:0d:cc:03:5f:5f:f8:ff:09:f3:85:e9:2e:
5b:90:c8:52:ca:b1:0e:1c:c2:05:32:fc:5d:84:cf:
df:3d:26:1c:05:ee:63:66:ce:c5:98:e2:ee:78:65:
44:64:23:22:f5:70:d6:66:db:e1:4e:ee:8b:69:78:
6f:f8:55:f9:29:7a:2a:32:76:02:0a:46:52:c0:9f:
eb:d1:f5:52:8a:cc:98:8d:4a:07:43:88:d8:53:88:
e4:19:61:83:56:29:78:a8:28:4f:97:4f:eb:af:5e:
27:14:20:8b:9c:4a:be:5a:79:9d:a6:80:95:2b:bb:
36:24:e6:af:ab:6b:8e:8a:92:22:36:d2:f7:6d:95:
1c:65:96:0e:b7:6a:70:67:b6:d6:bc:8a:56:3a:cf:
38:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2E:48:A3:21:35:D6:31:1D:63:CA:EE:62:22:97:E7:89:26:C5:83
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:67:fe:1c:4a:c6:36:30:ca:e7:90:a4:86:b1:66:61:07:4c:
5c:1b:eb:76:cf:4a:22:0a:b4:ed:39:79:21:f4:c3:d5:f8:87:
a0:24:00:1e:c5:3b:4e:1c:42:69:a9:55:69:c7:1a:c2:dc:78:
00:2d:cc:ef:0e:b2:da:3a:68:0e:58:3e:8d:52:d7:0c:6c:07:
e6:ef:e3:92:95:16:2d:4e:ea:73:1f:8e:2b:e7:c3:52:5b:ad:
4c:ad:2a:7e:79:c5:4f:df:2e:11:f8:cf:d4:1b:72:52:05:da:
78:09:ae:b3:7c:43:0e:49:17:52:b5:8b:b0:78:5c:24:a8:12:
5e:8f:af:e1:0d:53:7a:af:5a:77:32:29:e4:bf:40:85:f5:b9:
d8:50:77:22:bb:cb:d5:63:1d:b5:c6:eb:d3:4f:a9:ab:13:1d:
95:19:ef:63:25:5e:b8:d5:c8:ee:7f:cf:5f:fc:4a:2e:51:8d:
f4:57:b3:27:e7:5c:ce:00:fc:c6:9e:19:e7:2d:44:cc:77:16:
2a:a5:42:bf:a0:07:14:fd:ab:5e:75:45:7e:8a:75:c4:4b:21:
a2:58:9e:5a:0e:4b:48:d0:55:d4:88:e8:e0:4a:c7:6e:e0:33:
1a:d2:fd:0d:40:05:17:3b:b5:14:9d:d7:6b:f7:62:c7:73:43:
ec:e2:a0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:19:53 2025 by rpki-client