Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: YYT44Klw0R4ah7ygy6Ag4aBASdBM4HpY8/+pHAlvoPc=
Subject key identifier: 0D:C8:1F:2C:9E:A8:CF:A4:CB:FB:97:03:1B:BE:46:5A:27:22:3A:64
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 019892C9BFA8AFAA13F522B402772B4A3F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 0F98
Signing time: Sun 10 Aug 2025 07:02:31 +0000
Manifest this update: Sun 10 Aug 2025 07:02:31 +0000
Manifest next update: Mon 11 Aug 2025 07:02:31 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: JD9Y33TeqjgC0XgitNmKp1TPmvh6OBlEurxnRsxSnXk=)
2: i8FpzgugtZcFKDdMebgRZ16RoIg.roa (hash: Z0Wnkrs5xvwFBERJB5wvtxVMhqH4ul49O/mmtU48/Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:bf:a8:af:aa:13:f5:22:b4:02:77:2b:4a:3f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Aug 10 07:02:31 2025 GMT
Not After : Aug 11 07:02:31 2025 GMT
Subject: CN=0dc81f2c9ea8cfa4cbfb97031bbe465a27223a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:ce:51:01:0a:69:7c:6f:f8:78:e6:35:50:
89:f9:6b:e3:65:6f:d4:a4:a3:1f:e9:df:e3:d8:f9:
8c:4a:47:d3:a0:32:61:ee:6b:31:25:55:56:84:d1:
29:71:0e:72:b1:c5:8f:bf:e6:4c:46:83:fb:b7:b7:
09:51:34:6a:6c:4d:d7:2d:e6:df:a9:25:16:ad:f2:
3c:60:c4:c9:6a:09:ff:33:78:f3:b8:e8:ee:18:f3:
d2:c0:e3:4e:55:37:17:3c:9a:90:0f:16:a6:df:46:
87:13:f5:3d:9c:90:10:3b:ee:23:db:a0:67:40:6c:
c6:34:48:3f:09:13:1e:77:fa:46:e3:3e:e7:c4:13:
c6:cc:ec:e1:11:7e:f2:80:37:19:d2:91:e2:50:6b:
56:6e:d5:6d:cf:79:95:9e:23:91:37:cb:6f:fc:b7:
2d:62:82:0a:8b:a9:31:aa:93:c9:2b:dc:b3:85:e1:
1a:c2:50:ee:b3:5f:84:02:4e:14:47:bc:e9:ab:e0:
96:53:34:35:b3:a4:01:6d:67:60:b0:7c:1b:d4:cf:
d7:2a:db:4f:0d:d8:d6:31:f8:d6:97:77:a9:7c:a4:
40:fe:09:f8:fd:9f:37:a7:f2:57:b0:f4:64:c3:1d:
ad:68:80:20:cc:aa:3d:f7:ef:16:e7:ba:40:e7:64:
1b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C8:1F:2C:9E:A8:CF:A4:CB:FB:97:03:1B:BE:46:5A:27:22:3A:64
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fa:04:5f:40:4a:29:da:94:15:f4:b7:d8:35:bf:05:c9:70:
11:fa:d3:de:89:c5:12:90:7b:3f:b8:5b:f7:af:a6:e2:b6:53:
a6:43:01:28:d9:7c:a4:a8:08:7d:1f:a3:fd:ce:1d:0a:9c:02:
31:39:b0:10:5d:a2:26:e3:ec:71:af:cc:11:fa:6c:d2:83:16:
40:e6:f8:f7:55:9e:ef:fd:93:a3:80:79:53:35:3f:1d:29:97:
19:4c:38:00:5e:ff:3f:7e:1e:a2:54:62:06:99:86:cd:40:59:
22:83:aa:ba:12:a3:56:28:c6:18:46:2d:d4:8e:c6:ef:8a:70:
f5:3c:42:de:97:18:02:82:d1:4b:c5:8c:e1:28:c7:c1:fa:77:
25:e8:5c:73:d0:77:37:0b:18:f7:17:64:79:ac:47:20:28:56:
29:67:42:24:ab:b5:71:09:1a:b0:4b:4a:b8:74:e4:66:b6:cf:
39:64:93:a1:6e:fc:43:1e:67:8f:7f:2b:f1:63:fa:5a:78:e3:
c7:1b:ff:ef:1d:7b:f2:57:4b:c7:74:55:97:a2:28:c7:47:1a:
31:dc:1a:b4:89:c5:d2:95:ff:9f:9f:27:82:e6:e6:21:57:7f:
a7:76:a5:c0:30:e5:15:e9:c9:14:15:31:78:9e:23:1f:3b:fb:
f2:37:52:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:21 2025 by rpki-client