
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: IkxCJQZr1uEvmpX2gweYveF8CHY7aJqFVhmaL2INk78=
Subject key identifier: DE:38:EC:6C:F2:67:E3:1D:6A:5D:20:94:08:AD:E8:CC:2C:B1:84:4A
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 01987E9CBE7A6BFCC0F224CFDD0207D19FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 0F5D
Signing time: Wed 06 Aug 2025 09:00:58 +0000
Manifest this update: Wed 06 Aug 2025 09:00:58 +0000
Manifest next update: Thu 07 Aug 2025 09:00:58 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: 034dq4wS+NWPBICOoNAgX3GdWm2+NJHt6MhEcQT7z98=)
2: M0CEGpqdnFyhH05u6ywrw5xpjxw.roa (hash: Da8bL20Ezk/7GnIViJo/xS7eFj2lqLDIbA2oioZuSt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:be:7a:6b:fc:c0:f2:24:cf:dd:02:07:d1:9f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Aug 6 09:00:58 2025 GMT
Not After : Aug 7 09:00:58 2025 GMT
Subject: CN=de38ec6cf267e31d6a5d209408ade8cc2cb1844a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:19:21:6c:14:25:65:6e:b3:0e:32:70:f6:
84:28:1d:8b:77:33:26:47:7a:05:09:3e:70:2b:76:
29:d4:f2:cf:f4:05:fc:f7:95:4b:39:5f:48:06:84:
2e:2d:49:54:b5:e8:a8:0c:4c:b4:28:76:07:7b:c1:
f3:f0:e2:d8:74:7c:48:75:ea:1b:00:9c:8f:92:f4:
51:3f:f3:4c:5f:b0:f6:0c:4a:60:6d:78:e3:62:eb:
56:0e:4e:9e:16:67:99:41:6d:46:1d:d7:4e:7d:93:
26:b0:a2:d5:38:b9:d2:23:cf:46:a7:b4:a7:35:ef:
f8:d9:3e:d0:d4:ae:72:48:a3:2d:82:cb:8d:bd:7e:
02:e1:ed:08:1e:79:a7:a8:bd:da:b6:1a:84:51:89:
68:1c:a3:05:30:61:9e:47:8d:9c:83:6f:84:60:da:
f7:06:41:1b:be:02:dd:62:a6:fe:f5:b5:f8:11:84:
31:2f:de:06:73:f9:f6:a6:a8:0f:76:04:fd:6b:e4:
b4:2f:f8:d9:ba:f6:69:69:e3:ab:7c:c8:02:b9:c0:
47:b9:72:65:99:d5:e7:2a:c0:04:3b:15:2a:7f:52:
af:a9:36:62:cc:63:fc:fd:94:0e:74:5d:28:0d:b8:
a4:0a:34:ca:b1:09:59:3d:ff:77:ff:64:3f:26:e1:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:38:EC:6C:F2:67:E3:1D:6A:5D:20:94:08:AD:E8:CC:2C:B1:84:4A
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5e:33:56:c8:24:44:fe:9d:b7:24:2e:21:97:b6:7f:e9:4b:
9c:7e:57:a6:d8:81:34:5d:57:b9:de:4d:fd:9d:4f:91:39:de:
84:5e:bb:03:15:06:97:d4:a3:ad:82:06:35:26:b0:bf:46:7e:
27:75:ef:33:f2:37:03:ec:80:f7:f7:66:5b:03:11:c0:6c:5e:
74:c3:63:ef:28:16:04:41:e6:08:f0:b2:ea:00:e2:03:7e:db:
70:f2:72:ab:2f:ef:27:b5:d1:10:be:df:65:7c:e6:67:96:c2:
bd:e1:4f:58:dc:60:e6:c5:30:06:d2:b1:54:ef:08:8c:b9:98:
2a:31:26:2b:4b:d4:69:c1:5f:3e:cd:16:65:c2:df:51:ed:81:
a9:7f:2c:db:0c:8f:f7:39:07:07:b8:27:e8:b3:ab:96:81:38:
5e:75:c0:ae:d7:20:50:ee:36:82:31:42:80:4f:be:08:15:f2:
e1:8b:eb:7e:04:15:5d:5b:06:97:a9:5e:08:90:d2:2b:1c:3e:
1e:96:35:6e:ad:ed:ec:18:68:80:34:b1:d6:b1:d8:0e:ae:bf:
71:d0:32:78:31:73:68:e2:9e:71:04:dd:18:35:22:cb:01:ba:
9c:c8:1f:5c:b1:9d:b6:dc:ac:ef:89:5e:9e:96:9a:11:99:57:
06:cd:cf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:37:52 2025 by rpki-client