Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: Ww7WQYTmcJFVZvR9vo6mgaYTZ2Zx+5O4FG4gENPGEXc=
Subject key identifier: DA:89:AB:EB:A4:32:D9:97:56:30:7B:44:D9:FC:A2:6E:B9:25:DF:8D
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 019872CF953AE40C19D7885C71B03D112FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 0BC3
Signing time: Mon 04 Aug 2025 02:01:03 +0000
Manifest this update: Mon 04 Aug 2025 02:01:03 +0000
Manifest next update: Tue 05 Aug 2025 02:01:03 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: MVJlkcM44KJCcKFdEYdK4Mxoy4g3SE9wl/l+VXGCND4=)
2: IWr6TuTrJyjayPLvTxSMqZtzabw.roa (hash: rtpLNLVSn8Vjv4N/NCkqAqr/rBVi4ck/ZAOnbXB0Ovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:95:3a:e4:0c:19:d7:88:5c:71:b0:3d:11:2f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: Aug 4 02:01:03 2025 GMT
Not After : Aug 5 02:01:03 2025 GMT
Subject: CN=da89abeba432d99756307b44d9fca26eb925df8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:d2:ea:02:fc:9a:a1:6d:b8:ae:30:b4:a7:
a0:b4:81:0a:a1:d0:96:3a:38:b3:e3:04:ec:50:ef:
a4:5f:ba:cf:d7:13:75:ba:54:b8:e6:74:02:5d:51:
d0:1a:60:01:21:57:31:00:9b:e2:a4:cd:3c:92:00:
2b:79:21:62:f7:a7:0c:c3:21:08:21:b7:c8:d4:9e:
26:75:b9:78:2f:be:ea:28:01:90:68:f7:3d:49:45:
5b:b9:b1:6a:21:bf:7e:4f:3c:94:a3:9a:17:7d:eb:
8a:40:05:3b:38:ac:19:2d:a3:54:4f:ad:3e:8a:05:
93:42:ad:00:ed:35:80:fd:6a:70:24:30:7b:70:95:
0c:68:3d:9d:54:27:d6:90:b3:1f:9b:cb:08:c6:2f:
48:c1:4f:08:10:1d:fd:37:27:a9:d9:91:65:94:f9:
85:8f:1c:ff:0b:53:5e:34:5c:68:d2:36:24:59:a3:
bb:42:93:dd:8b:97:50:f0:68:00:3a:f0:d4:e9:71:
14:c4:dd:eb:bb:8a:54:37:39:ed:ba:da:e2:a2:3e:
e0:1b:81:c6:96:7b:09:1d:6a:f1:51:32:20:c4:73:
d5:c5:da:12:04:d1:6c:f2:cb:2a:89:0d:15:d6:3f:
18:91:eb:b6:37:54:4f:09:c1:88:39:c6:92:9d:22:
56:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:89:AB:EB:A4:32:D9:97:56:30:7B:44:D9:FC:A2:6E:B9:25:DF:8D
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:7d:3a:b4:c2:1d:3e:5e:f6:cc:f5:87:22:6c:05:4c:47:8c:
be:9c:c9:76:2f:a0:ca:ce:9a:2e:92:08:fc:a4:a6:3c:13:f8:
8d:49:b8:e1:fb:50:d1:fb:fc:f1:f2:ff:ea:5b:a1:e5:82:d8:
2c:6c:05:10:02:e4:c9:2f:80:d7:da:c9:f4:12:83:b5:9e:81:
5c:74:81:2e:42:e2:fc:3e:e0:96:bd:09:00:6e:6f:32:87:4a:
18:e1:46:60:ce:bd:9a:43:e2:4f:92:2c:3e:6c:99:a6:17:09:
43:89:6a:8d:00:bd:53:1d:c4:3f:20:f2:2c:88:9e:ee:d0:bd:
15:bc:26:9d:58:01:4b:fa:5f:f9:7a:66:77:cb:bf:9d:f9:81:
70:a5:59:28:e6:d7:18:52:ca:75:d8:7c:4a:2c:6e:0c:56:b2:
91:b5:51:22:c0:3c:50:4e:14:69:d2:59:84:f2:03:93:6f:70:
bb:d0:4a:eb:49:4b:8e:09:fd:75:ad:fb:2c:ef:34:44:df:c4:
1b:5f:a5:df:ac:f6:63:88:70:5b:ed:b5:1e:6e:79:32:53:66:
82:32:06:4d:63:a8:52:dd:d0:f1:68:46:b2:6e:ae:d0:da:2c:
b8:12:f0:04:4f:c2:87:b4:88:d6:c0:be:11:d1:00:01:d6:e0:
05:86:03:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:00 2025 by rpki-client