Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: Hp2iDnXTYRqi/BlOh5IH1H+pMgGd25WlwTxNWw7iMws=
Subject key identifier: AC:62:35:91:02:1E:50:90:83:E1:BA:68:6D:08:BD:41:62:CE:92:27
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 01987418CB46A5C725269E83D764FCA99398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0B3D
Signing time: Mon 04 Aug 2025 08:00:38 +0000
Manifest this update: Mon 04 Aug 2025 08:00:38 +0000
Manifest next update: Tue 05 Aug 2025 08:00:38 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: pYwx0XqYIjgyB+5FDxwn7U4SYe79nlcq8EyiAGSe4i0=)
2: GTryjErQ-QvKOHELwraRwqDQoQ4.roa (hash: GN3kBbzA5jk8ZVZGy0p/hEuJ6JzyB6iMj6OE8Sf6qCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:cb:46:a5:c7:25:26:9e:83:d7:64:fc:a9:93:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Aug 4 08:00:38 2025 GMT
Not After : Aug 5 08:00:38 2025 GMT
Subject: CN=ac623591021e509083e1ba686d08bd4162ce9227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3d:ca:e3:b9:89:37:f2:90:f2:49:c8:aa:7a:
26:92:d9:1b:f0:18:b8:3b:70:71:b2:e5:5a:50:c4:
9f:fe:e9:4b:27:68:6e:a6:17:6e:91:4e:62:25:6c:
e4:6e:d3:ba:83:31:0b:3d:e0:33:d1:6e:db:40:f7:
e0:09:6b:80:51:af:b7:9b:b2:f0:88:87:7f:38:83:
98:2a:0c:c0:36:de:5b:05:9f:ef:9d:84:92:22:51:
a0:92:01:96:dd:0e:cc:34:01:ae:56:c7:3a:26:86:
95:b5:f7:87:9d:d5:a4:4d:b4:25:ad:68:81:00:13:
90:4c:e1:9b:6e:d3:33:91:df:de:8c:27:81:6f:34:
3b:ed:1d:6f:45:af:35:77:68:69:1b:3e:bd:2b:f0:
28:c2:f1:16:33:a0:ed:61:f6:8f:21:d3:9f:13:f2:
08:35:5b:fd:3d:ba:45:de:97:17:e6:b9:42:2a:81:
82:69:cc:59:33:43:b8:a8:b8:85:8b:d0:7d:d9:ae:
21:61:64:9e:15:ad:11:81:21:3c:7e:b6:16:33:e2:
ac:8c:6f:16:3f:51:fb:01:5f:4a:64:01:15:af:22:
18:43:f5:79:f8:cc:2a:82:81:12:10:d8:f4:a9:62:
bf:33:05:28:31:ed:7d:a0:08:d6:d0:d1:07:b2:0f:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:62:35:91:02:1E:50:90:83:E1:BA:68:6D:08:BD:41:62:CE:92:27
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b3:0e:f1:78:56:0b:21:1d:f4:39:f6:d5:b0:71:5d:7a:37:
1a:d6:ce:7f:fb:03:82:7f:54:a9:8f:67:eb:89:24:b7:57:c4:
65:c2:38:a3:38:1a:a6:33:d7:15:16:32:84:fc:be:78:da:73:
7d:dc:6e:58:28:3d:72:e5:84:97:00:09:fc:fc:ee:77:77:c8:
f2:a9:e7:a5:0c:01:86:cd:1f:a7:54:16:16:cb:5f:53:fa:5e:
d2:e0:4b:bd:f9:66:ea:44:a3:cd:30:19:46:7f:2b:f3:6d:8a:
62:99:6a:ae:06:e4:e9:5f:4f:15:30:6e:92:69:33:39:2d:3a:
36:86:1c:50:f6:2b:20:23:d9:50:79:0a:89:9e:61:5f:c5:88:
03:70:ba:f2:6f:16:57:a3:2e:98:7a:a4:0f:b4:5a:a2:95:ff:
c6:70:91:31:65:13:52:8b:22:db:b8:ae:dc:ae:f6:9a:de:8c:
4f:ac:55:c2:64:22:95:c1:b2:4f:da:0d:8b:c8:06:78:9e:8c:
2f:a0:b4:e7:af:a2:c7:f2:6f:36:ae:b3:0d:e5:a1:85:08:0a:
17:56:5f:ba:c0:27:25:95:11:e8:7c:ed:ae:9a:5f:f9:ce:28:
36:93:2d:25:3b:d7:e3:51:46:c9:60:ab:ea:de:45:b3:a8:dc:
07:3b:3d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:04 2025 by rpki-client