Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
File: 3IScc2nn5SxwUdIdunKYMIvpxCg.mft (raw, json)
Hash identifier: 3G9mS6qC1T2V0pcWoZVS/jR3n0OynSPhC0NYEtl/DVM=
Subject key identifier: C2:72:E6:02:B4:73:5E:B2:EB:13:34:69:B6:1A:57:C8:8A:6B:E3:0F
Authority key identifier: DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
Certificate issuer: /CN=dc849c7369e7e52c7051d21dba7298308be9c428
Certificate serial: 0198733D028C1CB467B5B6C900DCF39F0E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 04:00:34 +0000
Manifest this update: Mon 04 Aug 2025 04:00:34 +0000
Manifest next update: Tue 05 Aug 2025 04:00:34 +0000
Files and hashes: 1: 3IScc2nn5SxwUdIdunKYMIvpxCg.crl (hash: JTIc69UNTgDMG0QOTMMtGRTOIIEtlqWLpaHChaWq3hU=)
2: A1Kij3UmuqlYPUgtFwkRpc3mYFI.roa (hash: 7eehR/MKaZhrxZxZgGixZL1BWxFDBQrZZYdPEfeskDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:02:8c:1c:b4:67:b5:b6:c9:00:dc:f3:9f:0e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc849c7369e7e52c7051d21dba7298308be9c428
Validity
Not Before: Aug 4 04:00:34 2025 GMT
Not After : Aug 5 04:00:34 2025 GMT
Subject: CN=c272e602b4735eb2eb133469b61a57c88a6be30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:b4:76:46:2a:fa:2b:48:54:1a:60:c5:1e:
e8:50:64:98:9d:92:aa:8f:a6:2e:ca:ee:cc:f6:29:
6c:01:af:c4:17:fc:5c:b8:de:2a:f7:6e:e5:52:d3:
2c:fe:7d:86:a8:54:7a:35:51:88:67:44:9c:f3:d0:
73:99:27:e3:22:3f:d1:30:b3:82:d3:e4:72:cc:58:
08:d2:d3:75:f6:66:04:0b:ca:41:19:de:a7:52:39:
a6:9c:69:79:2c:e9:ea:07:62:95:7d:b9:1c:c5:0b:
d2:44:24:2d:48:14:89:4e:6a:8f:e5:c7:8d:12:0e:
33:cc:83:b3:60:65:a4:25:73:9f:e7:4d:ee:6b:06:
5d:e2:81:29:98:e1:55:68:a4:45:ef:05:09:f6:11:
71:ae:25:6b:f2:62:d9:13:4e:01:9b:74:48:8a:59:
35:14:89:ba:51:25:66:d2:e5:71:94:b5:ed:4a:2f:
74:e8:fd:16:8e:2d:b6:0e:88:a5:ae:26:bc:ec:8e:
18:89:f7:1e:ae:f4:3a:62:e0:41:a6:7a:f5:54:fb:
ee:6a:9c:eb:fa:0a:0c:ce:3a:00:0c:52:be:b8:2f:
92:18:15:3a:ce:f9:59:fc:f8:c8:a5:57:a8:8a:5b:
6b:64:a5:f6:1c:c6:e2:5b:21:9d:f8:11:69:25:64:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:72:E6:02:B4:73:5E:B2:EB:13:34:69:B6:1A:57:C8:8A:6B:E3:0F
X509v3 Authority Key Identifier:
keyid:DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:14:c2:32:82:8b:98:7a:1e:60:43:72:68:88:e9:d5:98:52:
15:41:d1:61:5c:a2:8b:f0:ac:39:be:5d:d5:bc:a1:19:49:c7:
0a:68:e8:7d:14:5c:49:e9:46:c7:df:ef:ba:5b:7c:c0:35:6b:
9c:e2:0a:c6:f1:7e:57:a9:30:f7:b9:38:05:7c:fe:da:7f:5e:
56:70:7b:37:ea:80:d1:24:bf:b6:d3:48:32:ec:20:8d:f7:4d:
f8:17:14:70:d7:cd:ec:8a:3a:fd:2f:ff:94:8b:5a:2a:8e:97:
72:4d:a3:0a:7e:1f:5e:af:c6:6a:f6:e2:65:de:a1:51:0f:37:
75:9c:cd:eb:a6:6e:28:42:b0:9a:8b:5a:6c:df:e1:78:3d:0a:
f3:f8:c6:a3:9d:d5:21:87:de:2a:41:45:54:f3:1d:96:50:27:
32:c5:ce:da:16:c7:73:32:e1:2f:59:67:d8:0e:94:f9:c4:e5:
74:bf:d3:10:f1:aa:f1:b5:ec:e9:a9:9a:ad:35:76:5c:08:50:
19:b4:ab:eb:79:af:02:de:41:1d:ed:6b:b1:d8:c4:51:fd:de:
2b:63:f5:1d:05:35:8c:d6:89:9e:ce:76:9b:a7:99:e2:32:a4:
2d:4f:8a:af:dd:f9:38:7c:0d:eb:69:8d:76:c5:8a:48:83:33:
a9:67:75:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:42 2025 by rpki-client