Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
File: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json)
Hash identifier: W0d0mAuofDFIuyMXaF2ytyOIhAWfwujUOv8nl+kt5Gw=
Subject key identifier: 56:3A:41:33:48:2D:E4:EF:BB:7D:82:5E:F2:F7:83:B3:04:73:BF:68
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Certificate issuer: /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial: 019892C8A5437D670222B7D743F5F822FB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
Manifest number: 157C
Signing time: Sun 10 Aug 2025 07:01:19 +0000
Manifest this update: Sun 10 Aug 2025 07:01:19 +0000
Manifest next update: Mon 11 Aug 2025 07:01:19 +0000
Files and hashes: 1: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: /ux1MSQJE+RSxV1NchoORwQEcGb2ws4dGouE+pFRjLc=)
2: Ldu0EGXQ1MYyGdeyQmSIejuBpSw.roa (hash: zigF7LOpUtd1pS/tfQIWkRyp68k6cu70RaVSak3Qv0w=)
3: Y2gjl-Swzk92ryq3Z-Z6gp7HzLE.roa (hash: PMTJytzI+iwFKg204deNXF6qN+csOXo8Jl+I9xD+TfM=)
4: agxYPLnYdjCRAQfydoFhcZumCgg.roa (hash: NCy7EyPm/0lV8RywpILyDqtiIlQ48M258Jt/bjYI+0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:a5:43:7d:67:02:22:b7:d7:43:f5:f8:22:fb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Validity
Not Before: Aug 10 07:01:19 2025 GMT
Not After : Aug 11 07:01:19 2025 GMT
Subject: CN=563a4133482de4efbb7d825ef2f783b30473bf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:51:af:25:b5:d8:45:5c:b7:c0:82:04:a3:
5a:d8:b0:71:8c:76:36:63:f3:e5:bf:bb:3f:c3:17:
77:cc:71:c2:b5:fa:03:09:f6:5e:5a:69:75:cd:f3:
32:64:d2:73:04:59:c7:97:f5:0e:fd:f3:4c:48:1c:
29:a6:09:26:6e:1f:2f:e4:29:3a:f8:89:29:8b:73:
cd:37:5c:9f:8e:b6:c8:73:b7:55:c8:25:b2:97:ef:
3a:bb:21:84:3b:57:37:e1:ac:05:a8:7d:05:6a:f8:
3f:57:90:8f:ff:5f:a1:73:67:7c:1b:fa:7f:b6:19:
21:dc:6b:69:ab:78:a5:13:33:15:09:d1:32:61:10:
65:1c:5b:ae:97:d5:e9:d7:cb:3a:bd:ef:27:f4:58:
23:7a:40:b9:e7:1d:2c:64:46:d9:e5:9f:4f:35:2b:
5c:2b:52:9a:d0:a4:09:5a:e3:66:de:ff:38:53:31:
6b:20:64:6f:e2:94:1f:9d:70:0d:ec:d3:3e:e9:c1:
9d:97:e5:97:1d:67:ec:0a:7f:73:20:e7:ec:2c:b0:
c6:cb:4c:e5:68:b6:21:19:d6:c4:89:61:5e:f9:ec:
5d:f3:37:96:71:18:79:ec:31:51:fe:66:c5:81:66:
a7:a0:85:6b:6d:43:d1:ed:6d:6f:6d:99:4c:35:39:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3A:41:33:48:2D:E4:EF:BB:7D:82:5E:F2:F7:83:B3:04:73:BF:68
X509v3 Authority Key Identifier:
keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e8:40:c3:0e:dc:1d:16:6c:f8:72:9b:a3:95:b4:56:03:0f:
91:71:00:d7:52:57:a4:92:7a:56:79:5e:05:8d:ee:86:ca:91:
6f:df:ea:07:4b:5e:fc:22:7e:8c:3b:bf:b0:75:7b:88:15:ad:
90:5b:d3:71:a0:75:5d:31:83:62:9a:29:de:4d:b2:81:99:01:
bc:24:d2:8f:4d:31:da:46:3d:9f:63:2c:d3:99:ba:30:7c:6b:
a8:59:02:60:6d:52:c5:bc:e4:d0:16:8e:eb:66:2c:f5:44:e2:
02:32:eb:ae:23:e3:1b:ed:08:af:98:93:86:f8:85:37:52:cc:
d8:f5:2d:5d:0f:59:0f:7e:eb:ef:f3:90:5e:ec:2e:b3:b5:20:
ac:52:0c:58:69:8f:61:5c:d1:1a:3b:9f:a2:b8:60:94:2c:f4:
88:36:08:f2:47:e8:65:b1:a4:24:5d:4d:26:6d:ef:8a:f6:2f:
f3:69:93:ba:b5:6a:dd:ef:00:70:49:c6:3c:b6:af:1b:fb:f5:
36:3e:ab:29:6e:49:3f:e6:82:5a:7b:ab:bd:55:9e:bf:17:5f:
93:45:d9:0a:89:ba:b8:b6:2c:75:9b:b6:fe:0e:a6:da:6b:36:
7e:00:4d:6d:ba:b8:a7:f5:22:73:11:aa:8b:8e:17:4d:17:3c:
70:18:aa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:58:30 2025 by rpki-client