Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
File: 3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json)
Hash identifier: ipoUd1cyNOsjCER0E79gzUbkE5MdrEaRyI7Dmpf+BRY=
Subject key identifier: 95:D4:85:29:06:0A:50:D4:06:36:E9:1A:95:78:F5:13:F0:18:07:4D
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 01987E2F3645F0854807FB98C1F67A1CB23D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
Manifest number: 04A7
Signing time: Wed 06 Aug 2025 07:01:19 +0000
Manifest this update: Wed 06 Aug 2025 07:01:19 +0000
Manifest next update: Thu 07 Aug 2025 07:01:19 +0000
Files and hashes: 1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: A9xH+1OWhZPm9eYfInHnsqb/8VJdywIYSW2koEFoef0=)
2: EZxzjJ6XhYd6ltYTmizd41s0hPw.roa (hash: JYFppnIvAuxE4lEcobv5nYUUPDwGguXkpkPpHyixP6g=)
3: NGkgR_rl3fLugEg3BgzB-iR4GzY.roa (hash: /ZmEtv61Y7p4XUZGiWjRkOyM1ttDKeEvzWRAeWuz5J4=)
4: ducUWn7SmjDXSD2XK_HAZ4X-w1E.roa (hash: QsOlqkwJkHZw/RVRRDiq/I4YTQ51hDfHFRswj0zjjww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:36:45:f0:85:48:07:fb:98:c1:f6:7a:1c:b2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Aug 6 07:01:19 2025 GMT
Not After : Aug 7 07:01:19 2025 GMT
Subject: CN=95d48529060a50d40636e91a9578f513f018074d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:c0:43:88:70:40:05:a9:80:36:b2:46:db:
c6:4f:59:5d:0c:df:1e:4f:ba:02:29:76:46:52:d4:
2b:7e:70:8a:5d:cd:80:c3:29:bb:93:54:6a:98:4c:
00:3f:71:75:c8:0d:75:bc:c6:c9:99:92:5b:9f:a6:
b7:69:c2:44:83:5e:8a:96:f0:2e:aa:6c:fd:04:47:
bb:9d:57:fe:52:5a:1b:a4:d8:3f:8c:d3:b0:04:31:
06:a5:db:fb:0e:b4:bd:6a:33:29:0f:12:c9:3d:54:
15:48:fe:62:cc:d6:a1:5d:94:6f:33:c2:0d:ff:ed:
a7:93:db:12:a6:22:4f:d1:34:ba:1d:75:35:4e:19:
dd:32:55:5c:7b:dd:87:68:c0:63:bc:52:e4:df:17:
e5:7f:00:e7:1e:00:a4:3d:e6:69:2b:98:9b:84:9d:
b9:7b:77:27:0c:f7:e0:1b:39:c0:8a:e5:41:bd:05:
45:2f:30:f2:88:97:c2:85:e9:b9:f1:6b:bd:d7:7f:
29:30:9d:01:4f:48:b6:6a:60:13:11:0e:99:0f:4b:
e8:5f:f4:51:2b:00:58:11:fa:4a:f3:c2:c5:7a:f6:
a0:0a:e9:cd:a2:e1:99:23:00:c5:9d:9b:98:89:be:
ac:01:99:79:50:2c:b6:76:ac:94:76:e8:d4:78:2c:
a3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D4:85:29:06:0A:50:D4:06:36:E9:1A:95:78:F5:13:F0:18:07:4D
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:de:51:00:a7:ba:20:a4:22:48:ea:09:89:2d:09:bf:ea:de:
de:8e:67:a4:d9:f6:cf:7c:d9:35:59:62:8d:c2:f4:fb:55:17:
66:c9:5b:28:b1:8b:3c:07:cc:8e:c2:24:7f:67:52:5a:66:cf:
6a:4f:dd:43:6c:9d:8c:b6:b3:cc:d5:58:70:01:ad:9e:7c:20:
c7:af:28:4a:32:a6:87:6c:e1:a9:3c:94:24:f0:16:61:39:c8:
88:e1:c4:04:87:bb:aa:65:74:a8:ef:c0:14:30:01:8e:a6:e2:
40:64:8d:a8:ad:fd:60:84:cc:e0:72:4a:30:46:64:06:14:61:
3e:f3:d2:dd:92:9b:18:3b:b7:e4:37:c7:56:ce:47:70:28:88:
bd:b2:b7:cf:3a:a8:5e:e7:ab:54:a6:ad:ee:5f:63:4e:12:21:
6c:a8:23:d6:4b:d6:65:86:3f:ff:6b:40:f5:51:79:0d:e9:4b:
2b:5d:94:aa:e9:4d:6d:4c:cc:8b:9b:52:88:34:fb:10:ed:6e:
65:9e:f6:89:d0:b6:04:63:be:4b:b9:b3:b1:7f:9f:69:f1:70:
76:76:b3:ba:0b:26:93:18:c0:90:cf:c3:77:18:26:a5:77:be:
fc:18:8e:46:75:85:d2:83:43:a9:cb:3f:ca:ed:3b:36:0c:73:
bd:a2:ee:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:17:23 2025 by rpki-client