Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
File: 3Prn1OadQuT0yV2Z9IK5qUTb78g.mft (raw, json)
Hash identifier: CF88Ys1u8wMg4UyZDlkJed1GzN89zMceNto7I+AZH24=
Subject key identifier: 12:BA:C9:31:01:8C:14:60:88:B1:03:89:F2:AD:D5:3D:E0:4C:8E:AF
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial: 019873748163797EE1754724AF9BDCD1AE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
Manifest number: 12FD
Signing time: Mon 04 Aug 2025 05:01:11 +0000
Manifest this update: Mon 04 Aug 2025 05:01:11 +0000
Manifest next update: Tue 05 Aug 2025 05:01:11 +0000
Files and hashes: 1: 3Prn1OadQuT0yV2Z9IK5qUTb78g.crl (hash: EAwGmJonZVo3WOZxUc87VdH4R7cTz6Hb4dOg8GqPHJs=)
2: AFa9BeMRC9KZa5ESZVY3qezRhqo.roa (hash: kFgjZZQAO7DQ4A//2mPuGomN/dVKyDVTDikOVl1cxRM=)
3: oTU6jls5Cbp2h-8jJVa1y-YZLoo.roa (hash: UlQbXDO/2Z5fLH/VOiXf6qQdUrJ+q43vGjJDK0Fi6XA=)
4: onN6KmPVXQwrcGzs19GCsiDsKrQ.roa (hash: z68kDOoDWacxs1gAQw1w/1PdDLWcZUVC2dAlyVoGWL0=)
5: rrglEeDtNMMTRuZ3vbypZH_RQmE.roa (hash: urqCGELvaxYkBx+UEtrFXZNDg3RBmJzxwZn3ZWt36zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:81:63:79:7e:e1:75:47:24:af:9b:dc:d1:ae:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Validity
Not Before: Aug 4 05:01:11 2025 GMT
Not After : Aug 5 05:01:11 2025 GMT
Subject: CN=12bac931018c146088b10389f2add53de04c8eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:6b:28:52:d1:77:a9:c9:f7:84:91:9c:29:
e1:db:ac:57:67:9c:ee:f7:99:ac:61:ff:c3:b1:15:
c7:a7:bb:e6:75:39:e1:47:c8:bf:f9:89:60:bd:ee:
db:68:d3:95:e8:7e:7c:42:98:06:78:ff:ed:48:cf:
bc:c1:94:3e:e9:36:37:b6:77:eb:12:9e:ad:08:42:
f4:5f:8e:b4:a9:0b:db:84:7f:c9:24:2b:29:65:34:
4a:86:23:60:02:bd:d1:35:a2:d0:23:77:2b:02:a4:
f7:f5:83:30:46:74:41:92:5e:46:06:8b:c4:f8:f4:
b6:ae:5d:ca:12:24:d1:ee:ac:37:95:fc:f1:57:cd:
9a:e0:76:b9:69:80:3f:01:0e:35:d4:09:9d:bb:33:
41:b4:b6:17:6f:5e:73:f7:9e:80:ba:90:e3:8e:42:
04:8c:25:d9:98:a1:a0:24:6d:40:78:73:30:43:d2:
0b:3f:1a:0b:a7:2c:35:55:1d:80:78:0c:63:77:56:
8d:e1:35:6a:2a:f5:8d:7b:f1:66:b6:e2:82:4c:cd:
06:88:2d:bc:dd:c2:9f:c7:ef:c2:82:d7:1d:ee:4e:
78:df:9b:b8:b1:c3:fb:6c:23:88:78:2c:68:be:e8:
ad:4b:16:b9:88:f9:5c:2f:ed:f3:99:3f:5c:97:f8:
fa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BA:C9:31:01:8C:14:60:88:B1:03:89:F2:AD:D5:3D:E0:4C:8E:AF
X509v3 Authority Key Identifier:
keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7b:15:31:a9:6c:1e:18:13:37:8b:3c:54:85:6f:b1:a8:72:
7a:6a:d6:c0:c5:da:4a:b0:0e:d8:48:c9:9b:d4:36:ed:35:28:
14:be:7d:6f:d1:ec:ba:2e:f3:32:b3:f2:e4:c5:ec:c4:2e:f8:
40:65:9a:58:83:18:91:e3:e2:01:d2:76:0d:60:6e:0c:7b:48:
c7:a7:f3:61:3c:50:4a:19:24:87:5c:0e:4b:7e:73:49:b1:81:
18:52:ef:db:15:53:87:88:69:86:5e:75:d4:5b:57:f2:20:ba:
4c:9d:55:82:88:1f:7d:f6:e4:3f:85:f2:32:81:61:37:b0:95:
56:d7:b1:ce:9d:81:b0:c7:db:07:9e:b4:0f:ac:3d:67:ef:94:
ff:b4:08:6a:f3:1e:20:5f:38:ee:05:c6:54:19:b0:9e:ff:7c:
37:6e:26:74:f1:ce:15:f1:95:2f:d4:d6:13:bb:a2:22:de:e9:
88:d5:24:9d:c8:ff:19:68:c1:30:e0:37:1c:60:f5:d8:b6:0c:
ff:bd:d6:6a:60:72:72:30:8a:6a:b4:ce:a8:22:78:bf:18:ab:
38:99:d8:f3:61:12:09:68:f6:60:71:7d:bf:f0:5d:d4:a4:3c:
ad:eb:f2:b0:f0:de:35:0b:33:4d:ad:96:b7:ec:b0:d1:2c:36:
c5:5e:0f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:23 2025 by rpki-client