Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.mft
File: 3o4Hg5SzQMHO5Hn55hOh69KzaG0.mft (raw, json)
Hash identifier: OqaVA72DhNW4IdQjQ9+gTYK30wBFvtjb8xc4F6F2DMI=
Subject key identifier: F7:A3:7D:C3:A4:B2:9E:5D:EC:4B:C8:CC:64:3E:7D:C7:B8:31:9D:B6
Authority key identifier: DE:8E:07:83:94:B3:40:C1:CE:E4:79:F9:E6:13:A1:EB:D2:B3:68:6D
Certificate issuer: /CN=de8e078394b340c1cee479f9e613a1ebd2b3686d
Certificate serial: 019895FFEAD204B0CC8210AD6F71C4359789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o4Hg5SzQMHO5Hn55hOh69KzaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.mft
Manifest number: 7D
Signing time: Sun 10 Aug 2025 22:00:33 +0000
Manifest this update: Sun 10 Aug 2025 22:00:33 +0000
Manifest next update: Mon 11 Aug 2025 22:00:33 +0000
Files and hashes: 1: 3o4Hg5SzQMHO5Hn55hOh69KzaG0.crl (hash: YwOoTgqXSJJjROa0QSYgFx58Zx141TXB2IIITH4aets=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o4Hg5SzQMHO5Hn55hOh69KzaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:ff:ea:d2:04:b0:cc:82:10:ad:6f:71:c4:35:97:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e078394b340c1cee479f9e613a1ebd2b3686d
Validity
Not Before: Aug 10 22:00:33 2025 GMT
Not After : Aug 11 22:00:33 2025 GMT
Subject: CN=f7a37dc3a4b29e5dec4bc8cc643e7dc7b8319db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:ea:63:69:5a:eb:0f:bb:0a:bf:a1:cd:e3:
8f:e3:06:1c:ec:95:11:07:ab:0d:8b:f7:73:09:47:
7d:c5:d7:e4:58:0e:bf:19:d3:f8:0c:90:ca:da:73:
8d:67:92:0a:3e:43:19:c8:61:3e:3c:eb:7e:d6:5f:
a8:dd:7a:0a:a5:85:ad:e6:9c:68:68:f8:e8:89:10:
c9:da:26:1b:2a:31:47:63:ad:c3:f9:c8:39:44:30:
82:9d:aa:55:25:16:10:8b:1a:59:56:a6:96:d8:14:
b6:59:4c:56:4b:ec:98:02:60:88:e0:85:28:35:99:
b0:0c:c5:b3:ae:58:c8:9f:91:2d:c0:83:86:14:4d:
9d:47:9b:45:5d:3b:09:50:a8:b7:20:4a:78:4d:3c:
2c:1b:67:6f:9d:1f:8a:69:da:ee:53:81:66:74:8a:
3e:f6:fc:ab:d3:19:df:4b:5d:a4:1e:9d:ea:e9:13:
b0:ae:dc:03:d6:07:f0:0a:cb:b1:27:d6:e1:75:30:
8a:c6:7e:64:1b:e1:69:bc:e5:7e:27:8d:08:83:16:
74:a9:49:d1:2e:96:2f:d5:50:a9:4a:21:ff:48:85:
37:75:da:fd:96:12:0e:46:6f:a1:c0:fc:c6:e8:9a:
85:9b:3c:e1:69:5b:e8:e0:17:fd:eb:91:67:4c:31:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A3:7D:C3:A4:B2:9E:5D:EC:4B:C8:CC:64:3E:7D:C7:B8:31:9D:B6
X509v3 Authority Key Identifier:
keyid:DE:8E:07:83:94:B3:40:C1:CE:E4:79:F9:E6:13:A1:EB:D2:B3:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o4Hg5SzQMHO5Hn55hOh69KzaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8ebec2-449f-43d7-888f-0ad8306dc355/1/3o4Hg5SzQMHO5Hn55hOh69KzaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1c:a7:82:e0:19:c7:ec:93:bc:69:65:9c:60:50:be:3c:5e:
75:09:c8:29:58:1c:f9:b6:75:e1:8d:4c:7e:cd:45:6e:7b:f5:
3b:66:98:57:e1:fd:9a:79:c3:22:fc:e3:00:60:44:a7:d8:51:
0d:75:d6:dd:9a:12:5e:f8:c3:a0:72:73:f5:cd:13:f2:ae:92:
57:43:29:5e:b2:c0:27:00:77:40:6a:c3:7e:8f:c1:f6:56:42:
10:db:1b:3d:17:43:bd:46:27:aa:de:cc:8c:44:64:bd:63:3b:
18:a1:5e:b5:cc:3e:12:79:82:50:91:ee:00:45:50:f9:7d:95:
52:47:6f:d1:c7:06:7a:f3:a6:53:48:81:c3:d2:6d:10:45:8b:
e0:8a:1b:6a:81:2b:b6:34:1f:a5:b0:cf:73:68:14:97:4f:92:
83:0a:c4:96:f0:65:ee:6f:3c:bb:cf:d4:1f:05:73:b4:14:5c:
cc:70:d3:e0:8b:31:89:73:e6:e8:e7:45:2c:9f:75:86:2e:44:
34:b7:37:ed:86:e8:59:93:11:f4:6f:be:50:52:32:17:5c:b9:
67:a8:08:2d:5c:ea:89:da:8e:f7:08:64:e9:ff:72:81:8e:ad:
43:5d:b4:1f:c3:4a:01:16:e0:92:6a:0e:8d:9e:be:8b:30:7f:
f9:04:3e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:12 2025 by rpki-client