Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
File: 3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft (raw, json)
Hash identifier: 2GcbaeSbVHvfMs70C9R2oOStcgQoqlgEwPVSHyca5k4=
Subject key identifier: 07:B7:CE:83:57:76:8D:E1:D4:9C:76:54:C9:DC:32:A6:24:A7:16:DC
Authority key identifier: DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B
Certificate issuer: /CN=dd5b224b6593e558038a9e40e660c77142755c1b
Certificate serial: 019880F8FD6485A2CA7B36BF85CA786E94C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
Manifest number: 0A2F
Signing time: Wed 06 Aug 2025 20:00:58 +0000
Manifest this update: Wed 06 Aug 2025 20:00:58 +0000
Manifest next update: Thu 07 Aug 2025 20:00:58 +0000
Files and hashes: 1: 3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl (hash: e8watZS1xo4pmhCgkLEPOgNtIIOz1MM0SaSwHRzXwOU=)
2: jU0yi7PHweJFHYaEaX0jg-4Q_RU.roa (hash: 8PA9xbvSb0ZvYzYhTOCmIzBIyrP4FgGrFueLXskDR54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f8:fd:64:85:a2:ca:7b:36:bf:85:ca:78:6e:94:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5b224b6593e558038a9e40e660c77142755c1b
Validity
Not Before: Aug 6 20:00:58 2025 GMT
Not After : Aug 7 20:00:58 2025 GMT
Subject: CN=07b7ce8357768de1d49c7654c9dc32a624a716dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:34:b5:3e:25:43:7b:10:10:8d:fe:6e:70:
98:9c:68:ce:1a:62:3c:39:15:96:69:57:fc:d2:76:
6a:34:49:bc:c4:a2:3a:0a:a9:94:ce:7d:00:a7:ac:
f1:3d:f4:c5:83:f6:5d:51:a5:d8:4b:aa:f6:ef:93:
5d:da:8c:f3:30:37:5f:a6:fb:e8:e6:9c:9d:16:61:
cc:70:75:08:65:4e:5b:f1:ae:54:84:a7:e0:aa:0a:
c4:fd:26:60:b9:0c:e5:77:69:31:5f:59:0e:04:92:
71:fb:24:67:3d:bd:3b:03:d7:5a:f8:8f:e3:2c:6b:
28:fb:45:3a:5c:6c:24:c5:9e:a1:8f:b7:c3:6a:df:
58:60:90:df:08:2d:14:e1:a3:8a:3c:89:ed:fe:48:
b9:76:89:d4:aa:da:fa:2a:ff:0f:71:a8:10:25:ed:
a7:7e:41:39:c3:f2:f7:07:47:8b:45:47:4d:9b:fe:
ad:7a:21:2e:b2:5f:53:ad:e4:ee:fc:81:b1:22:6f:
28:3b:9f:79:67:06:b9:21:2b:87:ee:0c:d0:93:8f:
5c:b0:42:09:ba:46:83:8d:9b:92:81:5b:f7:96:69:
ad:d7:34:2f:40:e4:7e:46:d4:0c:49:74:a5:78:56:
d8:65:8a:0d:31:cb:29:d1:c5:3a:d4:73:a2:64:14:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B7:CE:83:57:76:8D:E1:D4:9C:76:54:C9:DC:32:A6:24:A7:16:DC
X509v3 Authority Key Identifier:
keyid:DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e1:3f:a3:d1:69:02:cc:6f:f9:be:35:78:b6:8b:21:67:ae:
04:47:11:46:12:df:6c:3b:9a:ab:b5:20:04:21:5a:57:8c:4e:
95:93:1c:d7:90:fa:6d:b3:32:b5:0d:be:be:7f:b6:e2:0e:44:
23:81:2c:5e:a7:77:1e:e7:6a:a2:50:eb:b6:ce:33:3f:dc:4a:
ec:8d:db:25:10:7a:c4:d1:fc:b6:df:54:c5:6b:11:7b:37:68:
1c:38:06:9a:b0:ef:9f:f8:d4:ae:cc:89:e8:c3:1e:12:be:ba:
86:e8:6c:f4:4a:42:f7:9f:cf:f5:46:bc:1d:fb:46:a5:1c:a2:
39:6c:ad:10:22:36:0c:f2:49:3d:86:c1:b7:f7:47:b5:a6:fd:
4c:45:dc:82:03:8b:a8:00:97:18:42:49:03:1d:09:ba:4b:e8:
74:3b:42:98:ca:0c:37:f3:29:a8:d8:ec:6f:46:a2:fd:81:fb:
6d:b7:b7:ee:b8:b0:8e:23:ab:ec:d2:b5:62:d2:23:e6:d6:06:
82:23:95:a9:89:76:d6:5d:e5:3e:1f:43:a4:66:13:ae:6c:91:
24:3f:93:41:85:0b:64:7e:b8:08:d9:17:a9:37:df:e1:16:4b:
19:a0:fe:bd:0a:25:a6:1b:de:31:89:37:a1:10:d8:24:a3:a1:
5a:88:f3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:51:10 2025 by rpki-client