Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier: RrfK2CHgxL9U1yLRlC61PKcWxPKZf19Jv+zO8Y1KnSI=
Subject key identifier: FA:A7:32:65:C2:FF:87:C6:F3:E5:CB:CA:70:99:AD:B1:9E:46:7E:35
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 01988844A34F23EF61EC4EBC0F21D3A780B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 06:00:56 +0000
Manifest this update: Fri 08 Aug 2025 06:00:56 +0000
Manifest next update: Sat 09 Aug 2025 06:00:56 +0000
Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: XwzpA1I8j5gh/cRM5ATcEMR3Hwp/UKXV3eVOpZ8wIZs=)
2: Q6UDfcr6-wjzrSR02hz91bMMgCQ.roa (hash: Ri+ho1nwscaoaR+lGA/lmNvU5bMAzGg4wnbtbjS6IAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:a3:4f:23:ef:61:ec:4e:bc:0f:21:d3:a7:80:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Aug 8 06:00:56 2025 GMT
Not After : Aug 9 06:00:56 2025 GMT
Subject: CN=faa73265c2ff87c6f3e5cbca7099adb19e467e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f4:0e:28:83:6b:ba:a6:79:29:ff:f0:36:b3:
6c:18:c0:9d:dc:fd:ce:d0:7e:1a:79:23:08:0b:da:
b9:81:5a:32:b3:b5:2d:2f:b6:1f:2f:9c:fc:16:18:
fc:e6:d8:0f:c2:bb:27:12:72:fa:04:b3:3f:b8:54:
5b:ec:39:95:d7:2f:13:6a:c5:cd:a4:f3:fc:2d:0d:
7e:9c:b0:61:c7:a0:dc:cd:6e:6f:74:cc:17:8a:bc:
14:22:30:0b:3e:92:e5:c9:ff:56:3a:a3:a8:53:81:
ce:0a:5d:6c:dd:3d:c7:00:9e:47:8b:8d:d0:da:fb:
c3:e3:f3:07:59:a3:54:47:5c:d3:01:47:60:b0:ca:
7d:78:b6:d3:81:8c:87:70:f9:99:ec:45:cb:a8:55:
29:7b:67:40:1c:19:86:68:ca:7e:b1:1c:97:91:d9:
28:eb:96:7d:a9:46:e6:40:73:52:68:67:a3:5a:1e:
7a:ee:10:da:b4:6b:c9:e0:c7:b4:17:b0:3a:9c:81:
f1:15:c0:9f:5d:63:36:16:0b:61:c4:18:9e:a9:55:
df:bf:90:c2:5f:42:99:18:f7:f7:87:ae:c3:8d:4c:
55:d2:b6:5b:ea:18:0f:2f:63:c1:4c:23:0c:7a:b5:
36:cf:a1:a4:12:a3:94:60:a9:a8:c2:39:e9:a6:90:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A7:32:65:C2:FF:87:C6:F3:E5:CB:CA:70:99:AD:B1:9E:46:7E:35
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:73:27:77:a3:ed:ec:0a:aa:42:7f:30:8f:9f:b9:d7:4e:34:
a4:f7:ef:09:f2:3e:23:68:2d:03:3d:ac:d3:6e:42:7a:d7:d6:
42:5f:2e:d8:12:30:42:7b:c2:6b:00:fc:1d:df:de:ff:e3:9b:
c2:96:54:69:44:f8:7b:ad:7b:d2:61:49:1a:86:e1:c9:de:62:
d0:bc:c8:00:fe:a1:6d:1d:ec:dd:97:42:38:75:75:17:c8:4a:
a9:82:8b:c4:d4:cb:df:2c:b9:60:20:8f:88:a7:88:9f:c3:36:
98:a4:08:50:49:f4:d9:8e:7b:e1:82:71:e3:5b:76:3a:ae:34:
01:0b:99:da:be:c6:f7:2a:8a:67:b6:07:ea:7e:4a:ed:5b:86:
9e:b8:10:7c:ed:23:fd:44:f3:93:8b:a6:2d:50:ab:62:ee:35:
7b:85:af:2e:dd:4c:50:8c:9f:52:25:31:39:1f:de:95:56:8e:
2f:ec:2b:6a:f4:a5:3d:28:f9:60:5b:56:b1:af:49:ee:b4:bd:
2f:33:50:6c:ae:6a:9b:85:98:1a:1a:25:c8:6a:05:3f:3b:2b:
13:4d:21:22:8e:2a:57:e4:49:10:69:af:13:90:cf:c4:f1:dd:
76:78:fc:93:19:a0:ec:de:e2:e8:bb:22:9f:53:68:b6:5a:c6:
d8:ad:34:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:42 2025 by rpki-client