Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: Sh5neJTZZtJWy6wesGkTpKTOItZxXUN5hv69ll0TWJs=
Subject key identifier: 53:30:9E:64:1E:FE:F4:AA:B4:11:2C:93:4D:35:94:10:63:52:22:FB
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 019893DADD5312F7A924B4172A2F87E97FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 12:00:50 +0000
Manifest this update: Sun 10 Aug 2025 12:00:50 +0000
Manifest next update: Mon 11 Aug 2025 12:00:50 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: LnjxY9bQA/DrCpHPIybWdYXgvAIuyfkPudbqC5gYFZU=)
2: 5395RGU-O7_Y-Wk8o5ckF03TEl8.roa (hash: 2x9LkbbQVmDZR4+CDqZEC8HuaScYKr9cs6YHpuOZlvY=)
3: JRT-ehjK87EWSX2wN_VxdPNgZVU.roa (hash: FFbMq3Jl0t/JwkKVVNHldSFfVrz4m+b2CW8bGskb98A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:dd:53:12:f7:a9:24:b4:17:2a:2f:87:e9:7f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Aug 10 12:00:50 2025 GMT
Not After : Aug 11 12:00:50 2025 GMT
Subject: CN=53309e641efef4aab4112c934d359410635222fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:9d:f6:d3:68:2a:54:d9:3c:96:03:24:55:
0f:6d:43:3a:48:9b:c1:b1:ca:c0:5e:ef:26:76:a4:
2a:f3:06:5e:64:e7:6a:19:91:a0:ca:00:42:fb:d7:
43:ab:9a:38:c5:2d:c7:3c:5a:6f:08:ea:03:e6:d3:
75:97:92:57:e3:88:00:91:4d:25:44:6b:49:ca:81:
82:02:9c:4b:2c:fb:7f:e7:b0:76:f5:c2:36:cb:82:
e1:bb:ac:97:75:a9:b0:de:88:ec:2a:8b:c7:cf:a6:
2f:61:27:97:f0:12:1b:be:d5:b6:a6:98:c6:a6:dc:
21:e6:6b:3e:6c:f1:6a:c9:21:05:f0:a6:02:14:a3:
ac:66:88:34:f5:e0:8d:1e:ba:fd:b6:84:be:7c:7c:
55:ec:ed:c3:1a:e0:79:4c:8d:c0:12:ed:e4:1a:a7:
ab:a9:dd:86:d5:e3:bb:52:e7:a5:40:f9:de:ae:37:
f6:63:3f:89:97:c1:ec:74:16:59:db:cf:84:ea:2f:
f1:cc:be:57:89:c9:a3:ce:6d:9b:4e:68:fe:fa:32:
d2:9b:8b:2b:b3:39:51:e5:e5:f1:e8:ac:94:ee:8a:
00:37:4e:00:4a:7b:ca:69:13:2a:15:00:58:e7:59:
d4:90:ca:1e:08:23:23:41:fc:93:c5:d8:14:65:44:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:30:9E:64:1E:FE:F4:AA:B4:11:2C:93:4D:35:94:10:63:52:22:FB
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e0:77:fa:78:4f:08:f0:b9:56:d1:64:15:f2:50:99:57:51:
90:6f:79:3d:56:27:4b:c7:30:21:52:7b:9d:bf:d5:a7:7f:ce:
bc:b7:c9:27:bd:57:a9:96:0d:6f:5c:9d:b1:29:b8:44:ad:44:
2d:fc:c8:9b:52:0d:3e:70:c8:0a:35:ce:1f:24:9d:ac:cc:f1:
ca:e7:95:95:19:c2:cf:96:0a:c9:4d:61:90:3d:d7:d0:00:81:
5e:16:05:b8:0c:9a:f9:12:1a:fd:53:29:ce:8b:1f:81:f8:02:
c7:be:90:c9:ff:d0:3a:06:e9:79:12:67:10:4a:b3:01:5f:e1:
03:3c:59:08:74:d2:30:16:52:0b:2f:27:8d:22:91:3e:07:3a:
e4:24:a1:19:91:49:84:fb:ea:2a:3c:db:d1:21:1c:95:a8:fa:
eb:eb:64:98:a6:35:27:20:da:bc:23:a1:21:28:46:f4:1f:c5:
8d:99:94:b3:e9:fa:11:40:a2:0e:20:e6:24:30:5c:3e:0f:71:
0e:e4:f8:2e:9f:93:eb:9f:e8:a1:f2:7d:b8:a3:2b:58:fc:d0:
1e:e9:27:79:a6:5a:4a:04:6c:bd:e4:40:3d:eb:5e:1a:42:29:
0e:16:ba:1e:ba:e5:b6:24:f4:32:17:3e:0d:fe:ad:7e:2d:23:
88:58:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:34 2025 by rpki-client