Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: uCAVIrnIwrsB97MQ4HD45nke/I5fiTqn1kv0gwxMJeo=
Subject key identifier: 1C:CF:07:F2:02:33:88:6F:8D:21:37:6D:A6:99:CA:23:C7:CE:BE:54
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 01987ED3DC7D183A7C3341D5FFF45CE84292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 05AF
Signing time: Wed 06 Aug 2025 10:01:10 +0000
Manifest this update: Wed 06 Aug 2025 10:01:10 +0000
Manifest next update: Thu 07 Aug 2025 10:01:10 +0000
Files and hashes: 1: 1eJwg5skWWcGDXFLNTcOwNfaXOs.roa (hash: 7FGDI31rrxDDlErzYzWSkDOB2c3i2HKAdvNrAxAMr8I=)
2: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: FM+gGIeH9c3gpcuSERbvKNoUAj1M/pE/Aqn65TwFa2Y=)
3: Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa (hash: wFwRyxZLAd3FNxCgO3OSOt8i3+YrAeILPNwkW0awCVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:dc:7d:18:3a:7c:33:41:d5:ff:f4:5c:e8:42:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Aug 6 10:01:10 2025 GMT
Not After : Aug 7 10:01:10 2025 GMT
Subject: CN=1ccf07f20233886f8d21376da699ca23c7cebe54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f9:5b:62:6d:2f:3d:24:98:cd:61:87:45:e5:
6a:eb:cb:18:b9:a3:27:99:39:11:2a:60:17:c1:c6:
cc:f0:ca:2f:64:66:ae:34:d9:80:ed:50:c0:b0:13:
92:95:55:e6:fa:e5:48:b8:f2:ef:6f:b3:c7:45:33:
e3:16:bf:c5:56:75:a5:ae:6e:a8:64:33:ef:ca:66:
eb:8f:b5:c8:b4:8c:d0:dc:0d:34:26:63:7b:ec:27:
65:36:cb:f1:3b:70:ed:ae:48:04:e8:ab:77:59:cc:
f6:f8:a9:8d:e7:df:d1:c3:2c:d7:18:d3:ac:65:b4:
0b:dd:c3:4b:38:69:7c:b8:87:41:38:47:79:37:28:
9e:8a:45:c9:d1:ee:aa:01:cd:52:6a:6f:13:25:6a:
32:3f:40:f8:87:23:4b:a5:d6:43:01:37:5f:f4:26:
66:48:fe:c7:76:f5:32:91:13:21:1e:01:93:19:5d:
aa:53:40:b6:6b:9f:b4:9b:aa:25:c4:30:63:88:31:
d5:cd:c7:8c:c7:9c:c0:2f:57:81:71:90:1b:37:f2:
ad:a1:46:e3:e4:6c:24:06:2e:ab:66:0b:08:cb:1b:
80:67:b4:fa:0e:39:f5:f1:56:45:95:5a:c9:63:cc:
16:07:28:42:15:6f:95:f0:eb:29:6a:b1:9a:72:c5:
30:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CF:07:F2:02:33:88:6F:8D:21:37:6D:A6:99:CA:23:C7:CE:BE:54
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e0:d0:43:de:3d:a1:f2:65:b5:0e:51:21:b0:2d:7a:5e:a8:
c8:6f:5d:da:b3:75:57:00:a3:4e:6e:d0:85:5b:3c:29:ff:b8:
56:3c:95:1d:26:56:97:21:43:c5:14:72:59:35:04:44:bc:67:
ff:e9:c2:00:1d:00:91:1d:29:fb:57:79:7d:48:ee:1b:a4:38:
ef:14:51:79:e6:1e:0e:c1:15:d0:5e:da:7b:07:0e:5a:04:51:
1d:18:0e:c8:48:01:4e:3f:3b:cf:6c:94:ec:55:ec:c6:64:7e:
d2:b7:84:42:14:aa:2d:26:ba:3c:dd:45:9a:49:3a:25:56:cc:
11:00:b3:26:19:b6:6c:d8:80:e6:19:7c:62:02:45:23:9d:52:
e2:38:9b:ab:03:ea:82:e3:15:09:12:01:26:6c:d7:21:17:4d:
4c:e6:66:62:5e:e3:6b:89:90:5d:f5:fa:6f:34:f9:f2:21:b8:
7f:b8:f8:6a:b6:ed:a5:29:a0:70:1e:ce:28:0b:c5:0c:7f:de:
2b:8d:9d:f0:4e:cb:42:c1:2a:31:0e:8c:a1:29:77:c6:80:83:
2f:81:cb:05:1b:73:b7:2d:6b:2f:ff:9e:ab:e1:90:c7:fc:cb:
4b:3f:a9:53:27:c3:63:2d:a1:ee:88:28:82:5c:9e:c0:36:56:
5c:bf:b3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:30:50 2025 by rpki-client