Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
File: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft (raw, json)
Hash identifier: OlbkSrm11T+EEHwIgde4FaqGKgcvrIGlSPDVnygxDtY=
Subject key identifier: 4E:81:4B:61:26:CA:D2:F8:B9:AF:69:2D:15:F0:BC:19:55:5E:45:83
Authority key identifier: DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
Certificate issuer: /CN=df0f32e5f098b86a8794825c81122da953466284
Certificate serial: 019893DAC4F1B67A7252015D1F780CF53A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
Manifest number: 069B
Signing time: Sun 10 Aug 2025 12:00:44 +0000
Manifest this update: Sun 10 Aug 2025 12:00:44 +0000
Manifest next update: Mon 11 Aug 2025 12:00:44 +0000
Files and hashes: 1: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl (hash: ejunB9IrWDtCg+hX3GiTOvXfd+mUoJ5QjgQYqjgQxEY=)
2: gBjKKqKZuEY4WvRauB7caOw1S-0.roa (hash: KcvP3QvpprIZ7nrbS5q17f/tcN31DqhQB7sqPQGvSG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:c4:f1:b6:7a:72:52:01:5d:1f:78:0c:f5:3a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0f32e5f098b86a8794825c81122da953466284
Validity
Not Before: Aug 10 12:00:44 2025 GMT
Not After : Aug 11 12:00:44 2025 GMT
Subject: CN=4e814b6126cad2f8b9af692d15f0bc19555e4583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:04:f9:70:cf:c3:05:dc:6e:ee:19:47:4f:
ba:d4:86:2a:b5:e6:6e:7d:5c:90:51:ba:54:ac:fb:
70:66:d1:3b:ed:77:c6:ae:03:13:31:58:73:b6:af:
0e:16:d7:b8:ef:c9:5f:f9:00:3d:77:e4:ba:17:c7:
e7:65:1d:e9:02:a0:c7:c5:de:03:db:56:c4:bd:8c:
ce:28:7c:dc:cb:b8:b5:9f:79:65:7b:1e:1d:59:90:
ad:a5:da:76:78:6d:eb:37:ab:7b:cf:e3:7e:96:f2:
fe:43:a0:aa:d3:37:fe:2e:69:d4:3b:52:b4:37:8f:
f2:02:fc:da:28:ac:32:2a:5e:e7:98:93:e3:a5:ec:
cb:40:58:5d:80:d5:4b:e0:98:7a:c5:1d:ed:3f:db:
81:e2:be:e1:82:cd:37:e8:d2:e9:34:14:af:dc:ce:
5b:e4:76:fb:5f:10:df:af:e4:28:11:68:b6:0f:91:
67:60:bf:63:6f:88:35:0b:e9:34:1f:be:26:ca:79:
f2:e5:fd:14:73:b3:64:01:ef:3e:c6:c2:6c:09:8b:
df:16:ee:8f:48:d2:54:26:09:73:6c:14:89:cc:fb:
3e:7b:06:c2:64:8b:31:ca:a9:fd:47:71:68:a1:f2:
46:ad:e7:b4:2a:68:32:a3:62:fa:fc:31:a4:2b:ae:
eb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:81:4B:61:26:CA:D2:F8:B9:AF:69:2D:15:F0:BC:19:55:5E:45:83
X509v3 Authority Key Identifier:
keyid:DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9a:cb:9a:aa:3a:b8:66:a4:24:45:8d:04:d2:79:33:1b:36:
80:33:45:dc:a9:46:eb:6e:9e:ce:25:72:25:59:da:49:2b:1c:
c7:bc:53:56:56:03:7e:ec:b7:ec:9f:06:d2:9d:b5:2f:71:42:
39:63:79:17:0c:f4:70:da:d2:96:95:6b:29:2a:93:47:d3:b9:
76:1e:08:f7:ef:b9:0b:02:24:11:11:7b:1d:69:74:c8:95:b1:
d8:a9:da:eb:d6:8b:90:d0:04:a3:90:79:d4:1a:51:4c:ce:b7:
d7:97:24:af:c3:c6:47:d9:e2:34:c8:5d:98:0e:62:33:c9:2e:
d5:e5:e1:7d:19:c7:2e:f6:f8:a6:ca:fa:c4:2a:ba:51:2d:5e:
f8:ab:90:e6:6c:08:d2:1d:bf:6f:4c:c0:60:e1:91:38:0d:e3:
c1:17:2d:3f:e9:8f:9b:91:06:e9:e1:9e:7c:bb:a5:79:46:75:
e3:3d:6b:54:56:9b:02:65:3b:51:b8:d5:40:3f:70:91:5c:38:
7d:19:53:53:dd:96:69:30:1e:b0:28:ab:d1:b4:fb:ef:46:65:
19:23:87:3c:41:10:d1:49:f1:17:40:9f:50:37:7d:96:36:02:
e8:25:80:7c:22:76:01:87:ea:69:ae:65:1f:f4:7e:f8:93:36:
2d:ac:18:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:28 2025 by rpki-client