Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: WgGMj2UTcb/5G8qgUdtuJfKRJ3WwO7nKQCJr1ByMgtU=
Subject key identifier: 3A:BD:8F:41:3B:5C:D0:31:FB:BF:58:79:F4:9F:39:08:D8:C6:EF:4C
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 019873E2E0060FD774356E9BBE9009D8CF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 037B
Signing time: Mon 04 Aug 2025 07:01:45 +0000
Manifest this update: Mon 04 Aug 2025 07:01:45 +0000
Manifest next update: Tue 05 Aug 2025 07:01:45 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: /seHur0YdnFbKt9qjPmW5xJmbffAZt1sAcvM2tSYLNw=)
2: S_7zCzKI7ogFykDCB9smaQVWqXk.roa (hash: mF9Q6AT4rOdp1L23mn4M/sQI8pPZFfLdxAWMPoSdESs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:e0:06:0f:d7:74:35:6e:9b:be:90:09:d8:cf:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Aug 4 07:01:45 2025 GMT
Not After : Aug 5 07:01:45 2025 GMT
Subject: CN=3abd8f413b5cd031fbbf5879f49f3908d8c6ef4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:f8:64:4f:7a:a7:c3:09:5f:43:70:f9:b0:
f9:b9:fb:f3:fd:9b:02:ad:6e:c1:9b:06:e0:08:5f:
2b:d7:10:c1:83:24:9c:31:9f:21:8a:45:d3:a9:9d:
76:c9:88:98:1f:01:dd:2b:90:30:a3:db:49:48:b6:
c5:5a:6a:21:9f:c4:fd:b3:5a:00:21:02:b8:eb:2c:
c7:81:16:57:2e:02:da:39:8d:4f:13:ce:19:12:0f:
97:3d:01:53:f2:ab:08:0c:86:37:f4:07:96:b3:0a:
c0:4e:a2:fe:ce:cd:9b:21:72:29:69:25:1b:79:92:
57:a3:42:23:60:21:db:fe:cd:58:59:c1:aa:dd:1a:
bf:d7:ee:fb:17:18:5a:1b:c9:bd:a3:51:2b:ae:1a:
62:17:e8:a3:23:cb:05:90:45:5f:25:af:19:21:01:
98:1b:59:34:78:fd:85:28:67:8c:20:9b:14:ed:32:
14:19:ef:7e:c8:6e:3e:01:23:45:83:da:c5:a7:7e:
26:1e:35:9a:21:b0:45:8d:8e:96:4e:f1:b2:52:87:
17:75:32:85:9e:fe:80:13:1f:6d:a7:65:60:ce:32:
ea:5a:23:13:ca:fb:58:7b:b4:d9:89:c5:5e:87:95:
82:62:41:3d:98:e8:12:13:a1:44:86:d2:e6:17:4d:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BD:8F:41:3B:5C:D0:31:FB:BF:58:79:F4:9F:39:08:D8:C6:EF:4C
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:26:d5:ed:6b:4c:ea:12:16:05:8c:18:39:89:4c:d6:ef:4f:
fc:d4:74:67:a7:e4:88:e3:9b:c5:60:6e:2b:5f:90:f5:8f:ee:
67:13:70:06:9c:aa:af:c8:d1:89:0b:f3:34:81:a1:e0:2e:37:
15:38:f8:c2:90:cc:ad:f0:ab:42:d0:58:47:81:f0:1c:2a:52:
1b:a7:62:e8:c7:b2:0b:e7:2c:8e:7a:55:22:08:7b:43:e5:5d:
1d:b1:c0:eb:4e:92:e6:b7:6a:49:1f:e7:c8:50:9b:1e:40:79:
d9:2d:04:0c:1e:73:c5:46:d9:ca:70:a9:77:f0:8d:6b:a0:f0:
d8:e7:44:b5:ba:7b:03:9f:23:2e:ad:af:8a:5b:ee:25:a6:fd:
89:a7:48:2d:03:66:04:85:a4:f1:6d:b6:3a:2c:6f:44:28:3e:
d8:c8:d2:5f:e4:f4:cb:ec:96:b0:e9:dc:65:04:ba:d4:3f:30:
d6:7a:c0:60:8d:07:52:05:0c:07:d3:a5:90:df:08:09:35:68:
69:fa:86:75:94:51:56:a8:2a:30:df:cd:2e:44:29:3e:3b:c8:
23:f8:e6:d4:33:67:9f:f8:45:3d:55:bc:23:2c:bd:f5:03:ff:
6e:87:54:26:4e:f1:e0:44:f0:ef:d5:c2:bb:ec:13:0f:f0:17:
27:28:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:28 2025 by rpki-client