Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json)
Hash identifier: MMvJkNw2rmKG9Mi5LEDncJ6XtF84blpyT8jxrYH5u44=
Subject key identifier: 35:8C:6E:B0:BE:3C:85:B6:92:3A:09:F5:48:69:39:D2:A4:0E:D8:4C
Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Certificate serial: 01987BD2D93D9B96CAC7D53710EC80440444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
Manifest number: 1619
Signing time: Tue 05 Aug 2025 20:01:12 +0000
Manifest this update: Tue 05 Aug 2025 20:01:12 +0000
Manifest next update: Wed 06 Aug 2025 20:01:12 +0000
Files and hashes: 1: 1Z0qsk9StCFAQktZcYQaKAQv6Eo.roa (hash: 7ZoC6UA8RmSyn6UoUQLfpDC2951iCi7ws/lgZfO/s3U=)
2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: OQI1864i3WQUkBxftWslUn/AuEc2CJ4EUzNHh6UtT1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:d9:3d:9b:96:ca:c7:d5:37:10:ec:80:44:04:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Validity
Not Before: Aug 5 20:01:12 2025 GMT
Not After : Aug 6 20:01:12 2025 GMT
Subject: CN=358c6eb0be3c85b6923a09f5486939d2a40ed84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:83:c4:d1:0c:96:fb:52:3a:08:dd:c9:99:
e8:96:1d:d1:be:92:2f:3d:f6:b9:c4:6d:42:c0:b3:
ff:47:69:cd:44:79:b3:c8:2f:88:c0:fd:25:3a:55:
d7:98:15:28:d9:b7:80:a3:82:b7:20:78:30:8c:fa:
de:ba:2c:94:16:93:3b:fe:01:d6:64:40:4f:3d:10:
bb:e6:4e:3b:15:b5:55:5d:36:f2:e7:e4:e6:3a:b5:
24:aa:b6:87:94:38:bb:51:df:6c:f7:af:a8:4e:83:
05:bc:38:ee:72:22:5f:a3:f1:d0:b6:a0:61:f0:6c:
8c:eb:5c:4e:37:89:c7:b8:28:ce:17:96:fc:d4:c7:
5d:75:8a:ea:47:e6:dd:0b:0e:1e:ea:29:d0:51:15:
ff:a0:5e:62:ad:9e:f5:f4:e9:c6:e7:74:87:ca:74:
89:57:b4:30:fc:53:4d:ff:eb:9b:63:f9:3e:5d:aa:
79:0f:4b:51:61:e8:f1:5e:24:11:b5:fe:ad:cc:92:
0d:1d:df:21:9d:3a:ee:22:1f:fe:08:de:b4:36:c9:
e3:3d:b4:3a:f0:07:ef:a5:48:39:05:ae:6e:37:84:
80:b4:63:65:93:ab:8e:48:61:18:08:4a:8b:88:c5:
42:a0:3c:a4:c2:dc:bf:df:80:02:b8:8e:5c:ca:03:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8C:6E:B0:BE:3C:85:B6:92:3A:09:F5:48:69:39:D2:A4:0E:D8:4C
X509v3 Authority Key Identifier:
keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6f:9d:20:67:5a:4e:85:f0:83:89:44:18:00:d1:30:34:b3:
ed:44:87:2f:39:e2:3c:23:b6:07:bd:33:7d:f3:15:e2:e1:e5:
49:0c:5a:4a:cc:0b:89:0c:67:ce:78:82:55:00:c1:a1:54:8a:
a7:ad:ed:a7:b3:a2:2c:42:30:ad:9f:af:09:4c:da:06:64:6e:
c0:a2:3c:92:9b:6a:b6:5d:40:0e:34:c6:f8:bf:3d:bf:d1:af:
c7:4c:7b:9c:d8:7c:74:2f:02:e8:d1:31:4b:77:5c:56:2c:9b:
5f:c3:5c:dc:3a:bc:0e:3d:31:e6:a2:05:c7:0a:6a:d4:76:76:
f1:45:5c:6a:36:2b:9f:7c:65:d7:d4:03:a7:77:74:df:65:26:
6d:9e:1d:9d:bb:fd:ef:97:24:8b:60:28:3e:26:30:e0:f7:92:
42:78:c5:5f:f1:d5:44:26:5d:e1:20:9a:54:db:98:35:3d:85:
4e:73:3f:e6:3a:bd:fe:2c:2a:bd:59:a9:9d:a9:56:bf:b9:f3:
4f:32:73:f3:4d:07:8f:f2:5a:25:3b:3b:ef:c8:a9:ec:97:50:
7b:07:07:85:94:18:79:57:6c:16:8b:62:77:1e:8b:83:fa:a9:
fb:82:a3:26:9b:02:cb:9b:94:9e:a3:36:c5:fe:3b:20:f6:e0:
80:3d:7a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:51:29 2025 by rpki-client