Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: jLeBBKFyAfogU3JfSntMy9oZKtlpChXkkAlxcj+ftRo=
Subject key identifier: 59:4F:92:C4:F2:DC:80:15:68:85:2B:EC:FF:E7:8C:D8:CE:CE:E9:9A
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 0198808B03E4CAEA54FDDA1B3592910BA969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 1626
Signing time: Wed 06 Aug 2025 18:00:50 +0000
Manifest this update: Wed 06 Aug 2025 18:00:50 +0000
Manifest next update: Thu 07 Aug 2025 18:00:50 +0000
Files and hashes: 1: 1-r8ngTnAMIWnigi3kZKRlPxzAEg.roa (hash: 4upInjfh8BMDhZW1GMRFLRcUKFy4sgss61UjVbuCcN4=)
2: 3bHFI98fNrO-AI7iYMdoY6Cy4Ec.roa (hash: jNavEGcWKNfNKB84/MmKoUJXT5oHj4PAQhOkM5ErTv4=)
3: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: jVP3JXuLdmTtUosEld2dLaC2HfZuj8OQd1Qnfc3cITU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:03:e4:ca:ea:54:fd:da:1b:35:92:91:0b:a9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Aug 6 18:00:50 2025 GMT
Not After : Aug 7 18:00:50 2025 GMT
Subject: CN=594f92c4f2dc801568852becffe78cd8cecee99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:bc:bf:74:ef:6f:1d:c5:62:ad:05:68:5d:
30:b0:de:70:45:0d:42:98:af:80:21:98:0d:b2:97:
ac:d2:22:5c:ff:f7:ec:ea:ce:fe:2b:b1:3e:71:e6:
12:2e:e0:bd:36:b7:2a:f8:6b:bc:6e:7d:d6:35:40:
41:de:64:9f:b5:fb:6e:7e:5f:64:a9:e6:57:ff:a4:
10:d1:7d:36:d5:29:22:1a:e7:62:59:06:98:df:c4:
c2:55:ec:ad:57:1f:65:42:4e:1b:88:e2:0b:2d:22:
22:d0:75:26:f6:26:27:90:69:8d:14:50:39:93:76:
df:23:9d:20:7c:3a:03:64:53:7c:64:44:1d:15:75:
d4:1c:a4:da:c0:14:fa:96:f1:d0:5d:c3:fd:81:d8:
1e:ee:46:9e:a4:8c:bc:0b:d5:1a:48:a7:7f:e1:26:
7c:6a:92:c0:73:ac:64:62:eb:84:3a:f7:75:02:84:
16:bf:13:69:ec:d6:72:de:f6:68:a1:2b:09:79:ba:
17:76:0d:9d:14:79:66:73:cf:2e:ba:ee:a5:74:ff:
3e:70:3e:82:04:57:fa:cd:65:15:56:26:dd:93:d7:
ba:73:9b:ec:91:ab:54:d4:1a:d7:de:1e:fb:c0:ac:
9f:54:24:c7:7e:e2:cd:22:6f:10:aa:9d:0b:b0:12:
62:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4F:92:C4:F2:DC:80:15:68:85:2B:EC:FF:E7:8C:D8:CE:CE:E9:9A
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:47:df:99:c2:80:48:b8:82:16:54:ab:00:ed:51:6d:dc:a0:
05:ef:c6:68:d5:8c:86:d0:d5:ef:2d:b1:a3:12:d1:7c:15:a4:
77:90:a1:6b:9f:23:17:29:3f:31:1e:29:59:59:9b:65:3d:7d:
4f:09:03:52:72:ce:6a:32:34:c1:c8:1a:ab:5d:33:56:cb:b7:
48:56:70:b5:56:6b:17:6e:1b:65:a2:44:48:0f:d7:01:a5:64:
83:cd:36:02:42:e7:a4:00:58:46:64:c2:8f:7a:f5:74:53:8e:
00:02:27:63:26:69:17:6c:cb:24:95:3a:87:53:b8:64:2f:8d:
80:de:24:8a:56:c9:18:bf:f9:17:95:e7:74:8d:05:bb:ac:65:
fd:2a:a7:61:19:f1:e0:c1:00:72:e7:79:76:1e:10:6b:e9:32:
34:38:c3:6e:b1:6f:3c:6a:30:09:e9:75:a5:76:c8:a3:54:20:
dc:73:48:17:10:99:3e:0b:b3:0c:b3:79:53:01:56:4a:f4:25:
43:a2:7e:e7:cd:9f:e7:30:80:56:ed:31:08:ea:60:05:3f:9b:
12:84:bb:a0:d1:37:19:1a:a8:a0:44:76:da:f6:00:10:3f:03:
b4:f3:e4:f9:29:76:de:cd:bf:48:02:94:89:3b:d1:da:e8:2b:
d5:c3:d1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:44:47 2025 by rpki-client