Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: DfMfdV4FUqq+7F26CQjPjMnFXUgB9nOVmbTZCm7E0vQ=
Subject key identifier: A4:5B:3F:7F:F8:CD:7B:77:F8:A3:A9:04:F4:D3:F8:FE:6E:A6:4A:42
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 01989FDEF92653E7B3555FAB5AB13224901B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 1633
Signing time: Tue 12 Aug 2025 20:00:46 +0000
Manifest this update: Tue 12 Aug 2025 20:00:46 +0000
Manifest next update: Wed 13 Aug 2025 20:00:46 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: x+E+gRflM6/Tdb1diCjTq0oeaM5SvKe1K7g78b42SK0=)
2: ZJCu1yU9m3Cq5WWLkeWOotibU-k.roa (hash: km1a7hNobV+/Bq/2l3UQLOxoqTuuQQAxWKpbP+WCwQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:f9:26:53:e7:b3:55:5f:ab:5a:b1:32:24:90:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Aug 12 20:00:46 2025 GMT
Not After : Aug 13 20:00:46 2025 GMT
Subject: CN=a45b3f7ff8cd7b77f8a3a904f4d3f8fe6ea64a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:83:5a:ce:79:4a:f8:68:b4:4c:02:87:55:
6e:df:92:a7:ab:ea:e2:c9:d0:5d:ff:1f:bc:be:97:
ca:48:f0:9c:93:6f:c8:de:92:b1:a5:02:c5:66:34:
69:02:04:7a:e5:e3:b8:4e:49:1e:1b:f5:d2:00:c2:
90:fd:13:47:9d:f6:71:31:b3:e0:b6:9b:ea:15:25:
c7:da:c3:65:6b:8c:dc:31:75:5e:62:92:aa:f8:63:
e9:59:54:a1:09:75:f4:9d:08:12:d4:09:6e:c9:77:
ec:e0:03:02:3a:1d:c1:84:45:d5:0e:3b:84:b4:79:
eb:9d:0e:15:31:87:ad:34:a0:10:d7:04:83:ae:b5:
60:6f:1a:f9:e7:ca:1e:95:4e:83:8a:80:9d:8e:6b:
9b:a0:f8:da:19:a8:86:1c:a2:49:4b:a8:43:dd:05:
3e:3f:e9:c1:66:a6:34:58:2e:b7:f4:e6:2b:98:8c:
82:24:e1:df:97:a6:58:e1:96:d6:af:f1:08:63:e8:
a9:74:3c:88:cf:86:4f:65:f0:c4:de:17:68:47:d0:
40:27:37:98:b7:af:03:d5:fe:76:ad:37:e3:cf:71:
71:bf:64:62:fc:ea:cf:b1:60:e7:6b:03:2b:50:32:
84:56:54:76:e5:80:7e:8a:ac:41:5c:eb:d7:db:c7:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5B:3F:7F:F8:CD:7B:77:F8:A3:A9:04:F4:D3:F8:FE:6E:A6:4A:42
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:eb:f3:c4:23:2b:3b:74:62:db:f7:70:e5:e5:b5:36:9c:54:
16:12:15:80:e1:d5:d6:58:a4:c2:16:e4:10:a7:13:df:3a:4d:
0b:14:91:41:87:02:2e:a9:58:6c:45:2f:65:2a:7f:e6:5e:42:
9d:87:c9:c3:f1:f9:12:15:fb:7f:70:18:d0:d2:6b:77:88:75:
d8:4c:b9:9e:47:0d:a0:a5:18:2e:f3:ad:3f:b1:15:46:df:69:
db:ec:ca:0f:64:00:85:3c:5c:8c:e2:54:33:15:cb:ab:cc:4e:
a5:03:5a:b8:70:9a:ff:ae:0d:5f:96:3a:89:6e:d3:96:dd:f7:
9a:dc:9f:a2:03:dd:83:45:17:58:82:43:0f:28:a2:ae:d4:28:
fd:52:75:0d:e0:99:f2:95:39:52:ab:bb:1d:ca:78:bf:d6:08:
7e:91:7e:6e:52:11:8e:31:91:7c:8c:85:e5:31:de:8e:99:4f:
72:2e:7b:a1:f5:5b:15:b1:d3:5f:40:46:e8:58:c9:c1:45:1f:
ba:46:ed:dd:9b:87:ad:58:4c:28:be:aa:f8:57:8b:6f:cc:ef:
5e:35:a8:14:97:91:2f:85:ab:e9:85:4a:b4:18:29:79:e0:0f:
b3:75:70:4d:43:44:15:17:b6:73:1c:bd:e1:0a:9a:0d:f8:3d:
58:c8:cb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:07 2025 by rpki-client