Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: SFh/36l/JB/TuRZez9jiIQBeusOoSsDKIOi5vTRsftE=
Subject key identifier: D3:1E:FE:34:4E:5E:42:10:1F:8C:19:51:D2:35:63:1A:D2:B4:B4:69
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 01988BB311C8542D797BA68A300292B0FBA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 112A
Signing time: Fri 08 Aug 2025 22:00:25 +0000
Manifest this update: Fri 08 Aug 2025 22:00:25 +0000
Manifest next update: Sat 09 Aug 2025 22:00:25 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: huSHCh8hg8OsMCuCSA44Ow4mezuUfiUzpBdngTQ6++s=)
2: _eQTxfZZbwefhXlLKHO7CEbeNzo.roa (hash: XwbhtEsqMzoTs493oAMc1WoC+bVurXPqsNp3fAtN59M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:11:c8:54:2d:79:7b:a6:8a:30:02:92:b0:fb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Aug 8 22:00:25 2025 GMT
Not After : Aug 9 22:00:25 2025 GMT
Subject: CN=d31efe344e5e42101f8c1951d235631ad2b4b469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c9:b6:af:c1:df:05:ef:cc:a2:5d:f1:80:c9:
f3:1b:43:77:5f:52:3a:fb:49:e5:47:c2:69:28:a8:
1e:04:55:3a:8d:a2:e2:a5:76:7a:6c:bf:f4:32:d9:
38:52:02:53:9f:59:e1:05:71:2d:39:7f:49:f1:49:
44:a7:68:33:0b:de:ab:a8:4b:77:1c:e9:a1:40:60:
b5:78:91:7e:ae:ac:6e:7b:78:cb:49:84:53:b4:c8:
4b:58:8c:d5:f0:ad:ec:60:36:8a:7f:b8:4d:ef:85:
fd:c8:e9:a1:2a:ab:3a:40:e7:ca:eb:fb:66:31:0a:
b4:6e:ea:dc:3f:31:44:59:9f:7b:08:9b:c8:16:2c:
c7:72:0a:11:3f:b3:22:df:0c:70:2d:09:8a:bd:6e:
fb:b3:0f:61:c9:8a:a2:31:29:d9:9a:1d:90:e1:0e:
94:84:7c:32:83:35:2f:08:ec:4c:e2:a7:cc:6e:25:
77:af:40:42:10:21:07:44:03:da:99:0c:a4:8e:7a:
a3:d0:c3:71:bf:3a:c7:5d:ae:78:c7:08:a2:f6:67:
52:68:c9:cc:4b:30:b7:71:70:6c:b6:9e:8a:db:96:
0d:7b:8d:00:8d:36:26:5e:12:49:8e:a6:f1:b9:b1:
cf:1e:c1:51:8a:24:cd:16:32:a2:fe:7f:45:f1:24:
72:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1E:FE:34:4E:5E:42:10:1F:8C:19:51:D2:35:63:1A:D2:B4:B4:69
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:de:e0:7c:d3:95:ed:40:cb:06:ef:7c:1d:ca:67:01:1b:57:
11:4a:84:09:36:2b:7d:1f:08:cf:f2:43:cd:46:ad:bd:cc:e0:
72:95:63:f3:c1:63:d4:c2:b2:da:75:87:f0:eb:a2:b4:63:b3:
d3:50:54:4d:f7:fa:0d:06:1d:77:47:94:a5:41:fc:c7:15:f6:
5f:19:3e:e4:70:ff:a3:a8:e2:43:b8:78:74:29:83:31:f4:b4:
a1:ef:de:42:28:38:e4:e8:5c:9f:25:44:75:27:51:a0:95:2e:
23:ac:dd:5f:10:6f:52:c7:df:9e:42:79:bd:d1:c2:e2:03:45:
cf:b8:79:4f:86:68:fc:30:75:1a:f0:5a:a1:34:c3:58:41:4d:
9a:58:29:9b:ca:4c:85:8e:ce:4b:e4:de:5b:9e:64:0c:52:dc:
c3:8b:56:06:2e:9d:5d:5d:de:91:63:5d:cd:17:fb:24:32:93:
55:ff:b8:f7:46:f3:e7:52:50:77:96:d1:6b:41:a6:6f:0e:37:
9d:d7:5d:14:29:84:1f:95:32:0f:be:76:4d:ba:48:9b:68:48:
44:9c:f8:f9:cc:11:14:ec:be:a4:71:70:af:d2:b6:b0:9f:bd:
38:25:c1:e7:d3:87:a0:6c:3b:19:7e:53:bc:eb:52:2c:c1:03:
e3:b4:a5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:59 2025 by rpki-client