Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: btpFDZdBRsK06aBCXl1WjNUKw2x1i82z/Ek6jk4xknw=
Subject key identifier: 0D:44:F8:34:93:02:DF:29:7D:73:F3:F1:AE:99:AF:93:63:1E:3B:D4
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 0198838CBA2ADBF9E9B300F5228A562F3BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 01C2
Signing time: Thu 07 Aug 2025 08:01:34 +0000
Manifest this update: Thu 07 Aug 2025 08:01:34 +0000
Manifest next update: Fri 08 Aug 2025 08:01:34 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: eLgoq5/wTzLgSiOewnI0uRO2OVkF/P/tp5aQstN/r10=)
2: YxHERBDqRVzINYaZYx24sGQ5DjU.roa (hash: z9vAtTxka6hlJ3v+MIB3sxbWlZ+xxPgWCTfz3Y+M29Q=)
3: f9n1-MsvFF9hgPCEtznTrREmBS4.roa (hash: nLwX0ooKqTqap8AB7jQ/dh56XcE7TbuyoiwolR5U2oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:ba:2a:db:f9:e9:b3:00:f5:22:8a:56:2f:3b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Aug 7 08:01:34 2025 GMT
Not After : Aug 8 08:01:34 2025 GMT
Subject: CN=0d44f8349302df297d73f3f1ae99af93631e3bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:d6:5d:4e:17:5d:8f:60:8c:54:e5:bb:cc:
74:27:52:15:67:47:8a:5f:31:92:00:91:92:3c:f6:
fb:cb:ff:71:19:e9:a5:68:37:24:22:d1:e0:f7:67:
0c:f9:6a:e2:49:23:7f:3e:8a:48:fc:9f:39:f8:04:
73:63:f5:3d:2c:08:89:ac:be:e2:d3:a5:bb:8f:c9:
19:6b:2b:ae:ef:38:35:1f:9b:20:ed:f2:a1:90:d9:
d8:26:8d:14:cc:80:6a:08:a9:e4:28:c3:fd:7c:28:
68:21:d6:ed:74:1e:e8:39:24:b0:87:19:19:50:5d:
d6:e0:f9:a0:a7:f4:b1:f1:bf:ef:a8:ac:8e:14:4c:
4c:57:52:eb:97:ff:24:23:86:ad:8a:9e:00:77:db:
2f:29:b5:0a:5d:12:7c:e7:fc:2a:52:12:c1:bf:79:
ee:f2:e5:3f:db:a0:d6:be:e8:c3:1c:4d:c5:09:4f:
28:01:32:7a:34:e1:79:d3:65:d3:aa:62:42:5b:ec:
7c:e6:8c:2a:a7:24:ba:4c:3c:83:48:b5:c1:5a:2a:
e7:5f:44:8b:4c:b2:f3:74:fe:94:d2:7e:0b:55:a0:
6f:4b:bf:69:4f:d5:c1:1b:e0:a7:46:dc:ae:2b:e2:
db:f3:b9:8a:be:da:81:56:dc:e7:42:6b:0e:72:ed:
b0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:44:F8:34:93:02:DF:29:7D:73:F3:F1:AE:99:AF:93:63:1E:3B:D4
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2f:06:2f:80:5a:bb:2d:d0:ef:60:f4:dd:44:bf:17:72:ed:
2e:98:9b:0d:e3:f3:39:0b:4c:3f:73:51:dc:2f:d0:91:06:38:
9c:16:75:40:40:c3:30:80:38:d5:68:c8:c0:c7:3e:2f:fb:e7:
bb:db:a5:2a:de:ec:c6:ac:57:d7:c3:1b:35:ec:16:98:03:46:
55:c8:5d:8c:ae:bf:a0:e5:31:15:99:07:29:a9:5b:b0:b1:c4:
93:fb:5f:8c:d8:b8:11:a6:fa:06:fb:66:eb:91:c8:c2:37:54:
c5:57:b0:d3:f1:be:60:ed:1c:6d:8f:58:d3:ee:7e:df:26:9b:
95:36:f8:7f:f8:c9:85:73:57:5f:ae:92:93:25:d7:9b:d6:59:
84:50:96:04:f8:16:2b:23:f0:a6:5c:28:1c:3f:35:e4:d1:67:
cb:05:13:38:90:79:77:70:4a:f1:66:6a:d0:1f:7c:9d:64:56:
72:77:9b:3c:95:8e:f2:e4:9e:95:e8:6a:77:a4:1b:7b:ce:9e:
a8:f1:ad:8d:3b:08:39:78:17:c5:e4:71:ac:1e:7f:84:b5:c2:
51:cb:f5:b5:da:b3:77:4f:ea:94:39:f0:08:be:66:76:fc:6e:
5f:03:9c:b1:5f:92:e9:51:6e:67:80:62:82:7b:8c:0e:db:41:
3e:7b:e5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:22:30 2025 by rpki-client