Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
File: 3RWKDaAyZt8UTImntuNadhxJmPc.mft (raw, json)
Hash identifier: QwDGl3Y+rmf1lpTOCUOp1491fDlHziazb1ZXjDYvkfI=
Subject key identifier: 13:1B:5A:9B:53:23:D9:EB:A6:ED:7A:A9:34:0A:7F:D8:8B:E3:6E:45
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial: 019873747B188A7731831D1385320311FB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
Manifest number: 0310
Signing time: Mon 04 Aug 2025 05:01:10 +0000
Manifest this update: Mon 04 Aug 2025 05:01:10 +0000
Manifest next update: Tue 05 Aug 2025 05:01:10 +0000
Files and hashes: 1: 3RWKDaAyZt8UTImntuNadhxJmPc.crl (hash: 3Broas1VV91kYiOUgmpsnrU97BRPTaCqXDrBHYk0/O8=)
2: hjp9r4jkfdcWh8tb4IbJ8JLqvhg.roa (hash: rpnDBu2YggoyGIw/C4Ub9AMkAXEhq0st1VH7UXhjugk=)
3: oyehTC9fC3RxVNTxQ-3Nace4xCo.roa (hash: 6amsBM8Jkzid3Hbf3NCrvWV5lgaxarQNmZ7omOl4H1Y=)
4: tWWoO6Q9xW9qzxs1LTkk9o7qkwc.roa (hash: dIS2lAatvIYTUHXvxYqBBEq9rurmrnQiuE0cglSeBdY=)
5: zdvIB-MX7mBXxPXY9Gvkyg4DaIA.roa (hash: JzeLYwYOJtUYF4eEhrs8y3e0iaiCpHB7RqKZXjFT6qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:7b:18:8a:77:31:83:1d:13:85:32:03:11:fb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Validity
Not Before: Aug 4 05:01:10 2025 GMT
Not After : Aug 5 05:01:10 2025 GMT
Subject: CN=131b5a9b5323d9eba6ed7aa9340a7fd88be36e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:7f:4f:9b:99:a4:1a:81:3a:1a:76:36:e5:
d8:77:d6:3a:ea:2b:8f:af:8a:b9:d9:65:7e:ec:e5:
ef:de:0d:e8:24:cf:e8:03:34:d9:83:76:cb:c1:74:
d1:fb:4f:9c:4a:a2:2b:47:02:6d:98:79:56:00:1f:
c3:72:77:f5:cd:7b:a6:7d:09:78:96:a7:d9:43:36:
13:55:ef:a1:f1:df:21:98:11:68:85:f9:1e:c5:7d:
db:97:8f:89:2a:f9:13:c2:52:f8:2a:c7:68:49:df:
0f:56:74:b4:7a:b5:47:e8:a8:8a:e8:ad:2d:a8:d9:
af:f0:ae:8e:06:3b:7f:e1:36:47:2b:19:c2:c5:ec:
25:7d:b2:f8:18:0e:da:a8:3d:cb:bc:b4:43:8d:2b:
48:26:22:90:55:99:55:34:6d:05:d8:68:6d:55:be:
9f:b5:b9:ad:35:9e:00:63:f3:68:ba:df:07:e2:d3:
dd:48:65:d3:0b:89:87:7f:c1:5b:fc:a7:c4:ab:35:
ba:f1:b3:d4:a0:5a:82:d7:fa:1b:38:57:63:b8:fa:
37:9e:c1:84:63:65:9d:cd:99:52:e3:2d:15:15:93:
53:03:b3:40:a4:91:6a:1e:5d:53:02:fa:a0:b2:db:
5c:2a:40:c7:69:61:c3:ec:79:1a:cd:85:63:52:e4:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1B:5A:9B:53:23:D9:EB:A6:ED:7A:A9:34:0A:7F:D8:8B:E3:6E:45
X509v3 Authority Key Identifier:
keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:8b:73:a1:f1:fb:7e:b7:f2:2c:a1:99:bc:fa:7e:31:d6:68:
fb:cd:08:27:e3:f7:40:2d:43:12:3c:ec:4b:96:f5:3e:08:1d:
73:68:82:f9:66:ea:6a:9b:b5:90:f3:47:5c:7c:22:24:ec:b5:
ee:c4:00:18:f0:7f:5c:b2:8f:f5:ea:37:7c:41:f8:47:be:b6:
67:c1:99:cf:ff:82:44:2b:1d:17:c6:35:c8:ed:29:2e:e6:d3:
67:bd:32:d3:d2:53:dd:ec:7d:05:ae:6d:2e:19:3d:9b:02:a6:
f5:aa:fa:23:6e:3e:2a:39:eb:e4:4c:ca:83:5b:76:27:01:53:
49:fa:e3:97:d1:40:26:7c:79:e7:e2:e3:2c:cc:b0:82:4c:57:
d9:e6:49:9d:8b:a0:7d:07:fc:26:4c:60:81:bb:a2:45:2e:16:
84:2e:db:48:3c:65:18:2a:e2:43:82:4f:5d:4f:e0:d1:2e:51:
15:44:ff:d9:35:34:c6:66:ed:87:f1:e1:3b:ec:d1:79:0b:1a:
6e:7a:6f:13:f9:9d:22:18:bc:26:b0:0b:7e:6b:21:b4:69:90:
9a:33:94:38:66:31:81:84:4c:25:98:81:35:5f:36:5b:b7:19:
50:51:24:47:a2:4c:37:76:95:c2:4e:d9:e9:0e:12:93:d7:b5:
cd:aa:9c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:11 2025 by rpki-client