
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
File: 3dya0lC4XNOZSUZbZoGy8d8U1qM.mft (raw, json)
Hash identifier: vny2ScMy1Klj1Rhml6y/ojhxsDYod9t0wwL4I9WBo0w=
Subject key identifier: EB:EC:67:F6:9D:34:8F:1D:93:19:5C:CA:2A:B3:EA:6A:6C:4A:00:ED
Authority key identifier: DD:DC:9A:D2:50:B8:5C:D3:99:49:46:5B:66:81:B2:F1:DF:14:D6:A3
Certificate issuer: /CN=dddc9ad250b85cd39949465b6681b2f1df14d6a3
Certificate serial: 019887D713A19BF0206974B3032EB622A28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
Manifest number: 0507
Signing time: Fri 08 Aug 2025 04:01:15 +0000
Manifest this update: Fri 08 Aug 2025 04:01:15 +0000
Manifest next update: Sat 09 Aug 2025 04:01:15 +0000
Files and hashes: 1: 3dya0lC4XNOZSUZbZoGy8d8U1qM.crl (hash: lhoYWQFjytsgf3h3vdsQ0rlpg2MzEjE0FBnQABReKzw=)
2: dA9DZPAABtlejc0G0adjQxYBv5c.roa (hash: 3UVeFl3N3ODI+QVLphkmL5y9dyL4Gw+YagDr/4SW4gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d7:13:a1:9b:f0:20:69:74:b3:03:2e:b6:22:a2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dddc9ad250b85cd39949465b6681b2f1df14d6a3
Validity
Not Before: Aug 8 04:01:15 2025 GMT
Not After : Aug 9 04:01:15 2025 GMT
Subject: CN=ebec67f69d348f1d93195cca2ab3ea6a6c4a00ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:eb:2b:59:11:eb:17:a8:87:b4:f8:db:9c:fa:
97:4a:77:21:64:01:d4:8c:dc:66:7c:95:5a:4d:77:
d6:1c:d7:c9:a9:e7:cd:f3:23:64:49:7b:85:e5:54:
c3:84:70:03:9a:a8:4d:72:ef:f6:d5:74:4e:24:3b:
e6:8d:df:50:a5:73:23:8c:94:aa:af:4f:37:54:97:
24:dd:ec:32:1f:68:92:a0:82:68:67:ce:df:08:3f:
d1:43:81:25:05:31:ab:bb:62:13:76:01:48:64:fe:
ed:b9:3b:ca:f9:6a:30:a0:e1:db:5f:cc:57:a1:11:
1d:0f:25:d5:b2:5e:b2:cf:6d:a4:55:ed:65:ef:1d:
90:1c:14:67:1f:a8:4a:86:b6:39:06:8e:c2:59:dd:
7b:62:a8:60:c0:9f:0a:2a:c6:d9:e9:52:0d:05:5e:
bb:b6:33:cb:fa:80:2a:3b:c7:53:10:99:84:6c:66:
83:1b:32:bc:83:fe:ad:e6:a0:c5:bb:cb:08:4c:88:
36:6f:c0:9d:4d:2c:67:b3:3f:b9:e0:c8:13:95:8d:
5d:94:44:a3:6a:c4:61:52:a7:03:58:77:af:e6:fb:
82:4c:1b:05:f4:ed:67:32:ff:34:90:a6:1c:c8:1b:
69:64:97:75:c7:ac:8c:0a:92:31:47:92:d0:d7:34:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EC:67:F6:9D:34:8F:1D:93:19:5C:CA:2A:B3:EA:6A:6C:4A:00:ED
X509v3 Authority Key Identifier:
keyid:DD:DC:9A:D2:50:B8:5C:D3:99:49:46:5B:66:81:B2:F1:DF:14:D6:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:14:18:fb:7f:6e:d1:f0:f0:3d:08:95:fe:33:aa:d6:55:7e:
9a:c2:4c:3e:43:bd:31:ac:fc:d7:e8:a6:b0:3d:69:7e:1a:6f:
af:32:e0:1d:37:f3:bc:95:63:ae:af:17:b4:11:7d:3f:74:0a:
88:dd:99:76:6b:f6:35:57:9d:99:a1:2a:a9:82:95:57:ab:cc:
26:eb:d8:2c:2f:a2:6b:05:b1:38:c5:56:41:9e:c0:5b:ba:a2:
82:f8:d3:6b:7d:b6:0c:8f:4a:05:3d:65:04:59:8d:ee:01:2e:
36:8f:2a:f1:3e:1d:5b:c8:df:57:97:c3:37:01:c2:92:e4:05:
0c:48:2d:32:40:59:3e:59:88:62:cb:d8:dd:4d:78:c4:ae:32:
16:a5:4b:d0:01:c1:46:18:b8:4d:85:a6:af:ea:b5:b0:8c:65:
26:d1:2c:9d:70:d6:1c:01:11:fb:7a:37:ff:a2:18:ee:f0:96:
1b:35:a4:78:e5:5d:03:99:fb:fd:08:f0:a2:6d:59:3f:00:a9:
eb:fb:68:cc:bc:65:16:9e:51:c6:52:b7:26:42:eb:8e:76:1e:
75:c6:f6:7a:3c:84:8a:a5:b5:35:46:38:8d:49:8d:5f:e2:7c:
5b:75:26:6f:a1:ca:59:01:83:05:fb:93:cb:14:e0:cd:11:70:
02:ce:53:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:35 2025 by rpki-client