Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
File: 3keU2fyrI-wF3d1QSKP8cgQAKio.mft (raw, json)
Hash identifier: QDdtj+iposnihctZdr5dCud+A41f/Vk47AQ3sFhi+EY=
Subject key identifier: 63:3E:25:DE:13:C0:23:63:B7:AB:60:8D:04:DB:C5:C6:8B:04:C0:90
Authority key identifier: DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
Certificate issuer: /CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Certificate serial: 01987D1C25888A531D9FE9867A12FEEDE1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
Manifest number: 0F4B
Signing time: Wed 06 Aug 2025 02:00:53 +0000
Manifest this update: Wed 06 Aug 2025 02:00:53 +0000
Manifest next update: Thu 07 Aug 2025 02:00:53 +0000
Files and hashes: 1: 3keU2fyrI-wF3d1QSKP8cgQAKio.crl (hash: 7T0ig0qN1oDA1E81gOdpf3e0CahTIl2SP/OUngHTGpg=)
2: ZK9gU4FBN8KUQTPHGhgGaXPIWjk.roa (hash: YFHfAWvmuV1pyKRAlUfEUWxi+ZLKrTZD/d9TC0Av1JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:25:88:8a:53:1d:9f:e9:86:7a:12:fe:ed:e1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Validity
Not Before: Aug 6 02:00:53 2025 GMT
Not After : Aug 7 02:00:53 2025 GMT
Subject: CN=633e25de13c02363b7ab608d04dbc5c68b04c090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:3d:3a:6b:86:99:62:8b:6b:47:c2:f7:eb:
8a:b0:cc:6b:63:e8:ba:04:bf:b0:e8:30:e3:74:50:
bf:92:30:80:3c:b4:77:70:c3:fe:f8:0b:ee:19:8e:
a1:a6:d3:7a:9e:e7:c1:a7:7d:e8:f1:6b:46:24:48:
81:b2:47:ef:2a:f9:dd:8e:44:ef:42:66:2f:4c:24:
30:9d:b2:33:45:ac:bc:36:f2:b8:80:7b:b4:1d:fb:
90:66:e8:42:30:6d:ed:9e:b9:c8:fc:19:71:00:c6:
66:7e:45:29:92:22:5e:06:f9:98:ac:22:b6:e7:ee:
e3:42:3e:8e:b9:5c:ca:01:e4:16:f7:51:31:b1:97:
9f:e4:a3:65:ae:3f:94:4d:31:ee:bc:96:c8:fd:1c:
5f:bc:e8:74:e8:25:a9:96:49:f5:23:44:93:24:26:
ef:ff:5e:f7:6a:32:c2:d4:2c:9a:f4:4d:19:af:30:
eb:3a:be:b6:f6:a7:07:05:52:e9:3c:f5:11:c0:ef:
66:af:00:76:82:ee:39:1b:d7:5e:82:4c:f3:df:0b:
1c:c6:8b:91:9d:68:ea:47:ec:14:c6:89:82:40:ea:
36:70:07:bd:ae:9b:7a:67:14:15:4a:fd:fe:d1:e1:
0e:84:2c:ca:cc:35:92:f8:13:6b:ca:e7:47:ea:52:
66:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3E:25:DE:13:C0:23:63:B7:AB:60:8D:04:DB:C5:C6:8B:04:C0:90
X509v3 Authority Key Identifier:
keyid:DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:04:3e:43:07:50:3e:d6:96:e1:3b:e6:62:17:3c:0a:04:1a:
55:e7:d2:d2:56:47:4b:2e:20:ae:b4:f8:64:41:ea:ed:e0:ad:
12:60:9b:45:7f:be:21:c1:78:ac:1a:99:63:48:14:22:8e:31:
da:66:d4:76:ea:7d:55:2e:cc:27:da:f4:3b:9c:f0:aa:fa:22:
0e:cf:f6:44:f5:42:a5:cd:ab:ab:fd:16:cd:6e:33:0d:a8:9c:
a6:3c:a0:59:bb:03:73:26:d4:00:af:77:84:f0:b7:2a:b9:86:
a4:ea:c0:f2:b2:54:65:05:aa:6d:e2:71:96:f5:05:99:e2:07:
f3:a7:cc:a1:e1:2f:61:fc:88:d0:13:e9:ad:2f:df:82:fb:27:
a3:64:e2:b6:9d:34:e6:5c:b3:50:42:3f:63:90:32:a9:e2:51:
8a:06:1b:00:f0:41:65:44:63:31:a9:ef:29:a0:33:c6:97:e2:
90:b1:b3:06:bb:4c:d8:a0:e4:02:3c:9f:ef:e4:6d:3a:13:bb:
f9:33:0e:d4:70:61:7e:97:4a:a5:93:5b:eb:cc:de:92:d3:32:
51:90:5d:a9:db:ef:18:48:a7:f2:81:a4:a8:7a:05:3f:db:18:
1a:c9:2b:3e:67:2e:ef:2b:06:85:7f:76:bc:d0:aa:d4:0c:f8:
8d:64:04:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:03:12 2025 by rpki-client