Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: tRd9iBW7rx02UtgrGWCey49pASAvFl0HtCv4BLfSo08=
Subject key identifier: DA:9C:88:A5:BB:7B:29:EF:D0:98:2E:42:5E:AC:DA:3C:E5:1D:45:16
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 019896370BB0C07B8FC44C6E6CC682EB1EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 15D5
Signing time: Sun 10 Aug 2025 23:00:46 +0000
Manifest this update: Sun 10 Aug 2025 23:00:46 +0000
Manifest next update: Mon 11 Aug 2025 23:00:46 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: z7Vjujfr3OjPv4ePV9TMEIp2zkQuIshezNxpwuG3U38=)
2: 6BKOzeR_jkv8Td7naSCpGwK2cbo.roa (hash: NdsdWgq7FNtTGsjv+sGoOHpLX3rHnRlY3SsmvrWzKc4=)
3: gTmhFIzM7If-kzl01cWeEzcqqns.roa (hash: lUpkvjKsmC5D6MNw62q7fvgUR6asOsGbY3c+E0HzKW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:0b:b0:c0:7b:8f:c4:4c:6e:6c:c6:82:eb:1e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Aug 10 23:00:46 2025 GMT
Not After : Aug 11 23:00:46 2025 GMT
Subject: CN=da9c88a5bb7b29efd0982e425eacda3ce51d4516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:10:0d:b4:88:14:49:15:16:be:b8:44:a4:
98:63:c9:76:79:31:60:de:ad:40:28:24:f9:1c:c6:
ef:08:29:0c:20:7e:95:b1:ee:43:f3:42:65:c6:f5:
9e:54:62:5f:37:3d:c9:fd:ed:cf:08:19:d2:82:52:
09:f1:03:1c:31:21:8a:03:8a:c8:1a:6f:4e:74:9d:
59:90:1a:7b:a2:40:7a:91:1f:16:88:5d:a8:4a:c2:
da:d5:18:01:86:2c:c2:86:50:9e:b2:3a:e3:14:1b:
0f:ea:51:55:c3:00:05:8e:a3:ed:39:17:8f:7c:5d:
62:f7:8e:7e:05:b6:e8:68:c3:07:da:a9:b6:9b:b1:
00:99:5e:a2:1f:9b:79:b3:ef:64:58:56:30:69:8f:
92:7d:5a:e7:3f:4d:b5:0d:b0:39:66:20:77:53:39:
cb:60:76:6e:d8:36:ca:c0:b5:f5:f7:99:7e:e8:e2:
03:52:61:17:b2:45:a7:6f:fb:1a:fa:8b:31:b0:1c:
4f:b9:72:03:79:06:11:54:3e:da:00:49:98:e6:84:
90:1f:bd:6a:a1:4b:28:42:15:67:f6:a6:7f:d2:96:
75:e4:0a:a3:ab:2a:2a:8d:50:4f:a2:26:d9:48:92:
ec:cd:03:f4:e2:c8:21:98:69:1d:3b:ad:dd:0e:0d:
67:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9C:88:A5:BB:7B:29:EF:D0:98:2E:42:5E:AC:DA:3C:E5:1D:45:16
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:35:ac:b5:b9:65:2e:31:e0:0c:27:53:df:8d:bf:fc:ee:b3:
19:26:cb:69:95:7d:64:a0:4a:0e:7a:67:be:3b:04:c0:2c:88:
9a:fe:42:1e:14:e7:46:56:68:dc:27:d6:51:2f:2d:78:f3:39:
49:91:01:0e:86:9e:e3:26:3e:aa:91:49:e5:31:24:78:68:7b:
c7:c8:cd:62:c6:13:a3:77:4a:d9:b1:86:ca:0c:cf:2e:d6:1a:
3d:0d:02:45:13:d3:a3:a2:e5:39:da:d7:6d:c4:e1:c6:80:c7:
85:71:fd:25:f3:15:35:3b:ed:d9:f0:09:65:8a:cb:02:14:30:
a2:fe:a7:34:eb:af:46:75:e0:02:73:a7:21:5b:59:db:03:e4:
c0:92:db:e9:44:52:f3:10:3e:30:20:35:88:a7:c2:bf:16:9a:
b5:80:a6:ee:ca:d4:ff:0c:ee:d7:86:74:56:5b:ed:01:e5:15:
54:52:1b:2c:3c:fc:32:33:0f:f0:2b:71:a1:41:de:40:2c:60:
ae:6a:8e:f4:07:83:eb:db:45:3f:b5:02:4f:ab:2f:d8:c5:60:
66:3d:65:cf:0d:b9:e9:62:b3:20:f0:98:35:a6:f0:4b:6d:e2:
b6:8e:52:75:d0:1f:d1:bf:66:87:43:0f:2d:03:7a:83:85:b4:
7f:63:db:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:27:59 2025 by rpki-client