Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier: ahpvWbDIavTI4rVS8hsBG09W0oJjDSgn9rSZeZVkUyg=
Subject key identifier: A7:D1:70:3C:86:89:53:50:83:2A:94:26:BE:DB:62:88:29:D0:EC:1F
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 01989749E9E37CBA5EC4F265DB9A7CAB8D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number: 11DD
Signing time: Mon 11 Aug 2025 04:01:00 +0000
Manifest this update: Mon 11 Aug 2025 04:01:00 +0000
Manifest next update: Tue 12 Aug 2025 04:01:00 +0000
Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: dUGIUY1D/LV6XTfOPaDAeELVNwZuS7FVdnQyHZXKQro=)
2: jrzKo-lt5J6MsHDsEMxREvgxfZ8.roa (hash: NadiGgxjhYXuzdbS81cV9tBbpe6k6vvKuOl8KjAS3hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:e9:e3:7c:ba:5e:c4:f2:65:db:9a:7c:ab:8d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: Aug 11 04:01:00 2025 GMT
Not After : Aug 12 04:01:00 2025 GMT
Subject: CN=a7d1703c86895350832a9426bedb628829d0ec1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:b9:a3:10:14:08:a3:0f:5a:83:b1:65:2b:
cc:62:5c:15:21:0b:5e:57:8e:c5:f1:68:0d:da:8e:
2a:b8:e2:57:eb:9c:29:8d:5c:84:3f:17:84:70:59:
81:71:88:8d:1d:f6:a4:0e:a1:3c:a3:6b:04:4f:cc:
a7:26:ec:67:3c:bf:39:62:1a:dd:c2:b8:fa:4b:b5:
2d:fa:eb:57:77:37:fa:5b:32:fa:2c:60:4c:c2:d8:
7a:25:cc:2c:91:da:62:8c:30:a4:39:5a:98:d5:44:
e5:9d:b2:0f:c9:d4:ce:b5:ca:21:dc:e2:7a:e5:58:
09:20:78:1d:df:c3:d1:5d:2f:81:ce:2d:65:85:f1:
c3:dc:11:cc:bf:9b:0d:f2:27:f6:6e:4c:ee:57:e2:
d8:82:ab:24:2c:fe:3b:f0:31:dd:0a:5f:7b:4a:c9:
bc:8b:3d:ae:ae:12:3c:81:07:fc:35:e6:da:fe:12:
65:aa:df:71:08:b9:b1:89:b9:2c:e2:a3:62:93:b2:
ac:25:d1:96:60:a7:4d:54:29:02:28:a0:52:2d:4d:
7f:b7:a7:4e:3a:50:e9:4c:a0:f5:e9:91:ff:a3:77:
ce:de:36:a6:33:4f:76:57:76:2e:8a:e1:32:df:f6:
31:2e:d1:5f:dd:a5:d5:6e:8a:54:1a:1e:b5:d3:e0:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:70:3C:86:89:53:50:83:2A:94:26:BE:DB:62:88:29:D0:EC:1F
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:20:57:18:44:9f:ae:62:42:f3:79:34:e2:5c:8f:2d:e2:d0:
8b:d0:91:19:c1:c1:3f:a4:e3:2d:5b:a1:5f:22:82:c3:1f:8a:
6a:85:c6:c8:d1:3d:b1:f7:2c:cd:c4:89:58:0b:a6:bc:6e:2f:
ec:f4:63:04:96:6b:ce:14:70:fc:a1:3d:14:39:bb:bf:bb:d3:
8a:19:d2:52:20:9e:03:d5:36:4b:2b:cd:b0:66:89:11:d0:40:
54:e3:73:24:c9:ba:ac:fa:e6:87:3d:f0:24:58:bc:49:4c:2d:
77:71:3b:0a:cf:66:ca:10:d4:4e:83:6f:7e:f5:82:ef:08:c8:
30:3d:84:3c:cc:65:d4:ac:2c:b7:d4:52:65:8d:f1:dc:c2:43:
98:c3:e8:81:a4:8d:d2:6d:7d:2d:6d:35:f8:17:29:6b:91:5a:
29:a8:d2:19:ef:0a:80:0f:39:3c:97:32:6d:1c:ea:39:6d:fc:
5a:99:9d:87:99:8e:db:19:28:7f:69:86:75:12:b6:66:0e:24:
bf:2d:0c:b9:86:a1:58:c7:ae:d8:60:d2:28:cf:17:5a:65:b3:
b2:c4:a1:a1:eb:89:3e:8d:99:20:5a:9b:ae:f5:73:2e:5d:62:
29:45:3a:dc:e1:49:c8:ae:0b:bf:95:34:09:a2:8c:80:62:7d:
6c:67:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:13:22 2025 by rpki-client