Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier: fOO8t1zKwaV4hveFqjtjQWi9Yo3JS6mhtMc7XgMWLDQ=
Subject key identifier: 55:BD:B6:0E:3B:0D:0E:69:07:3A:7F:32:46:43:14:CE:F2:41:79:AC
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 01987DF7A134D3BB05E25205868ED29AAF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number: 101F
Signing time: Wed 06 Aug 2025 06:00:37 +0000
Manifest this update: Wed 06 Aug 2025 06:00:37 +0000
Manifest next update: Thu 07 Aug 2025 06:00:37 +0000
Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: ujQNG20J+va7XHPC/UGiRaMQp2KUOvH8lx+N4usINLg=)
2: CXuHSCaFxVaRaAru4-iFvdd0d-g.roa (hash: po3EKI/Ie4MxQDtGyWIOYbTAnH49FsuKgvn3GW+cz7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:a1:34:d3:bb:05:e2:52:05:86:8e:d2:9a:af:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Aug 6 06:00:37 2025 GMT
Not After : Aug 7 06:00:37 2025 GMT
Subject: CN=55bdb60e3b0d0e69073a7f32464314cef24179ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:18:41:78:40:8f:8c:77:1e:58:4e:6f:b0:
28:e0:64:36:60:9c:a2:22:0f:be:8d:11:52:e0:5f:
df:db:6b:0b:97:bb:2b:9d:65:22:7b:c9:12:02:b7:
19:34:86:34:62:59:e2:fa:87:9a:69:01:9b:96:12:
36:65:c5:f5:69:aa:02:34:13:67:2d:43:be:e3:4b:
70:73:70:2b:0f:a2:e3:ab:1e:54:10:de:14:4e:ee:
9e:ac:b7:7a:e3:c4:1b:1e:55:0e:cd:09:74:38:ea:
27:ca:d3:18:ea:31:1c:65:c5:f2:25:ae:9f:a5:07:
6f:19:6b:78:b5:ca:d4:95:b8:13:eb:64:5a:e9:4f:
6b:e6:00:92:17:ed:c4:45:c9:cf:09:fd:27:fa:43:
28:a7:66:c2:16:b9:fe:5f:57:df:e9:be:88:9a:5d:
9a:ad:5b:da:46:ac:e0:b2:36:82:e7:87:72:e2:4b:
a3:a8:f1:d0:f4:60:8f:80:a4:5a:6a:4e:bf:f9:08:
99:d5:49:61:02:91:d2:02:46:ce:ee:7f:23:1f:c6:
fe:d2:2a:3e:cf:28:25:19:35:46:66:ae:54:99:58:
c1:b0:5e:3c:be:86:29:97:f6:2d:f3:18:81:2f:e4:
d6:ed:22:56:ec:f2:51:b0:c6:89:60:93:2c:31:0a:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BD:B6:0E:3B:0D:0E:69:07:3A:7F:32:46:43:14:CE:F2:41:79:AC
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fe:3e:8d:6a:1f:47:00:ed:24:03:57:da:cd:9d:3e:db:88:
92:b3:dc:14:be:fa:71:74:a9:fa:00:76:88:3b:74:e5:72:5a:
da:2b:19:9e:16:3b:84:33:85:ae:53:a6:8c:7b:41:19:e4:d4:
bb:ce:bf:ea:11:d2:b2:84:e6:5f:90:fa:77:3d:d2:b4:5a:78:
5d:2f:a9:a2:7c:95:74:64:63:81:e2:26:e7:fa:48:71:23:55:
56:73:a3:26:a5:31:5c:99:d6:84:98:ad:ac:d2:bb:16:a9:cb:
c0:cc:49:13:14:38:e3:82:25:06:a0:9b:bc:03:3c:c7:4a:20:
b2:30:3a:86:ed:4b:72:c8:56:58:53:86:2e:5a:02:ee:45:b5:
d1:ca:9a:91:57:0a:9d:f8:4c:5d:56:ea:e1:ce:c8:30:42:8d:
2f:47:3a:d1:df:49:be:9f:b0:e6:18:99:bd:b5:ca:33:96:ee:
da:4a:16:62:a5:40:3e:8e:f5:9b:20:07:aa:87:fa:28:56:ed:
07:04:1f:40:98:d0:c0:16:8f:b2:b5:fd:8d:44:ba:16:0a:89:
82:07:20:77:cc:e9:5b:f1:d4:73:55:fd:bb:b7:77:c5:48:6c:
a9:31:ee:6d:56:a9:6c:f4:12:20:69:32:d2:67:5c:57:c8:c7:
f6:2b:99:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:16:08 2025 by rpki-client