Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
File: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json)
Hash identifier: ho9q6S8ZEm45jmak2bfGVOJNsDTw4EMQwLWkaZ5/gR0=
Subject key identifier: AD:21:95:8D:F7:18:21:1A:1A:2A:C9:02:43:1F:E9:53:99:C0:C6:D7
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial: 01989D82ED0C8D67F297FABFE067D3652C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
Manifest number: 0C88
Signing time: Tue 12 Aug 2025 09:00:59 +0000
Manifest this update: Tue 12 Aug 2025 09:00:59 +0000
Manifest next update: Wed 13 Aug 2025 09:00:59 +0000
Files and hashes: 1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: xe93Au7P8OW0tbGWj3U0dQPin8SM3sc5ngQ7fcXPhoM=)
2: bJQvsBvbQPoYZP2_LHbwvNkWsqI.roa (hash: 6bSavq+Amxtx/G0AW8vYM/flHBEJUHj3DU6R3v4xOug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:82:ed:0c:8d:67:f2:97:fa:bf:e0:67:d3:65:2c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Validity
Not Before: Aug 12 09:00:59 2025 GMT
Not After : Aug 13 09:00:59 2025 GMT
Subject: CN=ad21958df718211a1a2ac902431fe95399c0c6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:81:74:34:84:f5:df:5a:ae:ff:21:52:9d:
cf:a4:de:ac:84:87:83:be:1a:d7:f6:09:00:21:a0:
c6:0b:d1:ef:05:d9:13:de:9c:d5:8d:b5:00:b5:ee:
f2:61:0f:00:c5:dc:ac:82:8a:6c:8b:a7:16:97:2d:
11:2d:c3:df:fb:04:8e:df:b0:aa:39:38:7d:4a:6d:
46:cd:d7:f9:c4:09:e0:21:c4:f8:59:ea:7b:f8:49:
56:09:77:86:b2:2b:e6:01:d1:5f:45:e0:31:ea:ee:
1a:bd:bb:aa:3a:17:42:77:c4:cd:95:5c:b5:a7:18:
40:db:3c:49:f1:40:cf:de:f9:04:ae:82:25:fb:7a:
13:25:79:9a:1a:29:ea:be:b6:55:fb:4c:3e:66:fa:
73:a4:d7:c3:a6:e2:5d:e7:76:ce:d8:1f:96:6a:f5:
de:79:17:ec:19:07:07:2f:2f:b2:53:49:45:7a:fc:
36:b0:31:7f:36:c9:db:db:16:c7:77:65:7b:8e:f8:
44:b9:17:d2:f5:48:28:4a:dd:6d:00:e3:94:00:43:
51:e3:4c:f2:f8:a7:46:77:f2:00:ab:85:46:2d:6d:
c7:6d:55:49:c0:85:ca:12:4a:39:1d:9b:17:ea:e9:
97:30:a9:2a:d3:bd:f8:62:a5:ca:0b:10:e2:17:53:
af:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:21:95:8D:F7:18:21:1A:1A:2A:C9:02:43:1F:E9:53:99:C0:C6:D7
X509v3 Authority Key Identifier:
keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ac:92:9d:d2:51:c0:df:ac:86:10:2e:9f:14:2c:a2:d7:c3:
31:cf:6c:6c:e9:c1:89:cb:58:2e:34:3a:79:bf:61:a7:53:fd:
f4:92:21:19:27:fb:e8:e8:48:03:48:bc:22:a1:9b:b8:99:a6:
b2:94:59:d3:35:79:b3:a1:dd:03:6f:9c:b0:a9:2e:59:cd:58:
9e:7c:43:bb:90:92:97:14:27:7d:ad:11:c2:7c:f7:40:a2:15:
0b:3b:3f:e2:8e:09:0d:a1:53:db:86:bc:73:f5:93:37:72:7b:
f4:0d:99:9a:52:98:89:9b:9e:e7:da:6b:a5:60:2a:af:ef:35:
8e:8d:53:3b:34:50:91:84:c8:8b:0d:fb:44:d1:e8:82:e1:11:
1a:24:b4:bc:eb:13:e6:3e:b9:24:b9:82:8e:ff:2f:57:a5:f1:
31:f8:a9:ee:6f:7c:77:ad:dd:80:56:a5:1d:5f:62:19:0d:dc:
48:44:7c:0d:4a:21:84:bd:9b:f5:79:47:6b:83:55:6a:eb:cf:
42:40:9f:b0:4c:4a:0a:7d:6c:66:01:41:c6:c1:bc:81:96:99:
e4:9b:1c:fd:af:54:e1:52:79:aa:2b:af:e4:5b:a7:c7:90:50:
0a:cc:76:bb:75:54:b0:88:31:7b:75:20:07:76:c7:61:04:bf:
f8:c7:e3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:37 2025 by rpki-client