Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: jiHBsBGY3eRLm0VewOO468jSVw/Rz5fWaH1vslJhfl8=
Subject key identifier: 17:41:24:38:04:AC:E3:8F:6B:D0:E4:6D:CC:91:6A:06:BF:AE:EB:85
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 01988C580D91B48CF4FD6F99853401755B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 100D
Signing time: Sat 09 Aug 2025 01:00:37 +0000
Manifest this update: Sat 09 Aug 2025 01:00:37 +0000
Manifest next update: Sun 10 Aug 2025 01:00:37 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: Ij2x8cXxBkc6LGFy0ODSzyXtz5x0xUgF66yQLa91mJI=)
2: 3UIDKEFXJEmxMbGydMkXkbNNCTY.roa (hash: pgCRcX9iheRr/OCGNJKjSelNy2YviytvLV7qgkrg4cw=)
3: 63KLq4xWCCCiZXA-wVIdQJ4PdKc.roa (hash: WWbZVpPXaQ4lgKGhfzlX90xgl3LD+KyLy9eYy0r99WI=)
4: DED9vt3vinq5uo7W8xf1qKgQoDQ.roa (hash: 4ofAOFKN04CoU+Upz0jkwmu0l7yf9aj6OLtWjSx3Wtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:0d:91:b4:8c:f4:fd:6f:99:85:34:01:75:5b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Aug 9 01:00:37 2025 GMT
Not After : Aug 10 01:00:37 2025 GMT
Subject: CN=1741243804ace38f6bd0e46dcc916a06bfaeeb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:5d:0a:15:8d:b1:97:d2:34:c1:85:60:a5:
1d:a7:73:0a:69:48:bd:4b:18:5b:d2:cd:e7:01:83:
53:a9:b1:88:9c:54:a1:9b:68:d8:91:68:8c:7b:0c:
62:f5:32:7a:8d:2e:db:a3:1b:df:63:1e:ed:67:6f:
be:b2:b5:2c:4f:45:bb:59:9d:15:89:51:58:28:89:
83:9e:21:77:18:76:5e:29:03:f3:60:85:b2:5e:ab:
58:40:d1:b7:dd:04:65:94:42:c7:07:e7:4b:41:85:
03:9b:f8:e4:9f:e2:b3:f7:ed:4d:73:76:e3:12:f9:
47:ba:c3:ee:24:7b:0a:c2:43:9e:01:4a:f4:1b:0d:
0e:be:88:fb:76:25:f7:9f:42:e3:07:95:dd:0d:bb:
8c:da:ef:3d:6d:a4:d9:fd:51:3d:8c:b5:ea:89:8d:
3b:79:5f:42:be:84:2a:e1:44:5a:b5:a7:8e:1c:7f:
77:ab:97:5b:17:64:54:64:58:00:03:b3:30:bb:9b:
e0:72:fa:7e:b7:1e:f4:bb:9f:f9:b0:dd:04:50:8c:
6e:6f:65:28:9c:93:a6:56:7d:59:f5:a3:8c:54:a5:
cd:c7:ef:cf:db:6d:7c:94:d0:3a:03:39:3d:33:e8:
e6:a7:8e:64:a3:58:50:d7:2f:cd:46:8c:b4:16:28:
3b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:41:24:38:04:AC:E3:8F:6B:D0:E4:6D:CC:91:6A:06:BF:AE:EB:85
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:df:66:5d:a7:63:3d:e8:80:26:cd:84:16:10:01:fe:47:54:
49:39:32:f6:c2:b4:ab:48:05:00:63:11:ce:f4:0e:03:fb:93:
4d:ca:46:d3:34:cd:8e:a8:88:56:98:a7:2a:b3:01:6f:b2:a1:
6b:99:29:5e:bc:7f:cc:2a:58:9a:b0:d0:41:75:93:47:e0:14:
b8:c2:24:d2:d7:2a:cb:f4:0f:f6:a6:f8:41:05:fe:2e:fc:7d:
62:f9:d9:b0:26:6a:0c:ed:84:c0:1b:4e:af:04:10:3c:e3:d4:
3d:95:19:68:56:a3:1d:0e:25:25:47:77:19:24:77:85:d2:5e:
da:1b:d9:50:fb:eb:15:32:7f:58:5d:9d:73:60:da:eb:e7:26:
87:b9:f3:d6:e3:e0:db:0c:40:89:7a:0e:94:d6:02:64:68:d0:
00:dc:fc:75:6e:3a:0d:92:26:36:92:21:86:8a:1b:83:e0:ec:
47:8e:e2:6b:fd:a6:f6:ce:d2:e7:f1:dc:8b:ee:54:cc:77:d7:
15:60:9b:50:21:87:e6:70:19:51:5d:36:a7:9c:94:00:ce:5f:
d9:48:0c:59:cd:c3:b0:00:f2:90:a3:be:a0:04:03:a8:92:9e:
46:f6:0d:f2:a7:6d:e0:c8:f9:3f:7b:46:ef:d4:5f:5f:b9:df:
1a:61:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:40 2025 by rpki-client