Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: PYLHi3tA+ArXxIBno8b63KSnGs/VhmuYFm0CrH+gW6g=
Subject key identifier: 68:AE:68:6B:BF:D0:AB:ED:A8:B3:7E:F6:D9:E7:12:71:9A:F1:03:8E
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 01989110C81F5C478752A6D4F61CB8A4721E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 162B
Signing time: Sat 09 Aug 2025 23:00:52 +0000
Manifest this update: Sat 09 Aug 2025 23:00:52 +0000
Manifest next update: Sun 10 Aug 2025 23:00:52 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: Fexmj50nwpbLyLM4oURZGyDth9yurgUrl06ye3enjX8=)
2: CgFc8x26QM3VY1KiLgccdsxhrXo.roa (hash: P9EWdQX/EOCp7WZ5gfsQmoM4qU0udbuMuOqDFw597IY=)
3: RonOUjE1P34U6vbbFs9w9AsGyN0.roa (hash: fOrx68LqSTvTWV0sMnHRK4WODfXfA787GTb+IyVk3b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:10:c8:1f:5c:47:87:52:a6:d4:f6:1c:b8:a4:72:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Aug 9 23:00:52 2025 GMT
Not After : Aug 10 23:00:52 2025 GMT
Subject: CN=68ae686bbfd0abeda8b37ef6d9e712719af1038e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:5e:f3:fe:a2:16:29:60:31:af:26:1f:c3:
ae:2b:72:d1:aa:23:98:7e:a9:a2:b8:63:73:5b:30:
29:ab:ab:24:11:3b:65:6e:45:92:a9:7e:60:78:e0:
94:45:77:e2:3f:10:62:81:23:72:63:4e:14:cf:d7:
ca:1d:96:38:9d:8c:6c:7b:8d:0b:a9:17:0a:ec:92:
2d:63:50:6c:8c:30:d7:6a:0c:44:95:44:aa:12:14:
44:eb:54:b9:ef:66:2a:3e:50:f2:a7:83:61:ed:2e:
65:af:97:0a:54:1d:fd:26:26:23:4a:17:7a:f5:36:
5b:21:03:44:96:36:43:55:c8:c5:70:ff:c9:f3:34:
a0:24:c2:7a:54:86:17:70:c1:f0:6b:87:f0:f5:c2:
9b:6d:46:51:43:a3:c1:dc:6d:e5:c8:77:5d:47:8c:
75:54:7f:8a:f2:79:9d:68:3d:c0:c8:ad:0f:df:25:
03:a1:bf:c9:11:50:b1:8e:94:c1:be:a5:f7:0c:3f:
e6:4d:28:51:52:d5:40:3e:69:5c:22:47:0a:10:c5:
40:88:5d:78:c3:17:30:9a:1f:d8:9e:4f:44:3f:c3:
d3:4f:ed:c2:6a:5e:e0:58:fd:0e:7f:b3:6c:15:d5:
39:ed:99:d2:6b:68:4b:f4:a2:84:f5:1e:4e:3c:af:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AE:68:6B:BF:D0:AB:ED:A8:B3:7E:F6:D9:E7:12:71:9A:F1:03:8E
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7d:10:29:82:a9:73:21:ec:3f:f1:36:27:9c:b9:c5:30:30:
87:b3:62:0b:41:9b:f8:22:b2:6e:75:92:d4:78:09:50:ce:cf:
88:f3:5c:33:bd:31:a2:07:b1:92:9e:52:a6:92:72:01:2c:35:
55:4c:c2:cc:76:05:57:c1:c2:f8:17:aa:39:32:1d:08:d3:e7:
4b:0d:ea:75:cf:70:39:6c:2a:20:28:d6:83:d7:35:4b:3e:9a:
c2:57:68:81:ac:fb:33:dc:08:dd:74:da:02:4e:82:6d:be:b2:
5e:93:fd:b7:cb:00:13:49:29:15:5d:14:20:8c:51:f4:06:5b:
21:51:58:57:2d:64:79:90:cb:fc:80:a3:30:90:b6:ea:58:77:
af:a2:b3:2f:ba:ee:d6:28:73:f2:24:4f:2a:94:9c:54:a5:a0:
98:75:fd:72:88:d8:cf:2e:9f:d5:22:c4:e3:57:21:75:c5:f8:
d5:08:3f:40:1f:b7:0f:fd:d5:0b:f8:47:ba:b4:29:bc:5b:da:
16:bc:ab:6a:ae:83:43:9a:63:77:4b:8e:96:23:87:22:03:da:
ea:bf:30:2d:5b:08:a8:99:13:95:67:e3:76:a7:52:ee:ab:31:
2a:8f:5e:d4:cd:ab:a6:0e:d0:4f:54:74:49:34:a9:1a:16:4c:
c2:94:9a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:15:27 2025 by rpki-client