Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: DJRjmv6NGEqv/7IhQ0oN49PP51UMa3nBEDlAFaW5YMk=
Subject key identifier: 8C:5C:3D:D3:F5:EA:29:8E:59:92:1A:54:49:BF:90:57:A0:B9:97:BF
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 01987306ACE31BAC131B98CC9828C10441E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 1157
Signing time: Mon 04 Aug 2025 03:01:13 +0000
Manifest this update: Mon 04 Aug 2025 03:01:13 +0000
Manifest next update: Tue 05 Aug 2025 03:01:13 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: L7BLZ9C8/8HIf78RCP/YzET43kN5QrAM+Cv98wWNxA8=)
2: _Sn3RhfY--fiVliyrSpcw_Dpx8U.roa (hash: 0DlsX3tbgemelzimR5EC4gu2Xnu0fF/hzb1n4QMYZI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:ac:e3:1b:ac:13:1b:98:cc:98:28:c1:04:41:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Aug 4 03:01:13 2025 GMT
Not After : Aug 5 03:01:13 2025 GMT
Subject: CN=8c5c3dd3f5ea298e59921a5449bf9057a0b997bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:11:70:16:2b:ac:58:74:ea:ed:f3:12:cc:
b4:87:4c:d1:ba:ca:1f:93:e9:69:d7:c7:52:57:05:
c1:e1:df:8f:83:9f:98:66:c9:8f:f1:ae:aa:88:6f:
ee:4d:c0:2c:d8:b4:08:0c:5a:0e:9a:21:b1:de:6f:
d3:55:96:50:64:28:5e:01:d6:09:79:09:16:c2:2f:
55:ee:85:9c:4f:90:67:d5:e0:ef:24:8d:87:a9:5b:
0a:3a:2d:f6:4c:07:98:79:10:ab:fa:a6:ef:6d:64:
1a:d9:c0:14:07:1b:5c:30:ad:b0:fc:ea:7c:82:54:
c8:05:00:99:35:9b:60:58:ae:45:79:fe:e3:39:2b:
af:4d:27:ab:e6:a1:b0:f2:0b:5a:0e:93:27:37:db:
55:85:9a:d4:84:c0:9b:6f:6d:57:80:e8:09:18:62:
de:0a:de:b3:0e:1c:be:06:c9:d4:a7:e3:f5:85:10:
97:a4:c1:71:00:7f:7a:ba:4a:27:1d:ed:74:2f:0f:
0d:24:92:14:d7:ad:86:0a:26:59:28:94:09:28:c3:
ea:8b:29:24:f0:27:53:1d:94:74:b8:49:4f:8a:5b:
51:37:4a:0e:7d:4c:66:c3:6b:41:46:d5:79:c0:62:
b3:7b:aa:ba:d5:ed:a6:8f:9f:35:1d:be:9b:5a:4c:
b8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5C:3D:D3:F5:EA:29:8E:59:92:1A:54:49:BF:90:57:A0:B9:97:BF
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5b:01:73:4f:aa:c1:f5:46:36:ec:ca:68:f6:22:41:df:84:
32:3a:97:29:60:a0:2c:77:90:04:3f:7e:91:b7:ea:bd:ac:a8:
6d:32:6c:fa:a7:cc:8f:72:5b:a5:3e:82:14:79:ab:8e:0e:4e:
00:34:3a:3a:7b:06:11:56:ac:9a:df:f1:c2:01:ce:08:7e:a5:
45:e0:2e:14:ed:05:b4:fe:90:cc:00:03:78:34:d2:89:57:85:
33:b5:2f:0e:e6:70:60:6f:19:04:a4:c8:4a:d1:c9:d6:3f:90:
0d:6c:2a:40:d5:71:66:c6:d1:87:6f:45:18:34:90:9a:2d:6f:
33:5d:12:85:c7:6b:38:12:1e:73:be:af:9d:3a:2c:d1:42:2d:
da:01:9d:66:c8:1d:ba:78:f7:b4:f3:cc:f8:4d:e3:6d:b1:83:
4a:be:d7:d9:0b:f2:ac:cc:f7:c3:da:e2:08:ae:4b:87:f7:b7:
47:77:30:bf:83:38:72:01:ce:8b:96:a9:e4:53:2c:6b:0a:0d:
1a:62:62:6e:ae:ae:01:c2:e6:d4:b2:fa:01:8b:04:26:02:89:
6d:08:ac:77:a1:76:c6:4e:c1:9d:70:c9:da:e1:bf:66:59:ee:
71:e2:21:09:81:2c:11:53:5a:67:9b:05:4d:c7:96:e1:13:bf:
73:36:17:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:42 2025 by rpki-client