Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: pbeTYudCiJXlWxRfJA60jQ1SnViaNJ9CbGJyRQgTpt8=
Subject key identifier: 31:41:E6:B9:CB:5D:E0:AE:5D:39:5A:2F:95:AF:23:BC:65:D7:54:69
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 01987D89F741FE799D8CF9B9CE4680B2F3C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 0D4C
Signing time: Wed 06 Aug 2025 04:00:50 +0000
Manifest this update: Wed 06 Aug 2025 04:00:50 +0000
Manifest next update: Thu 07 Aug 2025 04:00:50 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: iuDWsPmTOpjhvytpK3TCCVcTefQC9+NHaeHOWBHG6JA=)
2: pKu7UglcJmA-j3iLVLdtywNO9BE.roa (hash: Zkb8HbwY2s1iIMkolnog2EvROcriM2gwSI0ajYjdw4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:f7:41:fe:79:9d:8c:f9:b9:ce:46:80:b2:f3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Aug 6 04:00:50 2025 GMT
Not After : Aug 7 04:00:50 2025 GMT
Subject: CN=3141e6b9cb5de0ae5d395a2f95af23bc65d75469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3d:19:5e:64:7d:d8:0b:e0:a6:12:48:c1:0d:
a4:91:97:78:fa:4f:90:06:36:6a:f6:02:73:85:3c:
2a:aa:04:75:35:e5:b6:f0:02:ab:17:78:79:cd:7f:
3b:d3:b1:25:75:dd:99:51:6e:1d:d5:6c:e3:16:d0:
8c:16:fd:55:5c:8b:3c:0a:08:8c:d7:fd:52:ef:44:
72:62:23:88:89:54:63:3d:7c:58:70:3c:e7:50:ad:
fa:c8:b1:c2:73:7a:f8:e3:64:79:ea:ab:af:de:87:
c7:d1:f1:8b:89:c5:59:f6:2a:ba:b1:c0:55:c7:b5:
85:60:00:c2:45:ff:50:ca:84:ec:07:68:f2:20:cc:
5c:10:e1:0a:04:fa:98:2d:4a:3c:3b:7c:c9:70:10:
f2:22:94:ec:e7:ef:00:e4:f6:74:ac:1a:e5:a4:3b:
66:c0:a7:b5:da:a2:fb:aa:48:64:a5:7c:58:63:50:
90:77:77:1a:49:eb:b5:6f:bb:b9:a9:35:91:80:8c:
a4:db:da:3d:4e:22:72:c2:38:63:83:d4:51:fb:d3:
64:8e:86:a9:3d:3e:af:5e:56:87:fb:a3:ee:ba:10:
5c:82:97:3e:ff:e0:a9:22:a1:47:60:ce:fb:db:55:
68:69:8f:c5:5d:8c:63:9c:ca:bb:e2:2f:24:55:3b:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:41:E6:B9:CB:5D:E0:AE:5D:39:5A:2F:95:AF:23:BC:65:D7:54:69
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:68:2b:36:5e:46:b1:20:9c:90:63:89:a2:55:e7:3d:53:66:
3c:58:73:02:d7:29:9a:70:45:a7:7b:56:76:52:d2:9c:c2:b9:
43:b8:cb:28:72:0f:8b:93:4a:ca:46:48:7f:ec:74:0b:1c:8f:
ca:a3:5a:b7:f3:d7:55:b5:32:75:9d:65:2f:98:71:3b:0c:4f:
33:5a:b2:aa:70:1c:bb:f7:70:be:d6:38:38:05:04:19:04:e5:
c2:f3:d7:a3:5c:b2:52:96:53:67:f2:e4:1b:25:d9:37:2e:82:
a9:e4:29:7f:d7:23:f8:b2:3a:f7:5c:8e:78:c4:0d:67:50:93:
28:ba:38:9c:fe:50:04:49:dc:8c:f2:15:83:34:32:c4:d2:12:
9d:6a:9c:40:74:88:a4:b2:ce:9d:8c:b8:8c:3f:fc:28:07:aa:
bb:86:01:b7:52:ff:eb:51:c3:57:70:a2:08:e6:33:54:54:c1:
1a:25:68:20:7d:88:31:1c:23:ac:72:9e:60:d8:66:31:df:d4:
32:be:35:fd:2e:e3:93:92:d4:1f:56:93:af:d6:17:d7:06:b6:
ba:4d:71:da:95:ff:02:24:ec:80:9a:42:0a:c9:16:30:89:48:
20:1c:d4:83:7f:e3:ba:36:90:f5:f9:37:27:4f:1a:67:34:6b:
3f:a0:d3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:21:57 2025 by rpki-client