Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
File: 3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json)
Hash identifier: +d4zx8nlpDO8HfnACbVlw13CyOgstnhcek71nhN+C8Q=
Subject key identifier: 93:87:46:01:70:70:24:F9:5D:67:52:BB:BE:6B:1D:F8:07:49:80:CF
Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
Certificate issuer: /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Certificate serial: 019890358F6F1C57626DB69723A1F230DCEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
Manifest number: 1060
Signing time: Sat 09 Aug 2025 19:01:25 +0000
Manifest this update: Sat 09 Aug 2025 19:01:25 +0000
Manifest next update: Sun 10 Aug 2025 19:01:25 +0000
Files and hashes: 1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: R/Wi5bkcLbXNb8DI4Z2ca7or8GdrPxcCMr7Ol1zq0NI=)
2: AuGSVrNkGgUtthLzU1YbunCRJmA.roa (hash: N+p3SVnY5s1RjPh5Td733eJn6W460syQCiw/MVZ+pqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:35:8f:6f:1c:57:62:6d:b6:97:23:a1:f2:30:dc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Validity
Not Before: Aug 9 19:01:25 2025 GMT
Not After : Aug 10 19:01:25 2025 GMT
Subject: CN=93874601707024f95d6752bbbe6b1df8074980cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:20:87:25:a7:06:76:a9:fa:9f:bd:55:7f:
11:41:8c:64:72:e8:1d:ee:56:e8:22:af:6b:64:53:
97:cc:93:b2:d0:bc:e9:59:2e:47:cc:27:b8:da:f1:
92:78:ce:30:ea:b3:da:12:7c:13:72:e8:7d:b8:76:
af:29:63:20:29:49:d9:ca:37:43:fe:69:e3:fc:f3:
55:72:23:f7:be:e0:ac:a8:65:af:49:a5:e3:e7:ce:
58:f2:8b:f7:6a:5f:d8:44:b8:6e:fc:be:fd:53:07:
1d:ce:ba:08:1b:14:0c:45:ea:14:bc:fa:4d:cd:d9:
a8:d6:12:99:37:c3:2d:89:98:55:36:ff:f6:ca:2a:
bf:4f:27:a4:da:b7:28:93:cc:c1:06:9a:cb:23:b9:
3b:4b:50:5b:21:c9:64:0a:10:34:16:d3:6b:2a:14:
43:30:ba:fb:1c:f8:ca:1c:89:9e:fb:81:5d:12:72:
49:1c:09:16:9d:d2:b1:ee:09:0a:f0:cd:b0:cd:04:
c8:6e:69:be:c6:bf:84:3e:b7:3f:33:cc:e4:c6:35:
fb:ad:2a:26:d7:12:df:9c:07:06:58:8c:3f:77:f4:
fe:1b:be:0a:90:cc:07:48:44:2e:c5:5c:c5:42:f5:
88:66:b1:d6:54:08:61:a7:86:bf:88:67:b0:12:60:
fe:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:87:46:01:70:70:24:F9:5D:67:52:BB:BE:6B:1D:F8:07:49:80:CF
X509v3 Authority Key Identifier:
keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:06:76:16:58:98:a7:d6:b5:c3:ed:6f:04:07:2a:e1:59:93:
fc:68:62:eb:ff:96:c0:8d:04:5f:5d:31:69:a9:5a:47:cd:c1:
f5:2f:01:16:02:f6:8e:b5:aa:5d:cb:02:94:2e:35:fa:05:a7:
c1:7b:50:8e:ee:9a:c5:14:76:fe:ab:7b:38:66:ee:e1:34:21:
a3:85:42:d8:37:01:01:3d:ee:66:b8:20:27:9c:6e:a2:4c:98:
f5:0f:f8:1a:72:2f:0d:f1:57:c1:a9:0b:d0:ef:0b:34:fb:34:
52:ca:0b:1c:40:f5:72:1b:c3:05:c2:28:66:07:23:69:2c:91:
5d:4a:65:6e:0d:6d:8a:d4:28:bf:68:63:de:e9:a1:a0:9a:2e:
e8:3b:63:a1:f4:c6:c1:e2:35:4e:94:57:f7:19:47:61:5a:6b:
80:44:64:92:46:70:78:fc:3d:3c:f2:7c:92:5b:76:d1:9d:a9:
6e:09:24:09:a6:6d:35:ee:60:88:0b:55:45:91:27:bc:a5:c3:
19:be:42:04:2b:86:72:d0:ce:3f:ef:71:66:e9:67:83:19:c3:
24:b1:c0:d4:64:24:19:72:10:82:4e:1f:bc:b2:35:ce:0c:32:
6b:be:67:99:ba:ab:53:a1:a5:79:87:fa:aa:ad:e0:65:da:f9:
06:98:be:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:28:50 2025 by rpki-client