Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
File: 3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json)
Hash identifier: 1n+pEDnk88iD9miVm/nhihekVZfUa4vshvanfJ796CQ=
Subject key identifier: 95:F5:B1:7C:36:70:A0:2F:56:98:F7:48:1F:B6:96:65:71:45:44:D6
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 01988FFE9BB3645FD17E62D1DA66231CD882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
Manifest number: 058D
Signing time: Sat 09 Aug 2025 18:01:24 +0000
Manifest this update: Sat 09 Aug 2025 18:01:24 +0000
Manifest next update: Sun 10 Aug 2025 18:01:24 +0000
Files and hashes: 1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: M6Jfsu8X30WDXnJH+ugFOHJ8Y0zprmeHS5Kj6zbhiBo=)
2: S2et9u3-k4c1RbSQYpZyfZKneKE.roa (hash: Ha/+fD6TOAGH3fDS11rGJPIxFiX3z4IR9RxVgbeKPDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:9b:b3:64:5f:d1:7e:62:d1:da:66:23:1c:d8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: Aug 9 18:01:24 2025 GMT
Not After : Aug 10 18:01:24 2025 GMT
Subject: CN=95f5b17c3670a02f5698f7481fb69665714544d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:81:b6:2f:14:8c:8e:6d:d6:e6:ee:d4:af:
16:62:53:03:9f:be:96:fe:73:36:e8:5a:32:02:c7:
48:66:f6:1b:f7:38:07:18:9d:b3:20:24:81:b2:5f:
46:39:c3:9b:d3:6d:80:c2:f1:ff:84:93:95:43:02:
e4:31:83:f7:77:01:b0:52:40:f7:8e:17:82:cb:0b:
d1:18:1f:0a:12:bf:df:48:99:da:95:0a:b4:86:d2:
29:08:43:4c:26:11:3c:19:3a:5f:a3:f8:68:de:59:
4a:66:70:df:93:59:0a:f3:4d:b4:a8:a4:a9:a6:c0:
62:06:a8:35:c2:26:e1:4d:0c:04:b5:e5:e6:4c:d7:
27:56:90:fb:a3:fe:53:cf:d3:cd:18:cc:43:b6:1f:
ea:54:1b:1b:92:52:56:f7:54:91:d2:a8:0d:2b:25:
9c:33:a7:a8:c4:7c:e4:29:6f:bb:60:06:aa:0a:19:
3c:43:a0:d7:37:77:de:8d:8e:78:e3:35:69:86:66:
e9:02:69:72:03:c8:7b:8a:d6:82:62:9c:29:b4:d8:
8f:fd:aa:11:76:16:f8:e6:ff:48:72:86:cc:dc:3a:
46:76:bb:6b:53:3a:05:ab:9d:4b:71:67:78:be:ce:
65:08:1a:fd:79:fd:73:b1:15:da:c1:57:da:93:4a:
5a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F5:B1:7C:36:70:A0:2F:56:98:F7:48:1F:B6:96:65:71:45:44:D6
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b1:53:ed:8b:8b:3b:12:06:a3:c9:ab:b7:78:a5:cd:92:ee:
3d:e7:9b:e0:28:7f:2b:bd:6e:ef:3d:2c:32:e6:82:d8:6e:13:
94:ce:a6:a9:ff:f7:a7:6b:fb:ed:d7:39:61:64:cf:6c:63:c7:
09:3a:fd:57:cc:b8:4a:98:40:fc:82:a9:64:c0:dc:d6:59:1c:
53:8a:f9:ec:82:fd:2c:99:eb:ef:0d:1f:bc:2d:09:3b:0c:10:
f1:31:df:a7:bd:fe:e9:03:49:62:a4:c0:09:63:4a:00:b7:96:
a7:97:c1:c0:da:ea:8e:a5:3e:89:59:91:91:3c:34:58:b2:ee:
ce:4b:91:cf:8f:28:8b:c3:bf:54:54:dc:ec:3d:eb:29:2f:e0:
ba:5c:87:a6:20:63:00:5d:7d:68:6e:60:3d:02:1f:60:bf:6e:
55:8c:41:4c:62:85:66:69:39:15:87:7c:1f:4d:41:d2:c1:59:
c0:5a:3f:33:c4:13:e5:a9:5a:b9:51:a6:ec:1a:b5:09:63:6d:
e2:1a:fb:46:7a:fe:b1:e6:db:1c:c5:87:68:d6:20:6b:63:dd:
da:6a:2a:e4:4c:4e:5d:ef:85:cf:55:9c:9a:6a:b0:1c:6e:c2:
53:8c:7e:86:b8:96:d0:9e:09:85:57:ba:a1:8e:54:38:da:17:
1e:a5:32:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:20:37 2025 by rpki-client