Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: cTvgX+2N35i2p3MdYuKY8f0DOqiJL900jo/FBjHe95c=
Subject key identifier: 81:10:78:13:4D:EE:29:C7:06:CB:D9:D6:85:D1:D4:85:57:70:E6:C7
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 0198D54E22D195A4FF598E90C0EACD2480A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 05:02:04 +0000
Manifest this update: Sat 23 Aug 2025 05:02:04 +0000
Manifest next update: Sun 24 Aug 2025 05:02:04 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: YFqvQgjt0dpx+OLkilam1i5zat1FQtUiHqNctpq5MHM=)
2: 8weSLoMuWV3usouK6kCYa4DYS08.roa (hash: 7ICkBxIDMmpq8Ld9uPPV7RzwfZWRVUlPiTj2akXnPTs=)
3: g0yMZ7il9emhd1JLy44dXjFFySY.roa (hash: upEcQV7OguWVHmW7d8FqJOmDo+LgE3TCsH4ZkA5EIG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:22:d1:95:a4:ff:59:8e:90:c0:ea:cd:24:80:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: Aug 23 05:02:04 2025 GMT
Not After : Aug 24 05:02:04 2025 GMT
Subject: CN=811078134dee29c706cbd9d685d1d4855770e6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7d:0c:9b:36:b7:b3:f7:27:8d:64:ba:ce:cf:
87:47:32:65:61:de:50:6a:c9:5f:fb:77:dd:47:47:
51:f5:e2:31:dd:c5:b4:4f:de:f4:1a:47:fb:1d:62:
0d:9f:3d:49:b7:50:da:06:67:db:c0:5f:26:2f:10:
49:b5:8f:43:b8:d3:d2:99:6a:3d:f2:da:f1:d5:80:
22:1a:dd:e0:e3:a8:9a:ad:03:4d:94:eb:df:3e:89:
b8:96:15:e4:54:d4:7a:46:23:6c:b2:9c:0f:b6:5e:
e0:9b:d2:c1:70:15:41:9a:a2:dd:fa:2c:5d:27:e8:
8f:ea:55:10:f2:f3:3e:76:4b:89:bb:89:a2:25:05:
0b:f7:3a:02:f3:24:44:fd:c4:e8:3e:70:bf:5e:3e:
dc:b3:5c:95:43:26:7a:33:e3:79:0b:cf:b8:32:2f:
36:8d:23:f7:df:50:6c:dd:21:fb:a0:40:fd:6d:ae:
07:d8:2e:9d:a0:ff:55:8f:b1:51:75:02:9f:3c:f3:
07:0d:24:93:8a:ff:c1:9a:5c:13:f3:84:7f:2c:16:
1b:fe:bb:d1:c2:77:d1:24:16:6a:d1:93:93:05:65:
c7:9a:33:c1:4e:8b:ab:38:83:0e:31:95:8a:6f:5b:
ad:be:7a:dc:9c:fd:02:40:c9:95:45:a7:40:f1:2f:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:10:78:13:4D:EE:29:C7:06:CB:D9:D6:85:D1:D4:85:57:70:E6:C7
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:66:56:06:f0:66:7a:27:a7:76:f9:c7:18:d5:f2:8f:de:67:
07:51:a0:98:da:5e:dc:8f:b4:d7:a6:0b:75:08:ee:18:d3:ad:
9c:34:f6:93:af:40:34:a6:eb:04:5c:56:fc:cc:35:31:b4:44:
b4:e2:2d:1a:f5:70:1a:08:38:99:80:ed:eb:58:e4:54:1b:a1:
10:a4:44:19:c4:6f:d8:8c:90:3d:1e:3b:cf:e6:0f:80:92:25:
9b:e0:12:26:a6:1a:55:61:a1:ec:a1:53:9a:28:3e:25:84:01:
93:f5:cd:41:6d:3a:b4:cd:54:c5:3e:4d:40:6a:ab:62:5e:c7:
d7:57:6a:b0:8d:3f:bd:48:5b:09:4d:dd:b8:a4:e7:ce:1e:85:
3f:86:36:26:c9:88:07:b9:aa:fe:c7:37:65:80:07:2d:eb:a5:
ff:d5:84:ba:cc:da:ea:8f:ca:8b:20:ad:33:2b:cf:68:ad:03:
1d:83:49:6b:37:b1:0a:75:4b:f2:f0:57:1c:44:07:3f:5b:ae:
6a:47:0b:53:ad:79:12:82:9f:89:99:c2:df:8d:3d:ed:1a:04:
6f:ce:55:5a:45:32:54:40:65:41:eb:7b:37:03:87:4a:d6:c9:
aa:41:1b:7c:08:39:0a:9e:c6:23:53:48:08:76:c2:67:fa:7f:
30:ff:57:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:48 2025 by rpki-client