Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
File: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft (raw, json)
Hash identifier: malkqjclCYAeAQaAFMFph3qxyHO4HFtjEvRU5iW35X0=
Subject key identifier: 32:ED:62:58:50:48:01:55:9E:F5:7B:62:66:E4:E6:D8:C1:2A:1A:FA
Authority key identifier: DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
Certificate issuer: /CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Certificate serial: 0198D583CC027091AE68F9364FCDEB8F2DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:41 +0000
Manifest this update: Sat 23 Aug 2025 06:00:41 +0000
Manifest next update: Sun 24 Aug 2025 06:00:41 +0000
Files and hashes: 1: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl (hash: /rjgz7QqoK7b3X4mfWVasNvNso/OMlm2NGjwuAMgVEw=)
2: fl1IqJ22OZD_5WNed1aOqRFU-dQ.roa (hash: Kuo9lPYONUc1nk6pXtWGALeHz/jfanabaBDCbZ+GeWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:cc:02:70:91:ae:68:f9:36:4f:cd:eb:8f:2d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Validity
Not Before: Aug 23 06:00:41 2025 GMT
Not After : Aug 24 06:00:41 2025 GMT
Subject: CN=32ed6258504801559ef57b6266e4e6d8c12a1afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:10:15:72:83:6a:03:09:e5:fa:d5:4a:ea:
f1:c3:d4:a0:68:0f:f8:45:15:93:f2:9b:ff:50:56:
52:38:31:a6:c0:5c:c3:ae:81:b2:4c:b4:d0:b9:77:
a6:43:2d:36:9f:38:2c:e8:46:b8:bd:b2:be:61:09:
35:f4:d2:dc:2b:c9:a4:7a:2a:04:a0:f9:aa:bc:45:
62:94:23:31:bd:c8:03:b3:81:2e:4b:11:3d:8e:93:
dd:02:f3:3a:ae:fb:5a:5e:80:4e:43:33:a8:86:81:
cb:53:e0:22:9c:12:78:c3:99:da:52:11:a6:93:17:
c4:82:db:76:20:8d:c4:5e:f8:d2:6f:dd:5b:05:cf:
f2:fa:aa:ea:56:e9:47:10:cd:09:30:16:51:66:8d:
f8:81:62:aa:cc:bd:8b:d5:8c:19:01:88:50:f7:ed:
20:16:7d:c9:b3:f8:be:0a:10:5f:31:00:ab:80:10:
37:82:d5:b8:9e:45:f8:24:50:5f:ca:8c:fb:e1:06:
e6:ca:32:14:8f:b2:52:5f:14:24:53:fc:b2:ba:79:
11:e0:99:4d:56:ba:9f:87:a7:e9:60:37:b6:38:8c:
84:a5:dc:03:5a:30:55:3d:ba:17:e7:ca:69:d0:6a:
42:f5:c0:d6:de:52:31:e9:0a:9f:5f:9b:12:5e:02:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:ED:62:58:50:48:01:55:9E:F5:7B:62:66:E4:E6:D8:C1:2A:1A:FA
X509v3 Authority Key Identifier:
keyid:DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:e8:af:0c:b8:f2:5d:99:8b:2e:2e:82:24:4a:e2:24:f0:35:
d7:53:cc:59:73:b8:92:8f:a4:76:46:23:a0:d0:fc:0a:cb:52:
1b:9d:23:9e:9a:c2:85:ef:5a:87:43:9b:57:c6:cb:ec:1e:b7:
c1:67:e6:c6:cd:21:e7:b9:d5:ff:4a:05:b8:72:d5:37:c6:6b:
52:3c:d5:d2:75:8b:27:4e:cf:d5:95:84:b2:cd:f8:07:5b:6d:
26:f5:d7:5c:d4:06:77:2c:83:58:2b:fe:c4:72:a3:84:ac:26:
3a:2a:b8:f4:3c:09:08:8c:08:3d:54:80:d7:fe:7d:5a:ff:10:
5b:85:94:39:e4:e2:29:a4:b5:6e:62:a9:5b:24:93:76:5f:8e:
a6:8a:6c:c5:7a:47:9a:cd:b0:df:f3:3a:96:c1:97:e8:7f:4e:
59:0f:4f:0e:83:bc:1a:4d:37:83:a1:49:c9:b5:f0:55:ef:b2:
b3:ec:7c:67:0e:90:1b:a4:1d:ee:94:56:2f:25:c1:2f:71:5d:
66:0c:f2:c2:ab:ca:f6:72:86:b4:0a:7e:32:df:b3:7f:0b:97:
e3:06:a5:20:e3:de:3c:e4:9b:43:ca:15:d4:ce:07:86:c7:b3:
9f:97:6b:0e:d0:99:6a:12:fb:07:47:74:bf:0f:44:44:89:e8:
d5:97:a6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:08 2025 by rpki-client