Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: xcejpds14gmqZfHZ0JekHYWMOD1P8z0t0pc43H0xcMw=
Subject key identifier: 4A:91:DD:5C:24:8E:D6:E6:3A:49:FC:8F:04:1D:F2:6B:55:6C:84:91
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 0198D4730336676D21E3B512A8CB6CE1AE07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:43 +0000
Manifest this update: Sat 23 Aug 2025 01:02:43 +0000
Manifest next update: Sun 24 Aug 2025 01:02:43 +0000
Files and hashes: 1: 2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa (hash: HuLQbolqCGZmiUhvPO/wiFvtWi3Okwmgccu/aBpptuc=)
2: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: NyNaCtyvJWuZWD3WuCpNvZI0DuHn17KYHN+0JJ19Oag=)
3: S87qjShx0Cde64tPkPpF-gZYMZE.roa (hash: KfR58Ep5CQd0S3bEgqtjtqAMWmdjTVJqVmZhBaCwNRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:03:36:67:6d:21:e3:b5:12:a8:cb:6c:e1:ae:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Aug 23 01:02:43 2025 GMT
Not After : Aug 24 01:02:43 2025 GMT
Subject: CN=4a91dd5c248ed6e63a49fc8f041df26b556c8491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7c:f9:cd:61:3e:c7:83:1e:0d:f9:69:e2:76:
73:da:f4:47:9c:af:e9:6f:61:83:da:56:a5:99:03:
60:8e:18:cd:b4:7e:52:aa:25:a4:15:30:27:1a:1b:
89:36:04:e8:98:15:35:46:81:38:73:3f:ea:b0:78:
8c:92:d6:74:5f:4c:83:b9:17:27:79:a2:1b:68:e5:
77:42:09:f3:64:e3:9d:c5:c0:d8:66:e0:5e:f6:65:
e2:4f:bc:cf:70:06:96:67:51:02:ac:a8:99:6b:2c:
b0:63:6f:13:26:7e:09:a9:ac:56:6d:ac:50:16:05:
c5:bc:f3:93:c5:53:65:ae:2b:07:e6:e1:e1:cb:d5:
51:0a:fe:d5:60:bd:77:97:78:47:84:85:2e:ec:29:
7c:dc:5c:88:b9:0b:ed:7d:58:c9:f6:b4:55:6e:d4:
27:af:2e:32:0e:86:00:1e:19:e9:ab:17:81:3a:3e:
0b:fc:a2:4d:e4:39:13:a3:b0:f6:bc:0b:81:8b:55:
ad:7d:61:36:b5:9d:61:32:69:bb:d7:86:a5:b8:66:
69:18:bf:cb:90:ca:ff:df:9d:83:3d:e1:23:18:2d:
64:79:4e:3d:96:30:44:dd:a0:88:94:76:54:b2:b2:
6f:ec:13:63:16:a6:f6:6f:3d:02:bb:0f:1c:af:36:
58:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:91:DD:5C:24:8E:D6:E6:3A:49:FC:8F:04:1D:F2:6B:55:6C:84:91
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a8:09:75:b6:48:84:a5:b4:ed:12:3a:54:24:c5:93:d9:8a:
40:34:7a:b9:67:56:68:90:a3:a9:34:74:91:d5:d2:e5:12:e4:
ca:aa:52:ad:0e:bc:cb:83:ed:16:9b:f7:88:aa:0a:dd:db:2e:
12:a3:86:61:ca:fa:c2:e3:15:22:26:55:19:9b:4e:a8:00:d1:
3e:13:fa:00:4a:ef:4d:e7:77:f1:f4:59:5b:f0:73:0d:ed:6c:
ea:54:2e:9a:2a:7a:53:24:06:c8:ba:ef:d1:d0:2c:92:7e:6a:
59:32:cf:97:9d:ea:b4:12:cd:f6:f7:37:d6:a0:49:44:c9:29:
20:46:34:ac:e0:8b:77:f4:83:a5:66:0b:2c:4a:fb:68:f7:62:
a7:52:c5:5b:c9:8c:6c:66:1a:3d:9c:12:59:c8:b8:6a:f5:94:
49:ee:22:17:86:23:a8:93:a4:71:44:88:db:b2:6a:c6:1a:5e:
10:97:1b:b6:8f:2b:98:19:24:8e:56:16:47:60:ba:76:d7:78:
76:be:cd:8b:28:54:a2:85:32:5d:8a:6c:b1:4a:5f:79:ea:8d:
3f:90:88:77:44:eb:26:78:52:42:ef:64:8e:fc:83:78:f5:21:
00:d8:c9:d4:64:bc:33:37:e8:85:72:ab:0d:1e:75:8e:7b:15:
6e:82:d6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:40 2025 by rpki-client