Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json)
Hash identifier: aGnQDVWWRM8IfYcjvMkP/XlSalAZ73IX2wKXMRuV3cA=
Subject key identifier: 81:DE:26:8A:7C:36:4B:EB:39:34:58:88:5C:FE:B1:FF:7B:1D:DB:59
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 0198D5835A1F44B8AFFBDA57EAE05A028282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
Manifest number: 118D
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: jtHrqatcZAah4u3UoaCkrCHA9WWI6LzisL8uKYNdB+s=)
2: _Kt_ylx952g7HZhxMZibU4U_S9U.roa (hash: BRXKGTpDPGrVqoVy2fXV55G1/RGVRY4TQXSqB3YxXnw=)
3: bJ6OkDBz35azmUeGZSSY8SRMI4Y.roa (hash: y21BnaoaGpgbQvC0jOtfGrk+wq3H1xWVUYMR7XJq8OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:5a:1f:44:b8:af:fb:da:57:ea:e0:5a:02:82:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=81de268a7c364beb393458885cfeb1ff7b1ddb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:56:1e:14:f0:24:58:53:ff:2b:13:ef:4d:
e7:fd:6e:d9:e0:47:d8:22:7b:96:ce:d5:d7:36:22:
31:c2:33:42:96:f4:e4:89:8f:c6:1f:70:5f:2f:bd:
af:4d:88:d2:d1:aa:b0:27:38:05:11:cf:a1:a2:49:
7f:69:74:e9:8a:14:4e:95:e2:c2:c0:c2:3c:ef:14:
75:94:4b:62:9d:12:68:16:73:d5:8b:a4:fb:4a:04:
ae:38:c7:fc:4a:2e:b2:5b:eb:70:25:dc:5a:74:6f:
53:e8:ea:c9:63:80:de:aa:1d:69:86:ec:5d:b2:b4:
38:77:aa:67:0d:fb:f1:49:ed:ed:46:68:45:f3:3f:
1c:18:4f:25:1b:45:c7:b2:4e:2e:78:db:92:9a:28:
e1:d3:3b:2f:59:37:cc:91:8f:0c:c0:37:78:be:55:
3d:72:25:fc:08:50:d7:3e:f4:bd:6a:02:54:d1:46:
8c:ba:e8:9c:5b:82:62:15:f4:9d:bb:5c:d8:ed:77:
ba:d8:2a:73:ce:d9:9b:12:24:9d:f0:cb:1d:7b:7f:
d8:d6:43:fa:db:3b:e6:30:d2:09:66:6e:85:3a:d8:
a2:bc:cb:93:3f:32:5e:67:8b:f4:38:88:78:e0:17:
4b:e5:d8:62:23:0e:01:46:10:a6:0c:f9:be:fb:85:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DE:26:8A:7C:36:4B:EB:39:34:58:88:5C:FE:B1:FF:7B:1D:DB:59
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f2:a3:94:8d:65:0f:8d:b7:6b:e4:cb:09:a4:a2:ec:3a:2e:
35:6c:96:9e:3c:8b:61:56:df:9d:21:f6:bc:81:45:89:cf:6c:
ab:c4:dc:43:cf:c2:3b:1a:94:3f:68:8e:c0:5f:e1:cb:63:79:
8c:bc:f6:3d:91:a9:bc:af:23:a0:86:23:32:05:95:f5:4b:7a:
66:14:46:be:48:37:fc:94:ab:35:39:c7:fe:19:ee:df:5e:65:
78:74:17:70:11:5a:b7:e1:27:31:77:bc:b8:b2:5f:c6:fa:a2:
99:69:60:ad:9f:3c:46:10:fc:7a:a8:9e:7c:00:5c:d0:3d:e7:
01:f4:38:65:b6:a8:31:95:67:ec:cf:2b:da:46:7a:74:63:c9:
ba:bf:a3:36:21:6f:1b:21:8c:11:7d:1f:79:79:ef:88:15:73:
0e:c2:bc:4e:30:cc:ac:19:a0:59:90:d6:f3:d4:41:21:26:c7:
80:e8:77:75:78:1a:a8:43:3d:0e:19:a4:81:ba:cc:45:76:ad:
3c:8c:22:80:32:8e:7b:9c:d4:61:bb:93:08:b0:7e:74:31:4f:
86:43:f9:23:3e:0a:84:05:ca:90:d8:df:7b:67:ce:cc:c9:ef:
a7:7c:1a:44:4d:2b:dc:e4:64:72:8d:e6:d3:b5:87:84:fc:31:
a5:b4:05:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:53 2025 by rpki-client