Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
File: 3fCc-W5fyHTuk5CXxWUci9hC5q0.mft (raw, json)
Hash identifier: A2WJ7GENUW/kjbL/o/ZLgM7fQJDlmN8Q6tluGiBYcF0=
Subject key identifier: E2:7E:3A:69:EF:D0:43:C9:7C:2D:E6:4D:94:94:F0:5A:A8:18:EC:FC
Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Certificate serial: 0198D4E02BDD7AA9645A2B13E408A6F158FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
Manifest number: 037C
Signing time: Sat 23 Aug 2025 03:01:57 +0000
Manifest this update: Sat 23 Aug 2025 03:01:57 +0000
Manifest next update: Sun 24 Aug 2025 03:01:57 +0000
Files and hashes: 1: 3fCc-W5fyHTuk5CXxWUci9hC5q0.crl (hash: FPHkmHU2ywH/sC/yDd94zU2EavzP+CfpiYQH4CKd/Po=)
2: 4QrqTeH17AXNTy8pbTdrujVUbQI.roa (hash: FZeq9SJr8r+vs6lCOy39Gvb+wDR+3HmqIg9DlvmdZfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2b:dd:7a:a9:64:5a:2b:13:e4:08:a6:f1:58:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Validity
Not Before: Aug 23 03:01:57 2025 GMT
Not After : Aug 24 03:01:57 2025 GMT
Subject: CN=e27e3a69efd043c97c2de64d9494f05aa818ecfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:fe:f6:cd:67:70:f4:08:0e:ce:4e:33:1b:
e5:62:1b:7b:56:30:72:a0:aa:92:37:f9:73:58:12:
01:0b:be:36:45:58:12:02:c8:e5:28:55:f7:67:42:
16:7d:64:7e:fc:57:6f:5f:f4:83:22:6d:92:4d:7f:
70:f9:34:35:89:ad:8e:42:2a:a3:e1:b7:46:10:e4:
08:a2:04:de:33:a0:e9:1a:cc:fe:23:75:57:9d:c3:
d2:9f:4c:be:01:e2:33:29:56:90:55:2a:63:aa:8a:
08:da:2c:c8:7f:e7:49:c0:65:08:61:54:a1:09:54:
81:cc:bb:b3:b5:79:6d:d6:5c:d1:8a:30:ad:7f:7d:
b0:cb:e2:2a:08:f3:d0:c6:c5:0d:23:1e:ce:16:72:
1d:35:8c:ad:99:bc:d2:17:84:d2:40:97:b8:49:13:
0f:1c:82:c0:66:80:53:9f:b7:cd:c9:ec:0c:ca:e2:
41:a2:3a:c0:8f:80:41:76:1f:98:dc:6f:6b:be:b1:
b2:82:6c:4f:c8:b7:98:60:97:90:3d:31:d7:91:83:
ac:24:a9:6e:dc:e3:89:f1:72:7b:93:ab:66:77:4a:
ba:69:6f:be:81:d8:e7:c8:43:5e:cb:39:90:da:af:
ed:52:38:9b:e7:b1:40:4b:bf:17:dd:b9:0b:6c:b3:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7E:3A:69:EF:D0:43:C9:7C:2D:E6:4D:94:94:F0:5A:A8:18:EC:FC
X509v3 Authority Key Identifier:
keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:43:ba:16:2a:fd:34:8b:b9:01:ef:77:2f:76:5e:cd:ad:dc:
56:47:d5:7f:b0:6d:84:22:ca:5d:3b:fb:fd:a7:13:1e:bb:a4:
0b:d8:b0:60:55:ec:b4:f3:4f:a6:23:b9:32:c5:4c:1f:9f:5f:
45:83:4b:ed:36:af:e8:28:c5:f1:c4:90:45:5e:2b:c5:20:14:
81:6a:99:d8:f3:02:93:aa:9d:06:41:f0:bd:f1:41:91:97:03:
73:61:64:09:5b:2d:75:e2:33:d6:50:2c:5e:0d:49:4b:b9:20:
77:42:7b:84:ea:9f:f7:d9:1b:bb:f6:90:51:ea:52:3a:77:b1:
71:15:e4:3f:b0:48:d5:b5:c4:57:26:1e:62:6b:f5:7f:ce:ed:
cc:a7:ac:60:50:14:bf:b6:03:0c:09:c6:73:e7:5d:2a:b3:f5:
13:06:ba:f7:3d:88:32:78:7b:c0:4e:bb:6e:05:54:fe:9d:3e:
1d:d6:f3:7d:fb:1a:7e:e9:06:6f:fc:24:33:2f:78:17:78:aa:
9b:85:47:d3:24:f2:9e:00:e9:37:54:db:20:a3:ae:19:08:d7:
65:fa:f0:59:47:ab:cd:8c:a2:20:60:07:dd:c1:d6:38:ed:8d:
8d:84:3b:c9:c2:e7:c2:b4:99:db:3b:9d:7f:08:b4:a2:e3:d0:
73:77:16:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:28 2025 by rpki-client