Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
File: 3f2U67jLmKHb31C9zWncwpFEiJ4.mft (raw, json)
Hash identifier: zuKjAsL7crpLQSPRXqag+2ZS2sFB5hatVCylcLyrBYA=
Subject key identifier: 7B:A0:18:4E:F2:0A:50:6D:E9:6B:DC:06:73:D2:93:3E:98:40:26:0C
Authority key identifier: DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
Certificate issuer: /CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Certificate serial: 0198D6601CA2042A0FF624DB80A07B34D3C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
Manifest number: 0D31
Signing time: Sat 23 Aug 2025 10:01:19 +0000
Manifest this update: Sat 23 Aug 2025 10:01:19 +0000
Manifest next update: Sun 24 Aug 2025 10:01:19 +0000
Files and hashes: 1: 3f2U67jLmKHb31C9zWncwpFEiJ4.crl (hash: gt3e66V8F4AvqwH9cn8LIwqbwGd518eF16CM9pM5H1w=)
2: OMnuxUeA0haC1p_KDdRfwFA8Q2s.roa (hash: cDQVnRaiJ+Kb9nhkJ6FSjxN3vz7jN+QBdbH8z93gYFM=)
3: yOI7tiSRDXgdskD_bs5AhIY61n8.roa (hash: jCxGB8CWsOl2EvkB0hTjOgeBy34atnE5kB7r6h+CCmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:1c:a2:04:2a:0f:f6:24:db:80:a0:7b:34:d3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Validity
Not Before: Aug 23 10:01:19 2025 GMT
Not After : Aug 24 10:01:19 2025 GMT
Subject: CN=7ba0184ef20a506de96bdc0673d2933e9840260c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:9b:3b:73:89:42:4a:89:1e:e9:f5:1c:f2:
c8:ad:f8:43:c8:ab:7b:ab:ed:e7:78:e5:96:69:83:
2c:96:2d:46:96:54:1f:12:8f:a0:db:ef:e1:c4:7b:
73:ad:ac:7c:e8:3d:4e:58:45:f9:03:80:71:c7:e7:
c0:25:fe:5e:51:ac:8b:c7:93:b8:c8:ab:a2:af:d7:
af:a6:c9:a4:4f:23:ad:11:c4:15:49:94:ae:75:98:
96:a1:6c:ad:57:5e:71:fe:92:c9:9f:1c:05:34:e2:
04:d3:f4:41:67:3f:e9:4a:50:9f:17:79:f4:11:b4:
64:5c:f5:ef:13:44:cb:e1:9c:0d:30:25:26:c0:d2:
72:82:a4:ef:01:08:30:28:03:53:c0:af:ed:b8:6b:
2f:b9:2c:af:a8:2b:e3:ab:9a:c5:e0:df:60:df:d2:
8d:9c:68:28:28:dc:44:46:a3:3b:e9:4e:59:17:9b:
b0:23:b7:9b:63:9d:20:db:b9:7c:bc:a1:23:35:c0:
2e:41:72:7c:7e:53:7c:01:34:0a:d0:b7:b8:1a:eb:
a1:6d:93:45:a9:d4:ae:fc:6c:97:b1:a4:25:19:6c:
24:db:71:00:53:4e:50:69:3a:85:17:4e:31:6b:cb:
3a:4c:67:5a:21:64:6f:07:96:76:f7:65:84:bb:0a:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A0:18:4E:F2:0A:50:6D:E9:6B:DC:06:73:D2:93:3E:98:40:26:0C
X509v3 Authority Key Identifier:
keyid:DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:27:1e:2e:04:f6:b5:ef:61:94:b3:0f:47:ef:fe:f8:5b:cf:
22:01:ee:c4:ba:c7:0c:56:d0:d2:b0:b2:37:37:51:c2:1c:30:
c1:93:f7:5b:e9:03:12:50:2e:e6:25:7a:7b:fa:3b:e0:00:58:
38:16:6b:f1:86:47:87:9f:c5:13:8d:33:44:92:17:c1:4a:7c:
b8:a3:0e:71:9b:cf:0d:5d:87:0a:1a:12:c4:f3:b2:80:24:6b:
53:3f:b4:28:c2:4d:ae:50:33:d7:44:9b:5d:1e:f4:ca:80:0f:
39:1e:4c:26:44:80:32:b1:ff:be:81:35:a3:4f:b7:2f:f8:21:
63:a1:f2:ce:0d:86:ef:df:1c:90:be:61:6e:fa:eb:5b:6e:43:
8f:bc:2b:7b:9d:ec:3f:cb:04:1e:a1:73:83:78:40:12:b1:e0:
5b:f1:e4:26:e1:5a:c2:62:fe:36:45:f0:d9:ae:f7:8b:ec:49:
6a:62:f4:8b:80:f3:6c:56:dc:fb:8a:da:b9:e1:6b:01:81:38:
f0:07:05:41:fd:4d:ea:6e:01:04:9d:66:31:0b:34:7e:18:ed:
cb:5e:98:21:7d:3b:9e:32:e0:d9:71:2b:80:7e:8d:b1:54:82:
a8:6f:e5:8b:0c:18:01:97:8c:4d:d5:cf:8c:ba:f2:26:e3:61:
0e:7c:01:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:16 2025 by rpki-client