Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier: akex1srjQv6DpA4GtATqkhEYt5bmBUXNIfg0Xl8+ai0=
Subject key identifier: 18:41:5B:14:BE:B7:43:58:91:6C:B0:CA:9D:E4:20:59:64:A1:D2:41
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial: 0198D583FA46583902B472C555A8C77F1274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:52 +0000
Manifest this update: Sat 23 Aug 2025 06:00:52 +0000
Manifest next update: Sun 24 Aug 2025 06:00:52 +0000
Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: +Y0NYH4l+1Qa2DCznOgF9JIeeLuoAwv0nx49xTc+tlA=)
2: ZxKbEdzKxauu7o-Y7eoipbP5kS0.roa (hash: bVgUBiwiMttSarotQ+bYBGzvg0m/rWkM8yb5LV2CZwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:fa:46:58:39:02:b4:72:c5:55:a8:c7:7f:12:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Validity
Not Before: Aug 23 06:00:52 2025 GMT
Not After : Aug 24 06:00:52 2025 GMT
Subject: CN=18415b14beb74358916cb0ca9de4205964a1d241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:a0:2a:0c:df:9a:06:1f:3d:8f:29:be:58:
e4:4e:7e:af:ae:44:f6:d8:37:fc:23:a5:fe:21:0b:
e6:19:1b:9f:39:78:14:a7:21:4e:c7:dc:14:b7:4e:
42:a2:d7:b8:cf:e2:fc:46:8a:19:17:f1:d2:77:91:
e4:1c:13:cb:a8:02:16:0f:1d:b2:a2:c0:39:31:4d:
40:2d:2a:ab:bc:77:f2:0a:43:10:47:11:8e:28:3b:
a8:1d:ce:51:01:60:d4:37:06:63:f9:f8:d2:75:31:
b0:ce:d8:86:b7:c8:76:d2:48:62:b4:b1:f0:97:6b:
35:36:eb:0f:76:74:a2:b2:25:09:ae:d8:bd:fb:cb:
9c:35:a4:e6:19:e3:27:19:74:1d:88:b1:14:f7:82:
b2:2f:9c:61:6b:c9:7c:36:59:d5:cc:7c:e0:d5:2a:
19:af:17:fb:f6:cf:5f:aa:83:96:5a:b6:4f:45:32:
b7:9e:65:f1:76:33:cb:4b:99:6e:af:aa:17:2f:e8:
2b:ff:bb:04:2c:d1:86:e4:f4:65:d5:bc:30:4f:09:
e8:11:3b:6b:a9:9a:16:f0:d5:a4:51:ff:eb:16:38:
c3:a5:1a:dd:24:95:7e:ff:24:f1:54:75:30:a9:e6:
a3:94:fb:28:88:89:6a:c4:d5:86:18:b9:ea:a6:0e:
d2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:41:5B:14:BE:B7:43:58:91:6C:B0:CA:9D:E4:20:59:64:A1:D2:41
X509v3 Authority Key Identifier:
keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:13:1e:1a:c5:42:f8:e5:3c:c0:2d:8c:f3:6b:15:15:7d:fc:
6a:1d:93:76:42:67:4f:34:12:b9:5b:1e:ac:d1:a2:42:6d:2d:
17:e7:a3:ed:22:2c:32:4d:9e:6b:77:94:ea:38:84:aa:88:c8:
4f:3a:1f:a0:3b:ff:b9:52:0b:56:7f:27:98:0e:bf:28:b5:b8:
0c:3d:50:66:bd:54:de:54:79:e4:26:6e:a0:38:c2:d5:38:d0:
de:e9:36:a8:89:1a:13:0a:01:0c:24:9b:30:86:5b:5a:ba:e7:
a6:02:b2:7f:a0:63:8a:e8:74:ca:4e:e0:0b:35:2c:c2:39:36:
79:46:6f:0f:f9:7d:ca:43:75:e5:70:00:93:cd:78:1b:a7:b2:
da:5f:ce:98:b9:4b:8b:ec:bb:c4:6c:32:98:9b:1c:64:55:2a:
24:13:1a:b7:68:52:f9:be:6d:b3:e3:35:b0:49:dd:0f:42:81:
2b:20:0c:bf:88:c9:a9:8b:86:28:b8:62:72:1f:6c:d7:99:75:
69:38:55:15:ea:74:8e:03:b9:e4:42:a9:e7:7b:eb:a4:f3:02:
08:db:6a:e3:ad:3f:5f:23:59:2a:6d:a8:e5:e1:b5:c2:d0:d0:
f4:16:ce:15:82:de:98:8b:fd:b9:bd:5c:6a:31:a2:3d:61:bd:
34:79:36:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:46 2025 by rpki-client