Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: YXDF8P627EcVZZ+wyTk4Ny7qsGdHjzXwhNHryhKVlK0=
Subject key identifier: 1A:37:93:15:F4:C1:DD:1C:C2:5B:D3:1A:13:D9:08:80:13:42:23:8F
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 0198D66053A45F351B8D80D9431D9A708DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:33 +0000
Manifest this update: Sat 23 Aug 2025 10:01:33 +0000
Manifest next update: Sun 24 Aug 2025 10:01:33 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: XcVCUoaLC5JISA1CYC2nPzYc0CO6bBK7h4IdKFPm/DY=)
2: O3I8fzz4GA8viyeptOfjUJ2mnRw.roa (hash: MhSpfjBUjJxXqy4aU0rHbneKVULz0h6JWSZvHTRBN24=)
3: ovS3rx1XoRtGLlvdJ72CyzvNZcw.roa (hash: lov3tLPiy71ecc5+P9JXxH2Fu9PCJbxZNtxQg4EVWM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:53:a4:5f:35:1b:8d:80:d9:43:1d:9a:70:8d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Aug 23 10:01:33 2025 GMT
Not After : Aug 24 10:01:33 2025 GMT
Subject: CN=1a379315f4c1dd1cc25bd31a13d908801342238f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:c1:64:b4:6b:cf:1b:f1:e3:78:15:06:3a:
d5:4e:af:e1:a1:2c:e2:0e:46:14:a9:2b:d3:30:da:
65:69:59:d7:f6:64:b8:03:d0:12:30:8f:f9:07:f2:
2b:04:ec:ae:c2:eb:92:3d:82:6c:3d:21:28:7f:55:
0b:6e:6d:9e:46:3f:a8:1a:3f:2f:f0:d9:1a:be:e7:
f8:96:8f:16:8b:76:75:51:e6:65:3d:af:e1:14:61:
f4:c1:a7:59:55:7f:d9:91:d1:7d:1c:c4:09:ce:aa:
56:b7:a6:8f:67:c8:06:07:1b:47:a1:b5:07:b3:2c:
b6:04:8a:9f:64:33:ae:20:73:ae:b7:0d:4a:f4:24:
ea:4c:4c:ef:24:e6:99:8b:9b:b7:de:f1:34:1d:0e:
14:a3:48:5d:d1:69:0c:68:e7:11:e5:a5:21:f5:f6:
64:aa:91:5e:37:37:66:0a:73:33:b9:f6:71:7e:05:
fd:13:c9:51:79:93:9f:c6:06:34:aa:f6:0c:08:c6:
ef:06:94:28:8a:9e:15:80:70:7b:2c:1d:4e:2e:aa:
32:24:00:7e:b1:f1:e4:b4:b6:85:d0:1a:36:4a:20:
fb:c7:88:4f:d0:97:dc:21:2d:26:d6:1e:f2:cd:bc:
ce:3f:9b:71:72:d0:99:11:88:8e:7f:62:69:4d:09:
5b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:37:93:15:F4:C1:DD:1C:C2:5B:D3:1A:13:D9:08:80:13:42:23:8F
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:09:48:2f:b0:f5:bc:59:b5:0c:6c:8e:b1:e3:34:09:d9:32:
aa:01:f1:e9:63:5f:06:6c:d6:89:89:47:57:54:72:c2:95:60:
46:02:7c:f0:4d:57:7e:9a:cc:33:8a:74:e7:33:b8:ae:ff:c3:
f0:ed:bc:54:97:6c:a6:b4:f2:c3:cc:56:66:b1:4c:8d:cb:62:
b9:3d:1c:3e:8e:9d:2a:48:08:ee:ec:2d:e0:01:a3:80:a4:51:
65:d2:7d:4f:5a:17:1c:f5:a5:58:17:2a:de:62:85:00:15:30:
20:65:3a:6d:3c:fb:ab:fd:f1:a2:71:00:0a:78:b6:f8:15:23:
fc:7f:59:5b:0b:b0:c1:ae:2d:09:f7:85:db:10:cb:35:3a:15:
66:b3:69:9c:a3:1f:0c:c5:74:f6:93:04:99:6c:5a:da:f7:a6:
89:3d:6f:86:f2:0b:e9:a6:17:91:90:99:bc:4a:0e:e0:55:68:
7b:4f:da:77:d1:eb:4c:90:ea:58:d3:6e:58:44:c1:2a:6f:96:
38:63:9b:7c:c8:fe:cd:76:58:92:d7:71:55:04:04:f6:d6:02:
b1:7c:70:48:f9:50:27:82:23:e6:53:ba:ae:55:46:ea:70:d8:
a9:e9:c0:91:5f:a0:ca:d0:0b:22:0a:4e:a7:0f:db:ad:6c:2a:
5f:bf:6d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:15:35 2025 by rpki-client