Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
File: 3YqroPRrqhRP2wk46RwU-UxhZQw.mft (raw, json)
Hash identifier: N5MKebOdtIN8mAel9VKBZ5Mpl04AO0XCnAT/woQDcHQ=
Subject key identifier: 7D:20:59:C2:F4:81:3C:0C:49:5A:AB:1B:0B:10:A3:35:E2:45:AF:56
Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
Certificate issuer: /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Certificate serial: 0198D5BC13C6E68E75BF83925143C1441219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
Manifest number: 0DAA
Signing time: Sat 23 Aug 2025 07:02:09 +0000
Manifest this update: Sat 23 Aug 2025 07:02:09 +0000
Manifest next update: Sun 24 Aug 2025 07:02:09 +0000
Files and hashes: 1: 3YqroPRrqhRP2wk46RwU-UxhZQw.crl (hash: T5XK/RaPV1hEOxcLzILteCTGXV627855Qva9NbaBZME=)
2: jyRFM9_T_syhJNdrBbZtEXQjBxY.roa (hash: 3sN/6EgdGuf6mYlFqORSiJaf85S1hh85EE3f4pncjgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:13:c6:e6:8e:75:bf:83:92:51:43:c1:44:12:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Validity
Not Before: Aug 23 07:02:09 2025 GMT
Not After : Aug 24 07:02:09 2025 GMT
Subject: CN=7d2059c2f4813c0c495aab1b0b10a335e245af56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:72:ea:34:5a:e0:37:ea:32:8a:5f:a0:d6:05:
ab:83:6d:78:44:15:78:d5:42:47:77:98:5d:07:e5:
46:5d:82:b0:aa:cb:fe:93:76:13:5b:7b:5d:e4:0a:
b5:10:b6:8f:a5:9f:02:a9:0f:e4:d5:4f:f8:31:dc:
75:5f:a9:2e:7a:62:30:10:74:fe:47:25:e6:f2:5e:
ee:40:6e:4b:ce:d4:01:dc:6d:86:ae:59:38:b6:70:
54:cb:ae:0c:16:2c:9b:e5:71:82:7a:22:d4:c5:4a:
d2:e3:f9:e0:a5:ba:00:03:ac:28:bc:fc:24:2e:6c:
df:59:f1:86:ca:4c:8c:31:14:66:78:1f:2c:10:e2:
9e:8c:48:7d:29:f8:2a:ce:45:6d:72:20:01:8e:54:
07:23:3a:ea:dd:33:1d:5b:c2:e3:4d:58:f8:9a:99:
00:41:c4:f5:95:ae:7b:99:15:49:20:69:fa:76:9d:
9a:13:ce:2e:55:cc:f6:ef:d2:08:68:fb:48:0e:14:
b8:55:77:79:9d:41:d4:f0:5a:aa:68:df:1c:97:83:
6d:d3:d9:68:84:09:f1:21:ad:03:c2:8d:4a:22:70:
77:59:ac:2f:0d:a4:55:f5:58:0d:1d:c4:2e:dc:c8:
54:ab:a4:9a:43:6b:a4:8c:84:af:04:b6:e2:91:58:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:20:59:C2:F4:81:3C:0C:49:5A:AB:1B:0B:10:A3:35:E2:45:AF:56
X509v3 Authority Key Identifier:
keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:85:ae:a9:af:d8:7c:23:3d:02:5f:df:46:71:a5:5b:70:0d:
a8:d1:d3:8d:20:f9:6b:bb:71:1f:15:33:51:f1:f3:f4:14:e6:
7b:79:62:fb:97:d3:8e:b1:ab:d4:44:88:e4:41:14:70:23:fd:
62:c6:5c:a8:77:8e:7c:b0:77:6d:93:ee:0f:22:ff:ea:92:5a:
3b:c0:05:98:cc:4c:7b:c9:6d:4d:7b:89:00:da:3f:8c:1d:85:
76:d9:1b:ee:f3:77:4f:11:e9:6f:f8:76:a2:ea:da:e5:66:be:
c8:9a:d1:f4:14:8b:c9:59:5a:94:2c:99:1c:fb:f8:f7:55:91:
b6:4c:0f:d4:07:ac:a3:bb:6e:a5:08:89:a4:19:89:0f:32:15:
36:fa:43:78:e3:59:50:91:16:38:a8:b4:72:d0:82:da:f2:09:
1c:f8:e6:6e:11:2b:0d:c5:74:20:4a:e9:1a:ac:6e:15:c2:e8:
13:c1:6f:d0:a7:aa:ab:f2:c3:fc:c1:fe:33:ce:29:b8:d5:4e:
c3:2f:e9:ed:4a:84:ed:38:4f:91:95:a4:45:6b:4b:8a:87:af:
e3:8f:06:18:41:6e:98:07:9d:1f:27:be:c6:cc:26:89:c9:c1:
e5:f4:b5:61:68:e2:df:dd:ec:72:ec:7c:a3:92:47:f4:51:67:
46:a6:30:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:53 2025 by rpki-client