Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier: 4u5KnY0+wfZ5Nb0GH8jugEQtBh7pCWOoREwGFgtsdqg=
Subject key identifier: 5C:DD:EB:F9:D5:6F:8E:75:69:7B:4C:8F:1C:66:F1:E5:E7:B0:30:AE
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 0198D583A15E8C7E2E3BCE1B5E8ED7F9B0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number: 12D2
Signing time: Sat 23 Aug 2025 06:00:30 +0000
Manifest this update: Sat 23 Aug 2025 06:00:30 +0000
Manifest next update: Sun 24 Aug 2025 06:00:30 +0000
Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: kBGwieEMMEVxefnamnQjDXymoL84RitQ9wR96hsp8ks=)
2: _iwCmsjTAlw634BVcFH9x4y6od0.roa (hash: sGzYd7+zk4VbbBPH9QI8yNwz1RatcjDRVrzAv9yiEMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a1:5e:8c:7e:2e:3b:ce:1b:5e:8e:d7:f9:b0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: Aug 23 06:00:30 2025 GMT
Not After : Aug 24 06:00:30 2025 GMT
Subject: CN=5cddebf9d56f8e75697b4c8f1c66f1e5e7b030ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:47:0e:00:14:ca:85:91:20:c0:63:03:7e:fa:
e3:19:b0:88:61:69:20:42:16:8f:68:e0:e4:5f:7c:
5e:8c:82:cb:5a:a1:0b:07:ee:67:a2:2c:25:be:35:
c7:25:51:d4:48:5d:ee:3f:39:1a:0d:f1:49:7b:2a:
68:a0:34:a3:68:2e:8d:dd:11:88:d2:4b:ff:e4:18:
bc:b8:e6:28:7e:61:bc:ea:fb:1e:55:66:b5:78:92:
ad:cc:10:a9:14:5e:2a:69:3d:0e:07:e5:d3:cb:9a:
54:03:d2:86:c6:7b:c1:40:78:38:2f:17:0f:0f:c1:
33:f1:c4:d1:57:91:16:89:15:91:a3:91:97:88:90:
06:1b:c2:79:5e:80:ab:df:f6:b8:5d:35:9a:b3:c7:
6a:47:fb:7c:db:bc:8c:19:74:23:ea:9c:7c:2f:f9:
ef:aa:de:d6:ad:2e:be:1d:30:68:ed:2c:f6:e1:46:
93:16:36:5c:5c:52:3e:fe:fb:26:c9:8a:55:32:a3:
35:76:f6:66:ce:70:2c:30:e7:17:ac:39:ba:32:a2:
2f:03:07:20:8e:e3:17:90:be:6f:e0:80:e9:c7:b2:
78:71:76:d4:ee:38:7e:70:23:fa:00:e7:6d:01:c7:
a9:43:ea:1b:d9:a2:68:ce:be:de:dc:17:b7:1d:fc:
f2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DD:EB:F9:D5:6F:8E:75:69:7B:4C:8F:1C:66:F1:E5:E7:B0:30:AE
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e4:da:f0:15:62:c9:fb:d6:43:48:06:7d:2e:58:0d:aa:86:
54:94:11:3c:9a:8d:48:ad:bb:f4:35:2b:cc:f2:72:31:9b:95:
7b:9d:c8:c3:aa:94:aa:4e:99:a5:dd:fa:40:d9:6a:17:70:99:
18:76:b6:a0:59:5f:33:1e:1f:57:a0:2a:54:02:92:83:3e:00:
77:54:e9:0e:87:bc:ff:a8:e0:0d:68:e2:51:05:24:af:37:6d:
e0:1a:d5:eb:a3:d0:fe:ec:34:41:35:8e:e7:ed:36:dc:eb:84:
6e:96:bf:a5:1f:8c:fd:a2:c8:77:cd:45:86:af:d5:7f:01:20:
8a:2d:b8:e8:1e:d0:94:91:a5:52:8f:41:d6:a2:be:d5:4f:99:
2b:5e:b0:92:be:ea:a7:ea:b6:20:de:3d:83:41:cf:a7:01:fb:
ad:36:9f:b7:f2:92:b1:14:14:88:f0:a2:dc:10:15:8a:c4:2a:
d1:f3:d2:62:83:c3:f4:01:71:34:c1:80:42:30:7a:e3:99:f8:
be:43:fb:35:30:bb:75:54:f1:5c:80:1f:6a:de:9b:84:6a:9d:
db:57:b9:be:69:5b:4b:4d:aa:7e:21:1e:de:ca:23:0e:4c:28:
d2:05:07:e9:ac:a7:49:e8:8a:61:98:f1:3a:96:c2:30:f7:d2:
bc:17:6f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:47 2025 by rpki-client