Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: yEhHD/WXk7BkmK55chs++VCLUFu0sL9s3tti69iQFrg=
Subject key identifier: 77:BF:F0:A2:F7:39:69:33:96:B0:D6:07:68:DF:87:88:17:2E:92:AC
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 0198D4E08E28239CC40C44CD1764D57351C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 03:02:22 +0000
Manifest this update: Sat 23 Aug 2025 03:02:22 +0000
Manifest next update: Sun 24 Aug 2025 03:02:22 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: /xGaD4IWnq+A9UxS8GJ/EZ272w1UiYnmlQ+gWujMdLU=)
2: KC65iLduV38Y-_4YeZcOkvub1x0.roa (hash: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8e:28:23:9c:c4:0c:44:cd:17:64:d5:73:51:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Aug 23 03:02:22 2025 GMT
Not After : Aug 24 03:02:22 2025 GMT
Subject: CN=77bff0a2f739693396b0d60768df8788172e92ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a1:c1:20:b1:d0:38:c1:e5:e4:6a:55:af:0f:
4e:26:f2:1f:6f:6e:43:63:79:4d:a0:57:99:65:80:
29:45:e1:1c:ed:8c:95:90:93:9f:44:b4:b1:e2:54:
13:f4:70:bf:c4:b9:a9:94:6b:2b:b2:7c:d0:b2:32:
f9:bd:bb:e7:93:c1:09:c7:96:c1:87:ab:20:f2:c7:
99:9d:af:2e:db:3f:6c:b8:c7:a6:21:35:3c:3b:31:
fe:c5:53:27:e5:79:88:4a:e4:32:75:e5:34:04:c5:
69:b6:23:e3:d4:07:53:1c:13:25:1d:f1:8f:17:6c:
e2:5e:99:d8:69:4c:04:78:ef:71:cf:8d:0a:88:d1:
21:0c:aa:9b:4f:94:60:ca:30:e9:c3:28:0c:d1:cc:
0f:bf:bb:69:ec:93:86:b1:87:ce:2b:82:90:f2:6c:
e8:5a:17:cf:ae:6b:9f:5e:57:86:73:e2:46:73:bf:
4a:c2:0d:d7:4e:0e:2a:c3:0b:c6:e4:ce:14:0e:49:
91:36:ce:02:27:84:f3:4f:56:ec:43:34:21:a1:c4:
72:2c:b9:da:e3:7f:00:6e:ad:49:e9:03:c4:24:f6:
d3:5b:1f:6f:cb:4d:17:0e:6a:c9:94:62:0a:8f:c6:
26:21:fd:4f:89:48:09:1c:4a:5a:0f:24:f4:89:02:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BF:F0:A2:F7:39:69:33:96:B0:D6:07:68:DF:87:88:17:2E:92:AC
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:60:85:a2:3e:89:80:59:d0:4d:e7:c6:1b:78:fc:a9:95:06:
61:ba:1c:fd:36:f8:28:49:9c:95:5b:af:58:3c:b1:ce:80:68:
22:90:6d:78:65:9e:d5:2b:69:e1:b3:62:3d:d8:48:8a:39:08:
b1:95:0b:97:23:7b:b7:9d:82:60:2a:76:8d:76:54:96:9e:d6:
30:57:c1:19:42:02:d8:68:6b:32:c1:88:89:53:eb:ed:9d:f3:
92:98:35:9e:a9:57:1c:f6:09:5e:c4:d0:15:7d:25:10:fc:68:
63:31:bd:68:24:87:b1:92:86:c1:b8:59:95:36:69:bc:41:57:
88:5d:cc:8e:b4:48:83:41:73:5b:5a:30:7b:66:66:ae:5d:fc:
d6:a3:90:25:fb:fd:23:6b:a2:af:10:a4:8b:6a:34:b9:71:de:
eb:09:8b:a0:27:b1:42:2e:32:d5:47:10:f3:8b:2c:70:1e:7a:
12:dd:64:bb:65:91:f1:af:0b:f2:8a:8a:4b:56:e5:54:85:74:
e9:cb:77:a3:56:a3:d9:6c:12:40:67:d3:f7:7e:cc:10:a1:26:
6b:53:ab:6a:71:61:a5:e0:e3:41:66:c7:b6:65:ad:5d:ff:54:
4f:d2:08:1e:75:58:cd:3c:42:ac:69:ab:f6:49:b2:db:87:a7:
fe:69:41:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:33 2025 by rpki-client