Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: 87UsWebcqJqLfQ39Fn1ORRCJirKOq8jjp4M8hCcXlpw=
Subject key identifier: 08:46:FC:99:C4:87:62:16:BC:19:BD:EA:96:15:DF:11:69:D8:8B:A2
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 0198D4A7F5A4F4C845808301CEDD48AE8A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 0123
Signing time: Sat 23 Aug 2025 02:00:33 +0000
Manifest this update: Sat 23 Aug 2025 02:00:33 +0000
Manifest next update: Sun 24 Aug 2025 02:00:33 +0000
Files and hashes: 1: 1-zM-AxIs8xBhVggB7kaXu3nKz6g.roa (hash: LftIky1Ihf5BPrdrifEnWJNrxUQ7AoG9kgjyQfCqmf0=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: JVX6KpRrrg+pdpCYcstNJ7mi3w3kg8bgtNwElXKhA3U=)
3: g2bIRp1_Ofi7tBEEaDVHCapdwAY.roa (hash: mKK0SH1X7uOReLc+h1naUYfsSMGvNovIT24/wKrbp8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f5:a4:f4:c8:45:80:83:01:ce:dd:48:ae:8a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: Aug 23 02:00:33 2025 GMT
Not After : Aug 24 02:00:33 2025 GMT
Subject: CN=0846fc99c4876216bc19bdea9615df1169d88ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:20:67:50:17:20:b3:a1:6f:de:86:cf:c4:
2e:17:56:81:a4:e7:64:f7:14:50:6c:80:11:3a:f1:
1c:5d:cf:02:99:3e:c6:ec:47:a7:76:c5:6c:9e:a0:
a3:cb:46:b4:a7:76:f0:0b:c4:a9:f7:e1:94:60:4e:
ac:59:11:0f:d2:d4:ca:10:fe:cc:a9:c8:a9:09:de:
43:d3:29:32:4e:c6:38:d5:db:fd:59:f3:6e:7b:59:
ca:19:27:50:d5:a0:30:95:91:35:05:43:42:d6:d9:
9d:02:b7:0e:d5:3d:f8:28:c4:8b:ce:6a:80:80:bc:
cb:a5:c7:45:0e:a4:4b:29:c6:ef:b6:03:fe:c0:b5:
c1:59:b0:cf:d1:6a:d0:72:6c:74:86:18:15:51:b6:
0e:4e:fd:11:7a:05:6a:8d:89:d3:65:52:47:33:d6:
03:25:72:6a:e0:27:49:ee:b0:a6:e3:f3:af:a3:fe:
06:66:37:71:2e:78:62:da:48:7f:c2:cf:51:9b:36:
c8:69:33:04:2f:04:b5:a1:47:d1:47:ad:c6:82:47:
24:49:09:98:ee:77:3e:25:0a:ea:af:b3:35:36:41:
51:9d:54:d9:3b:4e:68:b9:27:59:96:68:be:be:3f:
30:94:02:f7:49:dc:d1:ee:74:85:dd:89:07:1b:00:
27:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:46:FC:99:C4:87:62:16:BC:19:BD:EA:96:15:DF:11:69:D8:8B:A2
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a0:ec:3a:d7:89:8c:c3:74:f6:d7:22:40:31:33:cf:85:61:
11:20:fa:7f:cd:39:62:fe:18:97:66:08:de:21:48:ee:46:45:
e3:85:a5:6c:9b:8d:34:1e:b0:a0:c6:ca:dd:44:40:8d:a7:8e:
24:be:f6:f9:c6:18:51:26:c6:0d:ce:ed:47:2c:ea:d7:60:6a:
a1:6a:28:00:c0:99:60:fa:13:c2:f8:72:d3:bb:29:1c:e4:fb:
46:74:bb:ac:1a:21:99:8f:b3:bd:7a:b4:48:18:7e:db:d3:88:
ce:0f:42:78:62:70:8b:30:d1:25:bb:ab:46:e9:0b:b4:b7:37:
10:76:b6:a3:54:f5:38:67:ee:b2:78:10:fb:38:1d:f8:3e:fc:
99:7c:ba:77:61:96:8d:16:63:ba:00:40:0f:00:b2:54:b4:98:
dc:dc:70:72:fc:a2:c5:20:6b:5b:52:6e:3b:ab:e8:32:35:9e:
a8:ef:06:0e:52:41:d0:71:14:f3:c6:ae:4f:f5:4a:f8:3f:24:
96:8b:81:58:96:45:e5:c9:2c:cf:61:40:c0:8a:08:f1:99:8a:
67:78:30:ae:19:02:f6:60:9f:27:ee:87:06:a3:4c:71:84:ae:
33:97:8a:24:da:e8:f9:cb:86:16:ef:df:fc:4a:2c:80:00:4d:
6a:29:9f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:48 2025 by rpki-client