Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
File: 3N7T6jumc6gIz15q3LUep_M_QgM.mft (raw, json)
Hash identifier: uoRm1pJn22FW6hP/+LC9DcvfRdZoSn62KoTslMc9948=
Subject key identifier: 13:A2:CD:1F:18:08:CB:F8:CC:76:35:F8:9D:D9:B1:2F:CD:6C:C9:A2
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 0198D7A91CB78E79E09B806B101D67D808EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
Manifest number: 041B
Signing time: Sat 23 Aug 2025 16:00:41 +0000
Manifest this update: Sat 23 Aug 2025 16:00:41 +0000
Manifest next update: Sun 24 Aug 2025 16:00:41 +0000
Files and hashes: 1: 3N7T6jumc6gIz15q3LUep_M_QgM.crl (hash: k10n+W22o70LR2vjyOB+mHAAOZxrNCfR80bR8i2YEHI=)
2: Opp8U8aeHzNwIE0mPBiUqooeCJQ.roa (hash: V/D3sQNgSw6lGL7igciFA6sJiWbs7FF9hEBFUMCcvFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:1c:b7:8e:79:e0:9b:80:6b:10:1d:67:d8:08:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Aug 23 16:00:41 2025 GMT
Not After : Aug 24 16:00:41 2025 GMT
Subject: CN=13a2cd1f1808cbf8cc7635f89dd9b12fcd6cc9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:7b:23:fa:a1:43:8d:ec:02:67:1a:fb:89:
de:d4:13:68:2e:85:23:97:40:ed:1c:4a:eb:4a:7b:
46:a6:75:36:14:04:b8:59:b0:b4:0a:49:24:11:74:
d5:50:8a:dd:31:d1:44:98:29:0b:d9:cf:15:59:4e:
67:00:80:dc:d8:5b:28:a3:c7:5c:7e:9b:d1:f6:16:
9f:b9:46:b5:c8:a7:69:fc:3d:14:48:c4:59:6a:39:
f2:66:99:05:9e:cc:76:89:71:6b:c4:b6:ab:f9:71:
6a:27:e3:db:fb:16:83:04:ed:9f:84:3c:09:96:57:
13:7d:b9:de:91:31:2d:2b:61:58:c8:58:ba:aa:bf:
a9:aa:b1:21:16:a5:fa:d0:be:06:6b:a9:3b:65:67:
ef:88:57:65:0a:5c:0e:0a:4d:a6:48:4e:d2:30:dd:
93:69:a0:ea:e0:98:4a:ad:aa:24:e4:9a:2b:d0:dd:
2d:48:a3:d7:32:d4:d3:03:df:a1:48:37:8f:e7:8d:
4a:10:1e:27:d2:46:29:c9:6e:78:bb:ff:d6:1c:a2:
92:33:78:1c:69:8a:d5:8a:88:f7:be:0c:c2:8b:16:
83:8e:6d:4c:6d:8b:ee:c1:7c:69:49:b8:5d:d8:8d:
b1:33:49:d2:33:e0:4e:d9:7e:9e:81:be:cb:2e:a0:
ea:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A2:CD:1F:18:08:CB:F8:CC:76:35:F8:9D:D9:B1:2F:CD:6C:C9:A2
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:74:a5:bf:f6:7c:79:2c:64:1e:30:71:d9:ca:12:52:1b:2e:
df:60:5b:3f:53:20:ca:53:85:39:ce:fe:4f:2a:dd:bf:32:76:
5d:0d:35:96:3c:e3:b2:36:aa:8e:c1:b4:24:a2:1d:02:fa:91:
a8:a0:8d:71:21:96:7d:5a:36:e5:a1:61:9d:71:c6:55:ec:5a:
52:e4:7b:94:fa:30:ac:b1:25:77:b3:7e:78:87:0a:0e:89:8d:
5e:15:ae:fe:3a:b7:a3:3c:76:07:fe:91:58:78:87:18:87:48:
6a:fe:e9:2b:4e:0b:b6:8b:91:ba:84:6f:34:1b:fd:68:e2:96:
31:d3:7c:f9:9e:15:9d:6a:a6:9a:51:6e:a5:09:5a:b6:2a:46:
20:e0:f8:14:d1:1b:f8:2f:c7:ef:e8:0b:27:1f:6d:6a:e1:27:
25:1c:24:03:85:de:dc:c3:ed:99:71:04:bf:ed:b6:71:42:f4:
4a:54:8d:5a:45:d5:d9:40:23:64:82:9f:6a:0c:ce:b6:67:65:
17:c6:90:d1:f8:92:fb:0e:9c:dd:02:53:2c:8d:7e:41:a9:d1:
9e:f6:7f:45:93:b4:28:32:05:b4:c8:33:af:e2:a4:4c:d6:0d:
64:48:46:2a:c9:2d:4e:9f:f1:78:f6:49:bb:c1:b4:3d:15:ea:
a3:a8:1e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:28:23 2025 by rpki-client