Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: 44X5mMQ1yzxEvWv2hb2961D5oVLg4Ix2dHcHrsmf+3c=
Subject key identifier: 42:66:D8:66:F9:CA:03:60:AC:3C:38:D0:3F:3B:0C:12:3A:E1:78:1F
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 0198D5F1728660416D19F54A6833F6F25B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:27 +0000
Manifest this update: Sat 23 Aug 2025 08:00:27 +0000
Manifest next update: Sun 24 Aug 2025 08:00:27 +0000
Files and hashes: 1: 6D6NbO4mpX3571YePb7wBqCbgBc.roa (hash: 360JpGFWi4fwKRE3FPgMGW/rJz0k3wsKNSQFnzGnVZI=)
2: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: yp0F7oScuBdjko3Be9c3f76462uXT/rg4/vO31wk7OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:72:86:60:41:6d:19:f5:4a:68:33:f6:f2:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Aug 23 08:00:27 2025 GMT
Not After : Aug 24 08:00:27 2025 GMT
Subject: CN=4266d866f9ca0360ac3c38d03f3b0c123ae1781f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:02:65:03:dd:8e:cf:97:43:c0:92:0d:b6:
68:eb:42:81:40:b7:35:42:88:d9:3c:42:c0:2e:90:
71:59:1e:04:e0:73:b4:7f:ba:d7:e2:ae:58:82:79:
28:1d:22:07:86:0f:96:d4:d5:55:39:86:c0:3a:1a:
4b:b0:77:90:74:9c:7a:c1:14:db:b9:59:2b:2b:59:
b8:cf:4c:de:cd:23:e0:c5:d3:79:73:89:1a:2b:35:
ca:8b:d5:37:57:10:5e:a2:08:8f:9b:97:23:8d:4c:
77:0d:99:a3:b4:12:2d:b6:e4:16:c5:e6:95:ff:41:
e7:5f:04:e0:a2:43:66:3d:a4:92:32:c1:b2:05:81:
34:45:de:bd:08:90:1e:60:2f:12:2d:4c:b2:d8:96:
e5:ed:32:b4:0b:48:56:61:78:dc:c8:16:b5:02:26:
ac:e0:52:2f:79:e5:96:29:8f:20:d3:78:72:9f:ae:
45:21:69:db:89:54:ff:c5:0a:5d:a6:0f:30:a9:ac:
ee:dc:b1:43:a0:b1:bf:6e:4c:fd:8e:5c:45:16:63:
1c:b4:4e:26:ef:c7:93:d2:5b:43:5b:94:1b:ed:de:
90:e7:30:44:58:44:6e:87:12:1f:dc:80:63:8e:54:
91:0b:6d:82:13:ff:cf:d6:b2:e7:90:9f:f1:a8:8c:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:66:D8:66:F9:CA:03:60:AC:3C:38:D0:3F:3B:0C:12:3A:E1:78:1F
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:27:42:1d:0a:70:a3:c1:8a:ac:15:ff:e0:cb:3d:8e:51:9a:
37:29:80:0e:6a:b1:c8:18:13:92:96:9c:40:a8:06:c6:8d:85:
da:1e:35:41:4a:0b:74:39:61:82:13:81:38:b0:32:ec:fe:92:
c3:80:99:5d:82:2a:81:6f:36:1c:64:f4:50:7d:f7:81:bc:26:
44:b2:bd:b3:80:0e:69:e0:f5:d2:01:73:b6:bc:4b:54:0d:3a:
99:8c:c8:f1:d5:a7:bd:1e:a7:64:22:67:8b:bc:d9:33:95:bc:
f0:6b:a7:3f:74:3a:67:d6:72:64:9f:d4:56:32:57:44:6f:13:
2e:3c:9f:50:a8:2d:32:2c:18:af:2f:2f:62:ec:a4:dd:d0:61:
dd:eb:3d:a9:54:66:77:df:19:2f:0f:11:e4:e2:bf:03:6d:1e:
70:b7:41:de:1d:3e:fa:2a:32:72:9f:ac:57:2a:e4:a0:95:97:
c3:ac:92:89:1f:26:de:cb:ec:19:3f:43:24:4d:ec:eb:af:92:
57:d1:6f:df:38:23:69:1e:09:ba:5e:bd:2b:71:e9:8c:78:92:
be:e2:5b:f8:d6:e8:4b:be:90:cd:58:f6:36:cf:b2:13:6e:e3:
12:cc:6f:f3:ff:d1:14:ef:b1:7d:c7:80:75:10:1b:bd:d8:d7:
d6:46:2c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:20 2025 by rpki-client