Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
File: 3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft (raw, json)
Hash identifier: jDv5nUPjgwCEnGbMua6zovCUglFXtFa2VMBlNRSNeDk=
Subject key identifier: 46:A1:23:2E:4A:4D:31:48:87:E3:D0:0C:87:4C:B2:A6:92:46:4E:EB
Authority key identifier: DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6
Certificate issuer: /CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6
Certificate serial: 0198D7060B2793F8B4FD0C11C76C8839A77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
Manifest number: 017F
Signing time: Sat 23 Aug 2025 13:02:34 +0000
Manifest this update: Sat 23 Aug 2025 13:02:34 +0000
Manifest next update: Sun 24 Aug 2025 13:02:34 +0000
Files and hashes: 1: 3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl (hash: eGzSE3+uXvMv3cZBq0pz+0YAVKVoKcdOJr14JbvZxxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:0b:27:93:f8:b4:fd:0c:11:c7:6c:88:39:a7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6
Validity
Not Before: Aug 23 13:02:34 2025 GMT
Not After : Aug 24 13:02:34 2025 GMT
Subject: CN=46a1232e4a4d314887e3d00c874cb2a692464eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:f3:47:4b:be:1e:3b:de:4c:07:ee:58:24:
37:6c:7d:d0:69:85:b2:67:cf:fd:b2:e2:9d:c9:f3:
03:23:64:3b:c4:5d:e7:c0:18:06:d4:74:d2:3a:03:
d3:9a:8d:f7:db:88:9a:d7:ef:7d:a3:f7:71:50:bd:
51:de:6d:ab:34:56:58:2d:88:32:fd:ac:a3:4b:d2:
12:e8:b5:4d:39:1b:77:c9:95:52:a2:1a:3e:c9:05:
8a:d6:35:eb:b6:f6:5d:c0:e8:f8:f1:b0:97:66:70:
b9:d3:64:84:cc:d3:51:8a:77:f4:56:79:10:0e:74:
1a:36:32:5c:62:46:06:81:57:e1:2b:c0:2c:9d:86:
37:33:62:31:80:94:eb:d6:f1:82:1f:7c:ee:5c:ca:
3b:ad:97:1d:0c:60:0c:82:1a:14:d3:23:c3:33:c9:
b4:18:e0:e1:d4:a4:db:e9:79:de:77:4f:34:ae:24:
b4:b9:75:ab:32:f9:ea:50:62:95:a3:56:9e:d5:49:
a9:d0:46:32:c0:d0:48:c3:52:a6:6b:dc:4d:d6:41:
2b:c9:b1:1c:a9:59:91:bc:63:ed:19:02:96:42:49:
4f:33:44:f6:b8:49:d9:7f:22:df:8e:77:44:89:ff:
6e:26:77:56:7e:21:80:77:ce:5d:79:f2:30:ea:28:
0f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A1:23:2E:4A:4D:31:48:87:E3:D0:0C:87:4C:B2:A6:92:46:4E:EB
X509v3 Authority Key Identifier:
keyid:DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4e:7d:bc:0e:c1:2e:4f:81:34:8a:ef:b7:58:57:48:f2:da:
8e:b1:29:96:d7:75:6a:dd:a0:57:ed:23:67:3a:d5:7a:c7:c4:
57:66:7d:8b:4d:27:f5:3e:87:ce:c9:90:78:2d:d7:51:a2:3a:
dc:1a:59:f9:dd:27:8e:31:07:be:53:ce:c4:19:61:be:e8:7b:
45:c7:dc:b3:c4:1a:8a:0c:79:ea:55:fe:36:39:86:39:0e:9e:
8e:e5:c2:3f:e6:52:7b:7f:e8:90:01:d4:2c:d9:ce:1b:ce:f1:
82:26:37:bc:13:90:24:f4:02:62:49:ee:f1:b1:9f:21:36:11:
fa:52:c7:f6:55:1f:11:c6:0d:46:f0:d9:08:67:6a:86:a9:b5:
06:8d:b5:c0:db:53:b5:9c:9d:83:9a:38:2e:a9:38:96:1d:ad:
4c:04:20:91:1d:d2:36:52:cf:22:10:12:c6:2d:29:3c:00:ef:
1f:a7:30:28:ba:d8:5e:94:90:6e:7e:be:aa:a6:27:dc:c9:31:
a2:93:22:06:23:7f:fc:b8:ef:b2:a7:18:2b:1e:d0:ab:59:c0:
80:1e:ce:0e:cd:2a:81:8a:e2:b0:c8:e6:ba:02:44:fa:37:3c:
47:06:03:74:9e:3f:41:7d:91:fd:0e:dd:28:37:df:b6:50:d4:
39:3c:52:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:31:15 2025 by rpki-client