Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: /objqYCR6j+O6aIrmPVSu/1G7/x+wTz8ZQdITA9Yo+Q=
Subject key identifier: 75:13:D6:B4:9F:C2:A2:88:0D:E8:AC:B3:9B:6B:D0:11:27:30:E4:E6
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0198D5159B77A1A0920B20F4CA038580BC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1212
Signing time: Sat 23 Aug 2025 04:00:19 +0000
Manifest this update: Sat 23 Aug 2025 04:00:19 +0000
Manifest next update: Sun 24 Aug 2025 04:00:19 +0000
Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: tywM67PwEsatHsc8JyqSbWaeyAt5Fv5x9vEaAk1XLvE=)
3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=)
4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=)
5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=)
6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=)
7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=)
8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:9b:77:a1:a0:92:0b:20:f4:ca:03:85:80:bc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 23 04:00:19 2025 GMT
Not After : Aug 24 04:00:19 2025 GMT
Subject: CN=7513d6b49fc2a2880de8acb39b6bd0112730e4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:af:45:e9:8d:af:1a:c6:f1:ce:89:a1:33:
04:bc:5c:2f:df:a1:c8:ce:5e:f8:a2:54:9e:72:42:
72:63:28:56:63:b4:27:cd:9f:5b:37:62:aa:8d:d4:
0b:fb:9a:db:a1:4e:51:af:0c:49:e7:e0:39:27:17:
ff:ed:fa:31:bf:1d:f2:ce:3a:5a:f5:b2:bc:53:f1:
49:33:92:20:84:a4:3c:0b:31:eb:8e:cc:95:4b:62:
33:64:42:c0:60:ff:58:0b:f5:4c:ef:a6:c5:4e:d0:
71:b6:ad:f9:96:ab:a0:8b:d4:49:39:45:8f:4e:83:
b6:47:52:e2:da:18:0c:71:d6:9d:5a:6a:2f:1e:1a:
a6:f9:e2:2c:24:6b:64:e1:ad:68:67:23:41:1c:82:
5d:a2:69:22:31:0e:ff:23:19:ae:a2:7e:36:72:be:
51:a7:3d:4e:f2:c9:06:b9:cd:b1:b0:12:c7:c7:42:
33:28:46:2f:f9:55:3d:94:2b:d5:9e:da:12:30:67:
cc:a6:e2:0c:d1:9a:8a:66:fc:ca:1a:ae:68:24:6a:
da:dd:2b:84:57:b4:07:f2:c2:e4:71:6a:c2:02:d8:
f3:c4:1d:b9:e7:4c:a2:56:ee:c2:1e:a4:59:41:9c:
48:2c:e1:54:09:0c:77:bb:f4:a4:ae:c1:88:c0:2d:
9f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:13:D6:B4:9F:C2:A2:88:0D:E8:AC:B3:9B:6B:D0:11:27:30:E4:E6
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1a:55:ab:2d:17:e2:9d:b3:9e:8a:e6:35:95:42:6b:f5:2e:
42:41:49:4c:0c:a5:82:91:0b:83:4b:df:3c:30:e5:14:d5:d2:
c4:47:2c:21:c2:0a:66:19:63:82:7d:ee:33:6f:4a:17:5f:de:
08:fd:43:a3:26:2e:d7:cd:9b:d1:e0:e3:8a:44:ce:a6:1e:75:
2a:2f:68:3f:07:fe:68:06:81:07:8f:ec:3e:e7:13:88:bc:06:
0d:f1:ef:01:de:c3:41:7a:de:af:71:8b:55:76:19:b3:93:31:
a6:b4:e2:2a:bb:e9:7a:a4:31:bb:6a:48:70:8c:8d:bc:cb:6e:
c2:42:5f:d9:71:4a:0a:1f:92:9e:28:b4:37:7a:41:ae:14:75:
3a:aa:0e:20:50:42:8a:2b:e1:db:69:aa:f6:46:5e:a3:f6:b6:
85:b9:c7:09:3a:03:ff:81:c1:12:3e:44:ad:e5:36:cb:2a:50:
c0:3c:36:07:88:1c:e5:55:10:52:20:b6:f4:1a:6c:a0:de:86:
55:96:2e:10:a6:50:ae:30:ce:6e:15:26:ac:c8:49:bd:73:36:
ae:7f:a1:ff:46:f7:c2:c9:20:cd:8e:eb:dc:a7:18:bb:f8:3a:
06:f2:5c:28:e0:2f:af:13:ee:ac:1b:0a:d8:a9:a5:a8:09:4e:
2c:b7:89:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:13 2025 by rpki-client