Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: XrKci3Wn8RUXEAk1I3z2lSLjwV5yqNovN8Z60o0q6mI=
Subject key identifier: BC:84:DE:44:E3:D0:B8:FB:77:D6:1E:CF:31:91:4E:8A:3F:E9:9A:45
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 0198D51578C64FDC6577BD8A179AE4F01D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 0CD7
Signing time: Sat 23 Aug 2025 04:00:10 +0000
Manifest this update: Sat 23 Aug 2025 04:00:10 +0000
Manifest next update: Sun 24 Aug 2025 04:00:10 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: ni62lolZaBj0DTMnjG7Q/gGesa/bj2dzGtWVpTArI9E=)
2: prKzcOdb2gq7whbRtn2j18st210.roa (hash: TLxvtHMzXY4Lge96VJalh1cOFoXVbLd9V2/rCUHRN3g=)
3: zxXrJCgqT81AO-d4vpKnqCQPEGE.roa (hash: WugT5zcayhMYDSTA/kF2PldTCBDPYZiQht5Wqh3j65Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:78:c6:4f:dc:65:77:bd:8a:17:9a:e4:f0:1d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Aug 23 04:00:10 2025 GMT
Not After : Aug 24 04:00:10 2025 GMT
Subject: CN=bc84de44e3d0b8fb77d61ecf31914e8a3fe99a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ef:c2:82:c5:15:aa:1d:2c:32:51:b9:33:87:
d8:4c:d6:80:00:40:45:a4:d4:cc:4e:f0:e0:ce:f9:
66:25:17:fc:31:7c:20:3c:d2:5e:33:a7:2c:1d:af:
c5:99:77:5e:cd:fd:37:0e:f5:8a:35:61:df:b0:d7:
24:b9:31:53:c4:56:38:54:80:05:b8:73:83:56:f7:
93:1e:d9:eb:fe:f3:c4:14:8c:c9:b6:23:16:16:27:
11:58:e3:3d:a6:63:f0:6d:9d:03:2f:54:5b:69:14:
9f:87:22:9c:72:93:6f:70:bd:d8:5c:00:a0:68:d0:
22:46:d0:45:75:50:4f:b7:03:57:b4:23:0f:8f:d2:
eb:3c:05:6c:30:6a:58:a4:3a:bd:9f:ca:73:c0:d5:
b5:b9:78:8a:54:16:73:ce:e4:15:fb:f8:62:cb:e1:
50:6b:1d:96:b0:09:66:99:49:26:46:55:19:04:8c:
22:d3:9c:7e:55:6d:c0:85:d5:e5:8a:1d:69:d4:94:
96:25:7e:2d:59:d1:df:aa:8b:27:cb:b5:bd:d1:42:
47:07:ca:49:42:af:f9:dc:b6:d6:4c:2a:28:ec:69:
b0:cf:eb:0b:d5:e7:87:17:17:53:2b:a6:f5:66:6a:
3a:e0:68:db:b9:40:14:2e:6f:71:5a:15:26:ae:fd:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:84:DE:44:E3:D0:B8:FB:77:D6:1E:CF:31:91:4E:8A:3F:E9:9A:45
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:03:ad:60:1b:39:e0:31:bc:3b:d2:ac:31:a2:d9:85:86:89:
49:cf:33:30:88:ce:fd:ef:1f:98:77:f5:95:85:e4:97:07:b3:
e2:b2:f3:40:f7:8c:a0:d6:48:81:ed:57:4b:69:5d:b8:5e:e8:
3e:99:30:f0:f8:8f:96:1f:8b:d1:64:40:70:3c:26:9e:d8:b1:
81:41:90:df:0f:ab:c2:2a:b1:bf:30:d0:f7:23:03:49:53:04:
f4:3c:23:cd:62:59:25:3d:2e:e7:8a:aa:d2:e1:45:52:51:06:
f5:d8:fc:73:c9:e3:7a:9a:a0:30:9e:73:e5:0b:79:e0:e9:9c:
c6:ca:dd:e0:a8:26:54:5a:27:1d:ef:1d:d9:8b:f5:3b:06:d5:
93:e0:a9:4c:c1:d0:ca:c5:f7:15:7d:74:f9:93:ba:6a:58:64:
f7:ab:24:99:ec:d4:d4:f5:2b:93:7c:f1:df:54:52:b7:2c:92:
91:af:12:3c:af:5a:3d:88:15:8b:d6:b4:e9:12:9d:cb:81:b5:
54:3e:d9:92:9c:f6:28:c0:0e:e1:b6:55:80:94:25:14:f4:14:
97:f9:be:dc:56:39:56:90:18:a3:b6:0f:2c:d9:51:ef:39:4e:
01:d8:d6:15:a2:11:96:86:0e:cd:1a:65:d2:28:9d:b3:3f:cf:
f6:86:a9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:38 2025 by rpki-client