Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: 7Hrt73onOfuZxOj+P1zdHRyiZuxnjb40nTOmITX6UOk=
Subject key identifier: 40:04:2D:B7:63:9C:40:D5:C9:BD:B3:7E:3C:09:22:1A:FF:4D:E6:A0
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 0198D54E96160DE32651D56399558168AE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 047E
Signing time: Sat 23 Aug 2025 05:02:33 +0000
Manifest this update: Sat 23 Aug 2025 05:02:33 +0000
Manifest next update: Sun 24 Aug 2025 05:02:33 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: Atr+o4xOP0R9s/fiRdX6LbD5ynE4Y6hnMYbkg37vTqc=)
2: R82wyiQ6WGXDZ2qmyfic2Rx16EQ.roa (hash: q3ADHp8TbEdc9vO2jFfoJST4ALm7hMCr9dPnLoGdV9o=)
3: msFkodHiiLA7yYTUvQfg1svzo58.roa (hash: 8maRWfYNuUoSqjA1l1zPbJ9FPRTfD/7OAF7wZnEEN9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:96:16:0d:e3:26:51:d5:63:99:55:81:68:ae:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Aug 23 05:02:33 2025 GMT
Not After : Aug 24 05:02:33 2025 GMT
Subject: CN=40042db7639c40d5c9bdb37e3c09221aff4de6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:00:20:56:b2:62:64:e2:7a:5b:1d:e5:45:
5b:b9:d8:01:02:2f:7e:0e:1f:12:10:a0:33:68:3b:
2d:9e:7a:c3:61:9b:60:e0:15:cd:45:05:fa:a2:c8:
fb:fc:a6:b5:8b:c1:19:32:94:bf:e0:cb:58:23:0f:
71:9f:ad:cd:f5:70:35:85:a9:9d:8f:81:80:bf:52:
ba:38:85:93:f7:b9:54:8e:32:f5:eb:d4:0b:65:9e:
9c:e9:5e:24:5c:4b:fc:31:38:39:1e:eb:9e:b6:b0:
0b:7c:1d:6f:d3:e6:9c:c4:50:a9:9a:0a:9e:fd:ff:
f4:b2:4e:91:92:34:ca:11:8a:9f:57:b4:93:5d:ce:
1c:e6:d7:70:e9:98:7e:4f:75:3f:d2:f6:f7:6a:b8:
c8:8e:b3:e0:54:28:d5:33:3e:32:19:82:83:81:48:
67:b0:9a:6b:9e:a7:29:a3:5a:67:6b:76:44:52:bb:
82:a9:ee:7c:bc:7d:16:5b:09:da:65:93:cd:b3:55:
74:20:d2:b5:2c:70:ff:8a:10:a0:c7:21:b9:db:a1:
f0:15:a5:48:80:b8:02:7f:fc:a9:e3:6b:8e:b3:fd:
d6:34:bd:14:ee:ce:e5:dc:12:6a:75:c2:f4:61:ca:
55:7e:90:27:82:ee:32:9f:dc:9e:d6:a8:48:5e:b8:
29:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:04:2D:B7:63:9C:40:D5:C9:BD:B3:7E:3C:09:22:1A:FF:4D:E6:A0
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:aa:6e:14:95:3c:bf:eb:37:c0:1c:54:17:2e:ac:0b:75:a8:
79:eb:34:b3:0c:39:ea:7e:28:2c:35:26:0f:54:b5:7e:1d:85:
5a:fe:9d:ff:28:01:30:40:b7:3a:2a:bc:13:af:7a:d7:bd:4a:
1d:d0:93:da:d1:a1:48:8a:e1:d3:eb:a8:34:28:59:a8:c6:89:
f7:6d:56:96:1d:23:2b:0e:84:40:13:44:e0:02:f4:5c:94:5a:
36:64:88:e5:50:6f:7f:37:d2:05:56:66:0a:16:df:8d:67:f7:
59:48:9d:6e:38:38:51:8a:1c:7a:2d:7c:1a:ef:34:e9:a7:6c:
94:ab:5f:35:fe:cf:f9:18:ac:bc:49:98:97:de:18:e4:97:a3:
a2:a1:98:d4:12:c7:ed:0c:c9:51:f8:48:07:b0:28:e8:18:a1:
e1:3d:a2:bc:1a:80:19:8c:a0:36:05:17:44:6a:d7:f4:28:bf:
2c:f9:50:6f:4f:58:d4:ff:f6:60:5f:a1:61:d4:d9:17:de:a3:
84:8c:55:df:9e:75:de:f2:ed:47:a0:f9:ef:6a:22:4e:91:82:
a4:c5:d2:e2:8e:7a:1a:07:74:82:1c:03:f0:b9:dd:a9:d2:ac:
72:3b:77:fc:39:79:74:46:01:dc:a1:e6:0d:cb:6b:6b:d2:c5:
fa:19:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:59:31 2025 by rpki-client