Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
File: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft (raw, json)
Hash identifier: h8fCUC8BFhDFaHzMqUEKyMaQpW+N4mkf7uUl0qVtMUA=
Subject key identifier: F7:93:82:C0:0B:A0:4E:51:29:88:61:39:62:91:55:29:15:FF:C0:D4
Authority key identifier: DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
Certificate issuer: /CN=dd189621d2fa872166e6a05ee47a7d756243e919
Certificate serial: 0198D660CD13D315D5821B6DC7792826F3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl (hash: 3NCftHyacbH/zap0Ck00Xq3627jfdcRgTdWv2tTmhsA=)
2: IbWAiMp66FrrjCqKdb7PL52gYqc.roa (hash: ZvFHwkqxl1Y1UkoOepo0AdZCTZvXFwyowt6Ue0U0AQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:cd:13:d3:15:d5:82:1b:6d:c7:79:28:26:f3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd189621d2fa872166e6a05ee47a7d756243e919
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=f79382c00ba04e51298861396291552915ffc0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:95:53:f6:81:74:3f:cc:a6:25:16:6b:46:
f2:85:13:c7:8d:7d:dc:82:ef:9b:48:49:f1:e1:d2:
8f:09:32:03:71:18:14:fd:12:cb:3c:96:13:ae:16:
7b:33:c9:44:05:76:69:1e:25:62:e0:3b:f4:f8:2f:
0d:f4:51:76:3b:74:38:5c:6d:45:6f:67:26:73:46:
ed:08:4d:71:7c:41:08:b2:a0:ba:83:46:16:90:d6:
fe:69:c8:4c:0e:4f:2d:49:91:f4:27:f9:9a:7a:27:
5e:da:47:57:84:c9:e0:0d:f6:53:88:f3:8d:81:7f:
90:5b:2d:ee:56:dd:1d:c9:9d:ac:63:2b:74:91:aa:
86:72:db:ae:4c:66:a1:1c:30:95:90:c6:28:e5:e7:
12:4f:d9:1d:f0:20:2a:bb:98:31:dd:da:45:95:53:
bf:b0:7b:c8:ae:2e:d7:1a:1d:3b:15:a1:77:f2:a9:
d2:b1:47:00:00:8c:c3:f6:18:2b:fa:c1:28:f8:c3:
ee:df:c2:e0:68:d0:9b:31:4e:da:4a:ae:a0:c7:19:
a5:6d:90:2c:49:f9:28:a2:f4:8f:c8:da:cb:6b:6a:
5c:95:a4:f5:d7:fa:e9:98:6f:25:1d:a3:86:d0:0e:
b9:43:36:14:0c:f0:92:38:4d:7f:90:18:0d:f4:09:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:93:82:C0:0B:A0:4E:51:29:88:61:39:62:91:55:29:15:FF:C0:D4
X509v3 Authority Key Identifier:
keyid:DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:43:bc:1a:2e:65:da:a8:05:ff:02:f6:07:24:20:2c:9b:b5:
32:ce:d3:ae:e4:f9:35:ae:be:56:86:5f:39:8c:10:23:3f:f4:
da:ff:27:e4:18:01:4b:7f:1d:41:04:af:0f:4c:b7:d0:06:b0:
51:eb:5c:ba:79:02:d3:52:c5:99:27:38:7b:1c:f6:9c:0f:a8:
87:39:1b:a5:49:7b:5c:73:f5:8d:eb:be:1c:bf:75:09:fa:5b:
3e:64:67:82:22:04:af:04:36:02:c7:7a:bd:15:77:de:65:e6:
da:53:2a:3b:12:33:6c:0d:e5:b5:2c:91:42:71:1f:71:9a:81:
55:a2:b0:37:23:d1:32:63:4e:1f:0b:df:1f:dd:62:74:a9:9c:
b0:f0:f2:31:43:81:90:b7:bb:98:d7:f7:d0:07:0f:86:7a:b4:
df:78:5c:06:a3:5f:37:d0:48:6b:f9:4a:c9:dc:db:9a:85:1d:
b8:45:bf:f1:dc:ea:27:ab:c8:59:a1:54:d3:2b:27:37:0c:6f:
1f:d6:be:9f:95:3c:33:ff:f6:92:56:1a:9a:c9:9f:d8:e6:cf:
63:6f:53:e9:54:56:22:9d:37:ca:95:df:7b:e5:1b:18:b2:5c:
0e:9f:86:07:d4:5d:02:53:a1:ef:8d:4f:de:74:e9:21:fa:bf:
81:10:74:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:46 2025 by rpki-client