Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
File: 3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json)
Hash identifier: L5jwi2G4ORF3UjQtl2Wf9Ooj00GhGNhKSmIXB21q9X8=
Subject key identifier: 83:47:06:79:17:66:A5:55:73:0D:AA:52:BA:FA:5D:BB:F9:00:B7:22
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 0198D65EFFDEF083823CB1906CAB7CC07E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
Manifest number: 65
Signing time: Sat 23 Aug 2025 10:00:06 +0000
Manifest this update: Sat 23 Aug 2025 10:00:06 +0000
Manifest next update: Sun 24 Aug 2025 10:00:06 +0000
Files and hashes: 1: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: yEEhL3E3TucrySXR4h/e8HQcfnG7ny/1OZCPd+syLAQ=)
2: Fo3iE_kBXV_uZG324P37hp7JHlo.roa (hash: vTWsg5KZNwkHAURrc4HY59QeytyAW5MDAtvE7QlOAAc=)
3: PMns1VOsYgwIE00G-YHwyc8YaK4.roa (hash: ED57tbjfzXLiNIVc9VMOh/zC76BTvelIP+1X+Po1CHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5e:ff:de:f0:83:82:3c:b1:90:6c:ab:7c:c0:7e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Aug 23 10:00:06 2025 GMT
Not After : Aug 24 10:00:06 2025 GMT
Subject: CN=834706791766a555730daa52bafa5dbbf900b722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:65:3b:4e:7e:03:2a:63:b7:81:9c:ba:31:60:
2c:fb:f8:2a:ed:b9:92:b6:59:35:00:3f:34:59:72:
eb:fe:28:59:06:5d:c4:10:fc:4e:72:10:16:4d:30:
d0:3f:6b:06:65:8c:c8:0a:12:1a:94:0e:b7:49:fc:
f0:b9:4e:23:9d:12:21:43:7c:a1:80:91:d3:6f:10:
33:8a:6a:76:a0:64:4e:aa:6e:9d:39:74:1a:a1:ee:
47:6f:81:74:4c:ec:05:ff:8a:31:ed:60:66:23:09:
db:21:00:06:96:bd:89:81:61:0e:e0:5c:fb:f2:cb:
1d:50:9f:5b:68:fc:50:c2:0b:e7:da:22:a2:fe:c1:
ae:85:9d:48:6d:e4:d2:3a:58:80:25:06:f4:c5:b6:
95:c7:76:72:7a:1d:ad:0d:2e:42:2a:2e:44:cb:63:
af:3e:4b:69:e6:69:82:e8:15:b7:07:74:a5:e3:c7:
a1:de:4d:63:81:f6:d7:be:e6:f1:eb:32:10:68:23:
61:3d:d0:1e:1b:92:52:81:16:bb:fd:65:8c:3b:aa:
12:1c:69:ce:20:39:21:66:35:75:06:e6:52:6c:b3:
18:09:30:df:41:9e:31:be:41:e7:a7:75:8d:03:60:
ad:c2:02:01:37:e7:a3:be:b2:a7:3c:2e:c5:af:2c:
6b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:47:06:79:17:66:A5:55:73:0D:AA:52:BA:FA:5D:BB:F9:00:B7:22
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f1:14:87:5e:fc:e5:ee:df:bb:eb:b7:df:ea:fc:93:38:71:
04:f4:28:e0:fb:cc:e0:e6:64:f5:21:70:29:4f:13:fa:57:52:
f4:86:de:af:e7:42:ff:f4:f3:3c:e9:85:ec:32:c5:5d:cd:d7:
82:75:7d:a4:ca:1b:d8:b9:48:8f:c2:82:55:b6:82:a3:43:4f:
e8:ae:04:e5:45:c9:7a:a3:95:c4:ae:f2:2e:39:7c:de:21:ff:
43:d5:9f:71:83:6a:40:fc:d4:42:50:c1:3c:84:7f:75:d2:f6:
b5:ae:24:eb:a5:1c:9a:61:02:a2:3d:98:a7:03:2d:00:00:4e:
91:e1:90:41:1f:dc:eb:3e:da:6f:a4:38:17:b9:c0:15:36:cc:
1f:55:4c:c1:24:b9:d0:a9:4f:a3:b1:52:0d:15:05:b2:4a:8b:
5b:13:51:84:29:c9:ea:05:f4:9f:95:23:2b:fa:24:77:3e:2b:
15:22:76:08:83:c0:79:7e:e1:d1:7a:19:bb:de:48:d8:a0:5d:
89:b2:92:ae:14:36:26:74:6b:18:82:f9:6f:da:89:c7:cc:67:
5f:98:f5:c0:3c:29:ee:81:5d:f9:a7:0e:1d:2b:eb:83:56:2f:
93:f2:31:53:5b:85:23:11:9c:7b:22:0d:8c:8f:e5:7a:a5:65:
5b:c5:77:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:37 2025 by rpki-client