Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: AtbpnFdJL0EV3vU4wnuLQmHgiHybQcackAODExlYoB4=
Subject key identifier: 23:0B:2A:4A:82:3D:4E:57:90:38:55:60:9D:56:D0:05:16:E0:2B:51
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 0198D583EDD4F6CA897CC535889EB37A18F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 0F8A
Signing time: Sat 23 Aug 2025 06:00:49 +0000
Manifest this update: Sat 23 Aug 2025 06:00:49 +0000
Manifest next update: Sun 24 Aug 2025 06:00:49 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: KHixkT/oM7MKh3FAR1hSWz5zENeoSzt+exfk8ZvkNhI=)
2: M0CEGpqdnFyhH05u6ywrw5xpjxw.roa (hash: Da8bL20Ezk/7GnIViJo/xS7eFj2lqLDIbA2oioZuSt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ed:d4:f6:ca:89:7c:c5:35:88:9e:b3:7a:18:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Aug 23 06:00:49 2025 GMT
Not After : Aug 24 06:00:49 2025 GMT
Subject: CN=230b2a4a823d4e57903855609d56d00516e02b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:a9:1f:21:4c:97:76:be:02:ce:a6:e8:26:
87:a0:bd:30:47:54:4c:a1:da:7b:87:06:fb:93:da:
99:2f:a2:e5:38:aa:39:fd:43:d8:0f:8d:c9:a2:45:
5e:47:f4:ed:3b:b2:67:77:d6:87:9b:a4:b4:2c:ae:
e5:28:ca:f4:f5:4c:f0:af:91:09:e2:d1:e5:b0:ba:
59:75:15:54:f5:75:ae:f9:be:90:89:0b:5e:09:65:
53:16:20:4f:2a:fd:94:69:15:4a:da:9f:fc:c1:04:
c9:db:2d:80:87:b5:1d:91:5e:c5:0e:d9:5c:8d:e7:
db:4a:fa:10:48:c5:d8:4b:ad:08:13:7e:56:1c:06:
6a:28:85:6b:b7:60:11:2a:92:d5:1b:09:62:2b:61:
19:7a:29:4a:59:51:0a:f6:cc:16:79:f4:45:02:47:
7a:d5:b5:84:18:cd:cc:05:2f:a7:8e:f5:8d:19:af:
9a:6d:73:89:c3:c5:53:10:f5:b1:d3:fe:8f:54:1e:
32:a7:29:74:3f:1c:c2:58:9f:d0:80:87:77:b3:02:
05:70:f4:bf:2b:4e:b7:1d:f4:39:89:a8:5f:33:87:
97:0e:14:ef:7c:57:c2:a9:ef:5f:32:5d:b4:ea:4d:
5e:63:54:65:cb:24:0f:6c:0d:aa:72:57:77:07:5c:
d9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0B:2A:4A:82:3D:4E:57:90:38:55:60:9D:56:D0:05:16:E0:2B:51
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:87:fe:45:d1:10:84:78:8d:12:a8:a3:80:39:a6:76:bb:bb:
29:5d:a8:fb:1d:46:a8:21:ac:8b:87:a3:16:09:92:5a:34:a3:
f7:03:d8:55:51:c1:77:be:49:a3:54:a1:08:48:75:e1:06:b7:
be:1b:f2:66:d3:ba:b8:7a:2c:a0:cd:cd:3c:e8:9a:ab:04:a6:
71:70:64:b9:84:55:1b:c9:ef:14:85:7d:76:9e:1e:6f:52:0f:
f4:3d:d4:b5:86:ba:d8:cd:8f:b5:44:22:25:c7:bd:7f:87:6f:
7b:38:0b:8a:f5:e9:64:3a:02:39:b8:62:e6:cd:32:3c:a2:5f:
ef:fe:4d:64:6e:4b:49:e2:d5:a1:0d:ea:60:8b:4e:48:1e:6e:
10:63:86:8c:37:2c:c2:ab:60:bb:2f:53:b6:68:e0:c3:29:7f:
c4:3c:e3:06:7b:be:a9:af:32:b6:ec:25:d3:0c:7b:1e:6f:2c:
5e:6d:8f:26:15:b7:2e:67:5a:af:c7:61:bf:cb:dd:e3:ca:ed:
7e:26:c9:81:42:12:84:de:91:b9:1c:e3:66:dd:e4:cf:dc:0d:
8d:1e:ab:4f:03:b1:ec:f9:d3:09:08:cf:e3:01:83:c6:48:55:
d8:77:a9:49:ed:8e:15:0e:90:64:72:5e:45:77:a2:e9:c0:1a:
f0:b0:02:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:06 2025 by rpki-client