Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier: O+nckD9fQv3jTHXJ5gtUE3Xq1Qt6+nG2z7eHy5dAeo4=
Subject key identifier: 92:79:52:F0:62:3E:C8:E0:3A:7A:58:F4:0D:9B:43:B6:17:8D:5D:D8
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 0198D73B21B0B58BF77E59EE53452BED4E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 14:00:33 +0000
Manifest this update: Sat 23 Aug 2025 14:00:33 +0000
Manifest next update: Sun 24 Aug 2025 14:00:33 +0000
Files and hashes: 1: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: fAUTuhOeD95a0kZ8RRQS8d794T3VBuaLzO5b68dE6eE=)
2: I9GqI9GxRbg5gyNw2oYeQXtgJJg.roa (hash: IdZbo1C2DnUJiJSpOjjTPKnvp3frNBJygc4FMjTeWHU=)
3: OJHrSjDn0A0xOyeisC7fOP_zy4g.roa (hash: 4mrlovUy+cBI29r4SEJkRQxz3HoEwjM6nDvfGvlxWBU=)
4: ie70DJhDrGYxNNPSAG6BpAZrtxY.roa (hash: HiOIeBO8KrrORXl70BQK8AAzSZ8zCob2hQpjThQB7t8=)
5: tr4Wz-5rQhPo47mTFs_LgvHDl8s.roa (hash: PZGVkTuh77FvBlVCnDa38AVdteMzJ1COvOQXzBoIS0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:21:b0:b5:8b:f7:7e:59:ee:53:45:2b:ed:4e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Aug 23 14:00:33 2025 GMT
Not After : Aug 24 14:00:33 2025 GMT
Subject: CN=927952f0623ec8e03a7a58f40d9b43b6178d5dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:76:1b:7a:f2:6a:85:71:59:34:e0:1d:fa:
c2:f6:d5:85:f2:60:1a:ef:fc:91:82:73:ac:d0:b0:
38:17:ab:78:62:c7:12:f7:eb:97:ac:2e:99:d1:19:
d0:0e:74:63:00:90:3f:0a:36:11:4a:07:d2:5a:5a:
8c:a2:5b:74:c0:23:3f:92:16:7b:b3:b1:3e:21:be:
f9:b7:91:38:42:35:47:2d:82:02:31:18:89:d0:72:
f0:26:44:b7:b0:23:f3:80:b6:82:8b:b3:90:40:0f:
97:ae:fa:e9:1f:4c:4a:23:83:52:43:94:50:33:04:
b8:22:d5:82:28:d9:58:1b:8a:5a:30:66:9d:ca:7b:
15:ba:9a:2c:06:af:35:57:cf:18:b6:8f:19:65:bd:
92:99:87:e8:16:83:52:76:e0:64:10:c4:60:11:a7:
66:eb:0f:db:1d:08:e0:ad:d7:59:0f:49:ef:05:99:
93:e0:11:eb:b8:1a:b6:63:54:79:2f:3a:5f:16:e3:
2e:f6:20:60:03:17:e6:ce:59:3a:b4:60:51:b7:c5:
1c:ce:01:60:f0:25:a2:91:c3:55:28:fe:ba:e1:84:
47:cd:63:78:90:a8:65:47:b0:22:8f:33:b0:78:97:
b5:bf:e4:80:9d:92:88:9a:e9:a4:3c:08:cf:30:65:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:79:52:F0:62:3E:C8:E0:3A:7A:58:F4:0D:9B:43:B6:17:8D:5D:D8
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6d:74:96:96:7f:dd:04:06:c4:5f:59:f2:fc:bd:cb:1e:07:
98:35:59:34:31:ff:86:34:99:00:d8:ea:89:cd:b0:cb:2c:a0:
56:da:b3:e0:ae:67:79:00:8e:31:82:dc:bf:fb:b2:c3:9b:7e:
20:02:9e:bf:d3:90:07:de:d2:86:68:6d:62:c6:86:10:02:65:
fd:1c:e3:68:7c:bb:86:8e:4e:11:44:5e:db:28:b5:8e:36:7a:
d3:d1:74:d2:92:54:28:8b:15:db:b1:08:34:f9:04:13:de:8a:
9c:7e:bf:43:e3:18:34:07:20:48:cb:74:f4:34:b2:45:96:87:
9c:ae:a2:23:33:71:85:9b:ae:c3:0d:b0:88:a2:1e:f2:03:92:
73:71:be:eb:d9:ba:da:d7:5a:b5:02:66:9a:31:73:79:cd:83:
88:3d:0e:b6:34:c4:4a:82:e4:99:7a:06:7c:2d:38:6e:72:15:
1d:71:e2:83:05:69:a4:c0:17:52:5b:31:10:2a:64:3d:7b:16:
13:4a:92:d8:42:46:49:19:60:d3:54:41:f0:b9:8e:b0:d6:64:
bf:d1:aa:c4:09:a9:33:28:57:a5:0e:53:a9:f1:b4:f1:0c:5a:
69:6d:e2:66:79:b9:eb:1c:65:62:78:88:ab:40:fe:b5:9e:a9:
d1:5e:ad:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:25:02 2025 by rpki-client