Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: LzHkAdT2fVcDZJQd0L05HQG+n2LegDFGj302aVvqMsM=
Subject key identifier: 25:04:6C:81:AA:1D:BF:BF:D5:C4:2E:29:0E:10:99:E6:D5:BE:F3:DC
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 0198D4A844F738DC00CCD29CE0398F0467DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0B6F
Signing time: Sat 23 Aug 2025 02:00:53 +0000
Manifest this update: Sat 23 Aug 2025 02:00:53 +0000
Manifest next update: Sun 24 Aug 2025 02:00:53 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: zVu787bvTpvIlZewo1uzjM2y5cvROFsZaJ3K1DyHOYQ=)
2: GTryjErQ-QvKOHELwraRwqDQoQ4.roa (hash: GN3kBbzA5jk8ZVZGy0p/hEuJ6JzyB6iMj6OE8Sf6qCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:44:f7:38:dc:00:cc:d2:9c:e0:39:8f:04:67:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Aug 23 02:00:53 2025 GMT
Not After : Aug 24 02:00:53 2025 GMT
Subject: CN=25046c81aa1dbfbfd5c42e290e1099e6d5bef3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:23:43:53:f5:02:b4:9a:47:05:ff:79:ed:
a0:c4:66:21:e3:0f:7b:85:04:dc:eb:08:4f:27:e2:
29:de:c6:f5:50:49:dd:3e:1f:9a:8a:f5:de:1f:a8:
fb:8c:42:80:9d:7c:96:a5:7f:a1:42:1a:e2:92:2e:
e6:b4:e0:43:9e:41:b0:1b:75:c0:4a:a9:6d:c6:b0:
d1:54:88:33:57:01:da:61:3c:c1:c9:7e:cc:04:35:
b4:92:31:d8:60:01:5e:a8:9d:21:a1:0f:0e:72:fa:
a7:96:50:0d:ca:b2:42:d8:d7:7f:03:91:60:17:19:
3f:c4:64:85:42:8f:e7:29:60:52:44:eb:9f:26:4a:
a6:78:4b:a0:e5:d2:67:0f:9d:02:3a:f0:88:a6:ee:
b8:be:85:fc:26:43:c3:ba:63:99:2c:a6:20:fe:c6:
9d:6e:b9:d2:09:13:56:dd:da:d0:2e:1f:7b:43:03:
c5:f0:81:64:35:e7:b4:93:a4:8a:27:6b:13:02:86:
dd:a5:4e:0c:f1:7a:6b:b0:36:67:5d:57:98:43:ee:
53:c9:a6:64:d2:2f:45:06:53:ac:44:c3:c1:23:4f:
18:29:ad:ed:2c:78:b3:d3:b8:18:97:02:d9:1c:1c:
d6:71:9a:0c:a4:1c:1d:b5:06:e5:48:69:d1:49:8a:
d4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:04:6C:81:AA:1D:BF:BF:D5:C4:2E:29:0E:10:99:E6:D5:BE:F3:DC
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:25:7c:a4:7b:e3:8b:e1:8f:a6:ae:4d:90:3b:d9:8c:f7:2e:
07:4a:dc:75:8b:96:44:e4:43:34:1a:63:c0:55:e5:f2:2e:7a:
53:a5:b7:27:69:9b:d1:1c:35:f3:ca:3b:bd:d7:29:25:de:1a:
d4:97:c1:7a:76:9f:06:c5:6d:57:4c:4b:77:17:5b:4c:3e:6a:
86:1a:f7:69:9c:22:00:4b:7a:b8:28:c8:7a:cf:be:c1:57:99:
b5:de:1e:fb:41:cf:b2:c7:e5:66:d9:f9:1e:17:4b:9e:2d:64:
3f:be:c5:e0:11:f3:f5:0d:d6:30:84:30:b3:05:76:e4:6e:51:
25:d0:74:00:2f:2a:e6:f6:00:31:68:f3:f8:16:ee:74:8f:96:
06:62:bf:9a:dc:22:f8:aa:20:77:5b:a5:f2:7c:be:ab:5e:8f:
9e:e0:95:31:4b:c1:31:aa:2d:12:5b:1a:08:3b:5d:9c:81:82:
f4:d1:1f:7a:25:32:d2:02:15:83:46:4d:85:a4:e3:7f:96:71:
2d:18:81:84:a4:7c:d4:bf:0c:ac:46:29:18:2e:f6:d0:1c:b8:
f4:e9:64:88:5e:f0:fb:b7:1e:b4:08:1d:85:4c:a5:b7:e0:3a:
65:ef:79:95:c6:f4:42:74:65:40:1c:18:bc:20:55:be:03:7f:
4f:82:2c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:23 2025 by rpki-client