Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
File: 3A4l4XpRaWkjpcApZnh0CarJqjY.mft (raw, json)
Hash identifier: pR4tWSo4Al0YLwmZSWb3q0HSuBXbTyNmnLsSLZnbSNo=
Subject key identifier: F6:40:C3:33:66:9F:51:B7:FC:01:DC:03:C4:33:3D:6B:D0:86:76:49
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 0198D472EA4D1AADCBAF49B80F97C28EB003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
Manifest number: 09CD
Signing time: Sat 23 Aug 2025 01:02:37 +0000
Manifest this update: Sat 23 Aug 2025 01:02:37 +0000
Manifest next update: Sun 24 Aug 2025 01:02:37 +0000
Files and hashes: 1: 3A4l4XpRaWkjpcApZnh0CarJqjY.crl (hash: gmTbk2h37P1cZKW5wGqDBVuEV06fC6m8HBAtYXNoHDM=)
2: WGy1cA3da99W4WDLy3MY4ZyczoU.roa (hash: SJ9b+hH7b3cVwCr6CT26WQO6ifaQhtn6CrsiD/nybF0=)
3: jkdGIndQz1w9lSn5gC2Ktns7PmQ.roa (hash: VwGNfeMCv18NN23Twwp0pPWxKthypMsuMJxPjN6yLC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:ea:4d:1a:ad:cb:af:49:b8:0f:97:c2:8e:b0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: Aug 23 01:02:37 2025 GMT
Not After : Aug 24 01:02:37 2025 GMT
Subject: CN=f640c333669f51b7fc01dc03c4333d6bd0867649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:05:02:99:eb:42:87:ef:05:ca:bc:e1:11:94:
c2:32:35:c5:e9:bd:0a:7f:e4:44:74:c7:18:65:3d:
aa:88:d8:d2:af:43:e2:8a:df:5e:83:48:0d:49:25:
e3:f5:5c:89:4f:05:5c:61:a3:c9:63:6e:b4:ec:fa:
4a:27:eb:be:db:71:3a:3f:c6:28:83:1b:72:96:be:
23:53:61:07:3e:ad:30:78:ee:a7:37:16:35:cf:43:
17:05:25:e5:18:04:11:bb:5d:3d:0d:49:8e:dc:9c:
a4:12:95:71:8a:79:0f:42:99:a6:35:bd:4a:99:b8:
60:fd:26:d8:7d:2f:11:97:7e:ea:1c:2f:41:79:5e:
36:a4:ff:7f:7b:06:56:63:30:72:a7:b8:fe:ed:2b:
2b:88:a8:e4:45:5a:59:28:f5:b6:22:96:ab:6f:0e:
53:3d:ef:d7:fd:ca:50:63:ac:58:72:19:0e:15:c7:
5d:5e:bc:35:8e:bb:a7:c6:56:b0:71:8d:af:cd:14:
e9:7e:23:70:25:88:2a:97:32:a5:ed:06:52:86:30:
eb:98:4c:07:f4:02:9e:1e:cd:5a:d6:e8:08:bd:d8:
88:75:aa:88:c2:c4:7b:fe:e2:2c:05:b6:6e:15:da:
45:10:16:87:95:93:9f:7c:28:fe:0a:47:e2:e6:a8:
9f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:40:C3:33:66:9F:51:B7:FC:01:DC:03:C4:33:3D:6B:D0:86:76:49
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8b:e3:c4:c0:ad:2d:20:9b:06:61:c2:00:19:d5:2b:34:40:
0c:27:33:7c:dc:5f:79:57:c0:93:78:79:3d:93:40:e8:2f:43:
6f:a6:78:cb:60:fa:42:e7:61:26:18:d4:00:d1:b1:f2:82:28:
4e:e7:a7:b8:8f:49:dc:af:75:a5:1d:96:d1:4e:ab:4c:6c:e8:
f7:19:0e:4d:8c:9b:34:a9:0d:8b:5b:7c:c6:9f:2f:aa:55:b2:
22:b1:c1:98:a2:46:85:41:d4:bd:8d:85:da:62:21:cc:94:93:
c8:97:84:b6:4e:c4:ad:6f:bc:f1:58:6e:38:8b:e6:4c:60:a3:
04:01:a7:59:76:26:bd:6a:74:56:82:a0:56:f0:4d:4b:26:4e:
64:3e:96:e5:9e:60:1a:19:24:e9:ac:c5:6a:6b:50:72:8f:72:
6d:4a:76:f9:01:ed:eb:e2:8e:08:59:ce:85:6f:61:24:09:ec:
bc:b1:5b:35:19:d4:92:fb:8a:15:e5:7f:25:da:c3:9c:19:4f:
4d:e3:38:66:63:f8:2a:ae:70:6c:55:da:98:6c:6e:54:ee:1f:
31:b3:6f:88:2c:53:4c:02:7f:e4:1d:d0:0b:5d:7a:9e:4b:88:
90:48:24:9c:a7:45:25:71:2c:7f:dc:4f:9f:e3:c7:5a:10:ab:
b9:d9:bf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:26 2025 by rpki-client