Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
File: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft (raw, json)
Hash identifier: BLOFJTJjdm8MDN9vCqyWKULw+2WzgWvHZfS5jLL/41o=
Subject key identifier: 93:EB:35:4F:24:E8:24:F6:7A:9A:38:0D:A8:22:50:E4:44:72:C1:D3
Authority key identifier: DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
Certificate issuer: /CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Certificate serial: 0198D4E016495341B18B63F55026020CE04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 03:01:52 +0000
Manifest this update: Sat 23 Aug 2025 03:01:52 +0000
Manifest next update: Sun 24 Aug 2025 03:01:52 +0000
Files and hashes: 1: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl (hash: Q1mhweCRr3F99Jpb4Zp4Vzif8BJiQ7pBCuv7+d5HPKs=)
2: RZ4xmYAJVpVRLfuQVLFQGXgbrQE.roa (hash: aFDGOW4Qu6MNo6mtPQc9Lw/jPxt+lcHM9Vl2lskSnz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:16:49:53:41:b1:8b:63:f5:50:26:02:0c:e0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Validity
Not Before: Aug 23 03:01:52 2025 GMT
Not After : Aug 24 03:01:52 2025 GMT
Subject: CN=93eb354f24e824f67a9a380da82250e44472c1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d1:ee:89:8c:49:27:3f:c0:71:3a:f7:b7:56:
8b:90:80:e2:40:07:be:41:0d:0e:45:b8:70:3d:ec:
03:6c:4b:f0:5d:82:3e:7a:8c:1e:c4:26:94:3d:ff:
a1:7b:9d:73:d5:b2:95:f1:fd:07:d1:fa:4a:40:ee:
4b:e8:6b:3d:e0:1d:26:9c:df:f1:29:a6:1c:7b:fb:
f5:99:d8:7d:93:18:03:dd:3d:be:49:34:3f:4d:90:
b2:c4:f8:93:b9:fc:76:9d:57:8f:d9:30:44:3a:c1:
c1:60:95:99:6a:1a:13:ad:23:b9:af:71:e4:a3:88:
4a:96:99:a9:aa:85:3e:38:79:da:14:ba:e8:fc:0e:
1b:58:3d:65:c6:79:9f:6a:ca:b3:a8:c5:77:ba:14:
1b:0a:5c:4b:9e:fc:d5:ee:5d:d0:aa:b0:80:03:7f:
82:1c:90:d7:cc:85:60:58:c9:39:b8:21:99:76:55:
79:02:20:39:0e:a5:c7:b8:12:60:da:33:55:62:ba:
7e:b6:aa:99:c6:dd:79:04:18:61:dc:cf:1f:b3:aa:
7c:f5:61:6e:2f:d4:bc:a3:5d:c6:b3:56:8c:b6:d8:
f7:32:25:a4:25:52:4e:5e:51:7c:39:3c:6b:27:51:
1d:1f:41:7e:70:35:13:b2:a1:0a:d8:b4:96:97:5b:
16:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EB:35:4F:24:E8:24:F6:7A:9A:38:0D:A8:22:50:E4:44:72:C1:D3
X509v3 Authority Key Identifier:
keyid:DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4b:29:94:7e:5a:46:b9:c8:00:08:ed:9c:a6:9e:33:6f:37:
33:07:84:30:d1:92:bb:9f:a3:e5:ae:90:93:8a:ad:27:1f:36:
12:aa:a2:97:73:2b:56:16:d7:e5:a8:ff:3f:bc:6e:8b:7c:ad:
11:93:a5:51:17:e6:00:f6:b9:69:f1:47:7f:e8:54:95:47:9e:
3e:96:89:06:7e:d6:de:5e:4c:f1:1c:e4:ca:cd:e9:e0:24:7b:
3a:7e:86:e8:19:2d:d5:bc:ed:1a:41:ca:98:3b:ba:e7:05:bd:
a9:14:6d:00:81:ea:51:b4:9c:3a:51:d4:6a:f4:90:4f:cb:e4:
7f:c5:d2:18:ba:ac:ec:bd:35:17:8e:32:56:ab:a5:a3:b0:fa:
94:2c:1b:c3:85:f9:77:7c:bc:5b:61:f5:16:7a:f6:fe:9b:1c:
b6:1b:94:ae:de:75:6d:7a:40:46:e3:bb:96:f9:07:50:2b:7c:
9c:fc:f8:bc:11:6d:9b:6c:1f:10:67:15:63:91:8a:fb:16:31:
48:fd:ab:26:b2:67:f1:55:ab:df:5c:15:20:5b:ba:4b:e7:94:
c2:85:01:5e:bf:5b:92:cf:46:97:02:2e:fa:4c:b7:cd:a5:b9:
36:38:e1:df:6b:15:c5:90:c4:f5:36:52:a9:3d:cf:16:04:2e:
ee:5e:d4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:58 2025 by rpki-client