Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
File: 3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json)
Hash identifier: YvFKTZ3WsJ8k17lOh0+hMx8RWlg8s4Om5OKX6GRC/bA=
Subject key identifier: C5:86:11:20:7A:E6:D9:31:C1:D3:E9:35:91:92:35:3E:5B:47:FD:32
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 0198D7A8A132C81CDEFFC2CBB688908707A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
Manifest number: 1667
Signing time: Sat 23 Aug 2025 16:00:09 +0000
Manifest this update: Sat 23 Aug 2025 16:00:09 +0000
Manifest next update: Sun 24 Aug 2025 16:00:09 +0000
Files and hashes: 1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: aB1QI1qg91hafXRM6libUsOBeS6JF7JTMSdbAFX8pb4=)
2: 6_bKweqWY78IaehR0T3SZdY9CQM.roa (hash: KTUilrEpIDNHWpqzD3ibc0/4lbQNOJc1mmLoHR7N/88=)
3: B_dytxxDPRteZVWj_5GTAT9t8BE.roa (hash: T860Q+FQFzVWcjsZOe8dk9hmlbNKGPeSX6qfmd4Fuhk=)
4: kP_UonF_HmGL8CdyIq9MPQXOuRU.roa (hash: LRVYEE97/wxDRdlTMPL7LRHkb4g/QhRynslxAPVZx0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:a1:32:c8:1c:de:ff:c2:cb:b6:88:90:87:07:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Aug 23 16:00:09 2025 GMT
Not After : Aug 24 16:00:09 2025 GMT
Subject: CN=c58611207ae6d931c1d3e9359192353e5b47fd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:a8:81:59:1d:c6:9b:c3:82:0a:e6:f3:33:
d4:50:6f:3d:d1:8c:5e:a3:4d:ae:5c:e3:a4:7f:fb:
53:a3:67:fb:71:9d:7a:9a:6b:66:49:89:24:20:53:
a7:a1:3c:2f:c9:14:52:1a:47:43:fd:bc:62:f0:da:
35:8f:a4:95:92:95:b8:18:19:6d:21:25:e2:df:29:
80:a2:e0:38:9f:67:80:dc:22:9c:b0:5d:14:3f:60:
0f:e6:14:1c:9f:c7:f1:01:70:7e:38:a1:6d:a5:4c:
38:6c:2d:35:d8:b8:05:de:d8:56:ef:23:b0:fe:54:
b6:9f:52:94:35:97:c5:d5:eb:f3:e2:2d:ca:e6:25:
2d:65:b2:76:6b:94:17:33:09:98:89:9f:a5:ee:f7:
58:3f:51:f9:17:c0:e7:46:12:06:cc:a3:ba:0e:0e:
11:e2:36:8e:b1:7c:ac:18:48:3e:6e:1e:68:40:b2:
59:90:d2:b3:a3:ec:30:6b:31:92:86:f8:de:cd:20:
2f:7b:60:6b:e3:bb:8f:1d:01:3d:ef:18:be:e9:a2:
a9:7c:5f:16:d4:23:77:27:ee:d0:52:eb:d8:f3:e2:
0a:41:9f:08:8b:8d:dd:d7:e5:20:7e:44:7c:54:46:
c3:97:16:03:0b:49:46:fc:66:92:bb:00:15:6a:d4:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:86:11:20:7A:E6:D9:31:C1:D3:E9:35:91:92:35:3E:5B:47:FD:32
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:11:13:cb:a3:ca:28:75:18:42:45:94:19:34:79:76:48:d3:
7f:43:12:0c:4d:fc:6c:07:27:ae:1f:8a:30:4f:13:66:3f:2c:
7d:46:3b:33:e4:c7:dc:a1:77:0a:82:5a:ab:2a:98:27:b4:16:
6c:b9:3d:bc:7b:51:71:33:56:34:9a:80:cf:87:f8:c5:ed:e1:
de:fc:30:14:15:32:ea:86:d3:89:8d:15:e1:2a:cc:d6:82:96:
8a:90:cd:37:ee:66:8a:a3:36:4d:d7:23:46:45:0f:b4:72:b8:
42:3e:f1:82:23:0e:92:56:85:b8:dc:d5:24:7a:fb:0c:1d:64:
a9:08:93:bb:bb:bf:9f:b4:76:8f:9a:75:8d:da:16:0c:47:c0:
03:b1:11:89:90:a9:d7:81:6b:75:22:ce:b2:50:57:ad:d8:60:
74:4a:f0:39:d8:53:6c:17:e3:39:86:8e:65:95:d2:10:00:09:
a0:9b:9e:5d:2d:a8:1e:5a:ee:45:2b:6c:cc:20:d8:09:4e:b5:
8f:fe:95:4f:d1:96:ea:22:28:34:ae:b0:12:23:2a:53:bc:78:
c8:0f:53:19:11:31:5e:cb:3d:47:a7:14:f5:a5:53:a2:36:88:
56:c9:62:87:09:3b:68:d9:76:de:41:18:c8:7b:95:45:51:81:
25:78:23:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:57:05 2025 by rpki-client