Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
File: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft (raw, json)
Hash identifier: yeyH0c+StwBFt+nubSXkyhk+ocrMsQ/GmYQAL9ACVU0=
Subject key identifier: 86:EF:4C:F4:1B:15:75:6B:E0:77:6A:32:5A:2B:6F:7E:96:34:F6:81
Authority key identifier: DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
Certificate issuer: /CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Certificate serial: 0198D6611E6EBCDB934B64E3A9D9F55244F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
Manifest number: 1305
Signing time: Sat 23 Aug 2025 10:02:25 +0000
Manifest this update: Sat 23 Aug 2025 10:02:25 +0000
Manifest next update: Sun 24 Aug 2025 10:02:25 +0000
Files and hashes: 1: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl (hash: G0dnU6EmLxrRXMMPXQHJZssKPnIsYnzfBYUvri+Gd9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:1e:6e:bc:db:93:4b:64:e3:a9:d9:f5:52:44:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Validity
Not Before: Aug 23 10:02:25 2025 GMT
Not After : Aug 24 10:02:25 2025 GMT
Subject: CN=86ef4cf41b15756be0776a325a2b6f7e9634f681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:c3:c8:e9:89:2c:6f:52:f0:2d:c0:98:26:
57:c5:6b:fd:a6:ed:5f:ea:36:bb:66:78:0a:98:b6:
45:f4:60:8f:c1:3c:d6:f7:11:83:dc:7f:fd:d7:aa:
c0:0b:8c:e2:b8:15:2a:e2:4d:ab:98:cf:f0:00:ba:
ef:e9:5b:f3:e4:67:ca:b6:6b:85:41:8d:0e:66:16:
20:03:86:bf:f3:ba:63:20:9e:1f:4e:f3:77:c0:ef:
af:48:39:02:fb:6c:66:55:10:9a:e6:f5:92:5c:6d:
d6:b6:4c:23:e0:8c:0d:22:b6:68:a4:8d:9f:e1:d8:
ff:21:4a:19:5d:0b:bd:92:15:28:f4:1a:56:a5:23:
0f:db:a2:97:10:00:51:2f:38:35:0e:d3:6f:1f:54:
0d:88:b3:ea:f6:fd:da:d1:82:8d:bd:08:df:2d:66:
9d:d7:c3:9f:de:30:41:45:0e:97:82:6a:fe:e0:70:
db:1f:4b:0e:d2:8f:d6:e7:67:69:f4:02:6d:b9:06:
3d:38:6a:b1:bd:09:df:93:d7:fe:2e:2f:87:36:e6:
69:2a:5b:f2:fa:a4:d7:43:8b:a2:a2:fc:9d:e9:3b:
4f:e2:7d:96:c3:ce:9a:aa:7c:dd:85:3f:75:14:a8:
63:83:19:53:55:e8:ff:47:4c:e3:3a:29:69:73:32:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EF:4C:F4:1B:15:75:6B:E0:77:6A:32:5A:2B:6F:7E:96:34:F6:81
X509v3 Authority Key Identifier:
keyid:DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c4:d5:7f:b0:28:df:45:e5:1c:03:e6:b1:b1:6f:b1:24:32:
36:be:5c:55:11:b8:b3:49:02:ac:37:87:1c:5b:7b:cb:8b:19:
74:78:d1:c2:bc:51:32:53:d5:e0:ee:0d:d2:77:b4:0e:bf:92:
a4:04:e7:cf:1d:b6:57:e5:57:ed:d4:24:e9:7c:ba:06:b0:44:
7f:6e:2d:8b:ed:7e:bc:32:0e:82:46:b6:ef:a9:62:20:bb:eb:
29:64:0f:be:be:87:6a:f7:53:b4:72:ce:96:01:93:af:4b:35:
a7:53:1e:e2:7b:b6:e2:e0:2f:73:6f:f6:5c:cc:10:e9:3a:72:
d6:40:65:e7:c0:0f:97:cc:59:06:a9:54:dc:cb:95:05:cc:43:
39:2c:f1:c7:f2:74:be:5b:ba:12:af:56:1b:8a:8b:c9:36:e5:
e5:14:40:29:ac:64:4b:33:1e:5b:49:c1:7b:00:52:65:12:9c:
08:87:ed:dd:b3:0c:15:29:14:a1:8e:dd:fd:dc:c0:ee:90:4a:
08:bf:ba:19:63:93:9a:3e:de:d8:a1:18:18:99:8b:ce:55:14:
85:58:da:1d:65:88:f7:c1:7d:cd:42:63:32:0a:27:78:f2:35:
94:92:cf:1c:98:12:1b:9f:ed:f3:94:ea:e8:48:a5:48:4d:d1:
2c:54:fb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:10 2025 by rpki-client