Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
File: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft (raw, json)
Hash identifier: pYitS8IVK6PE3e7/QHLpi9beI4j2t9VMF9N20VB/I+k=
Subject key identifier: B4:DA:6D:1F:D7:43:8E:1B:E7:AD:A3:2A:08:7E:0F:42:DB:F1:90:84
Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
Certificate issuer: /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Certificate serial: 0198D705A62816A14C8245411C9F3F8CF117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
Manifest number: 1654
Signing time: Sat 23 Aug 2025 13:02:08 +0000
Manifest this update: Sat 23 Aug 2025 13:02:08 +0000
Manifest next update: Sun 24 Aug 2025 13:02:08 +0000
Files and hashes: 1: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl (hash: D5ulO7bjEkGhe7kIBtQ7ESyrgnCy0M2kPvLSOgNfvEk=)
2: X_yuCbgOElk7t0Nndlrc9uLk_XU.roa (hash: zPioyhAie2r6Wx7GGJYyupW2bQRy/+no7AIsLRygNz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a6:28:16:a1:4c:82:45:41:1c:9f:3f:8c:f1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Validity
Not Before: Aug 23 13:02:08 2025 GMT
Not After : Aug 24 13:02:08 2025 GMT
Subject: CN=b4da6d1fd7438e1be7ada32a087e0f42dbf19084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:09:00:8f:3e:fc:b1:d5:e8:75:59:7d:18:
d4:7d:81:bb:97:2e:c0:26:53:e7:c7:d3:cc:c5:7d:
77:3c:2e:d0:ae:8c:6f:34:6c:17:4d:1f:54:fc:ea:
17:24:4c:2d:b7:3c:fc:d5:a3:28:7c:5e:57:e7:ad:
8f:d9:73:af:a6:e2:0d:bc:0f:2b:eb:de:d4:b5:e1:
75:c4:ec:b5:55:46:ff:be:86:48:33:cc:33:ab:c0:
71:98:47:25:51:e0:99:d4:ca:99:38:dc:25:50:7d:
38:73:2f:8e:ba:0a:37:94:a1:44:62:ac:86:2f:2d:
f0:20:da:88:4a:5a:ba:28:ab:05:7f:5f:22:9a:51:
bc:0a:4e:38:57:c5:91:50:47:e2:a5:47:ec:dc:f7:
5d:a9:ab:f6:5a:46:eb:60:96:dc:7b:af:bb:5c:82:
66:4d:f9:0c:1f:9e:c9:23:be:ab:0f:aa:61:79:62:
5d:59:4e:ce:c5:32:bf:6a:0d:b3:c0:ff:c6:a3:5a:
ee:92:16:6e:45:c6:5b:36:51:6c:c5:30:11:a8:f1:
9c:5d:f8:d7:4b:8e:02:41:1f:99:c8:e1:06:c0:44:
a2:fc:fd:45:07:e5:69:8a:17:33:fc:de:b5:99:68:
29:9d:77:dd:ae:4f:74:03:0d:6d:b2:e2:5c:8e:58:
07:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DA:6D:1F:D7:43:8E:1B:E7:AD:A3:2A:08:7E:0F:42:DB:F1:90:84
X509v3 Authority Key Identifier:
keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4a:1a:13:2e:e1:da:d7:ef:45:14:44:2e:33:92:ce:a0:1a:
85:d7:48:d8:6d:9b:89:88:f2:83:2f:00:47:07:eb:c1:67:ef:
50:39:47:7d:36:00:ab:7e:56:e8:a5:e5:52:99:14:93:06:00:
be:9e:2e:1c:59:2c:6d:53:69:36:2c:82:93:6f:b0:83:6c:c3:
e4:79:94:03:b0:a4:d3:15:96:1c:47:aa:0a:a9:bd:e3:31:f5:
17:23:dc:fe:4c:55:64:5e:b6:c1:07:bc:7c:53:88:47:cd:00:
31:29:c0:f3:ab:f7:9f:c7:94:ce:0d:ff:90:a0:16:9e:9c:a6:
2b:27:8e:90:85:9e:99:46:e1:41:86:e0:59:9d:be:9a:35:c6:
0b:67:4a:6e:59:96:87:be:65:d2:16:3a:af:aa:30:2c:be:85:
80:66:f3:55:9b:d2:21:51:07:85:24:65:92:58:49:45:1e:b1:
e9:5b:39:bc:ae:86:fc:a6:40:c8:43:27:77:ec:29:66:d5:fd:
bd:c9:ec:f1:0a:b2:e1:69:96:5d:ca:4f:51:7d:69:64:7b:b5:
87:dd:df:65:ac:35:28:88:09:35:b3:8d:7f:a2:f2:55:52:56:
5e:ac:c5:b3:76:25:3e:30:78:af:0c:5e:7c:11:0e:d8:1b:66:
15:6e:22:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:58 2025 by rpki-client