Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier: I00Ld6HTz6V9hw3kaf01+gtBF7g8fnORmPykjMGdGws=
Subject key identifier: 9D:3B:A6:73:CF:5E:C6:CC:D5:EB:41:D8:51:F3:6D:E0:A6:1E:DB:21
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 0198D583CFFF4DF573C6AADD53799A0CD5C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number: 11C0
Signing time: Sat 23 Aug 2025 06:00:42 +0000
Manifest this update: Sat 23 Aug 2025 06:00:42 +0000
Manifest next update: Sun 24 Aug 2025 06:00:42 +0000
Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: UMOKDSn0qGlC0LZzYhiLsyA0JqKqaFtKMSwgJFwItbo=)
2: RNkRhX3yK-TkHlh9YWWsykby_Dc.roa (hash: vp+4Wych+XwTPbr9Bjf9hawO/Jnhv86eVFw3KntPsww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:cf:ff:4d:f5:73:c6:aa:dd:53:79:9a:0c:d5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Aug 23 06:00:42 2025 GMT
Not After : Aug 24 06:00:42 2025 GMT
Subject: CN=9d3ba673cf5ec6ccd5eb41d851f36de0a61edb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:56:b7:34:11:c4:c4:a7:a2:4b:87:ed:3f:
d8:b7:b0:18:71:89:73:20:a5:4a:e5:bb:fe:bb:e3:
e4:38:c8:ac:ac:1c:65:3b:10:0f:23:0d:dc:81:3e:
bb:f5:8c:ee:a1:ba:38:6c:38:a1:b9:db:04:e1:cf:
4a:a4:69:51:ca:01:01:59:f0:c9:1d:84:be:58:0b:
ab:da:35:5e:11:34:47:c4:93:fa:33:bc:0c:45:e5:
44:9c:72:17:2e:de:94:05:7f:63:6b:1d:83:55:cd:
5c:05:42:a0:e6:94:13:e9:54:8c:ab:c3:db:17:6a:
4b:2f:21:9f:65:aa:26:a5:53:8d:d7:35:e6:df:00:
c7:5f:fa:b1:7c:5a:11:e2:37:42:f5:34:51:f9:eb:
6f:11:79:fd:17:d7:4d:06:dd:a3:ed:1b:75:b0:34:
d3:d0:f9:dd:54:e4:5d:0e:31:68:18:77:f1:7a:c4:
1c:62:66:ec:d3:99:78:93:05:e3:96:7f:29:57:a5:
69:e3:75:6b:3b:d0:55:11:83:f2:2d:ba:f2:ec:df:
df:f5:62:b7:ad:19:94:3e:f8:1e:64:d0:c0:5c:18:
f1:97:8b:cd:e8:14:b9:4d:c4:e3:8c:f7:e8:5c:be:
ea:2e:8a:94:b1:4c:66:6c:34:ac:34:21:40:83:61:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3B:A6:73:CF:5E:C6:CC:D5:EB:41:D8:51:F3:6D:E0:A6:1E:DB:21
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:db:33:03:ae:67:21:5d:c7:0a:3e:77:74:ba:44:ce:d7:61:
85:d3:0e:d2:65:c7:97:09:e1:e8:e6:db:67:c8:04:af:04:e2:
0d:34:b5:94:ae:53:30:43:50:90:9b:b8:ec:ef:82:a7:50:8d:
04:2e:af:7e:40:24:e6:82:3f:03:b0:78:13:8b:d4:2b:a7:74:
52:40:fd:60:2c:b4:67:05:9f:95:63:37:9a:e9:14:42:14:5f:
3f:ed:dd:e7:6e:9b:4c:17:ac:a4:fa:ee:4a:19:d2:1d:72:f1:
ad:2e:86:16:f6:84:17:43:8e:b3:c2:5e:a0:09:28:47:44:ff:
65:93:56:d3:4a:e6:fe:a3:f8:5c:25:34:f5:0f:e7:69:64:3e:
58:0e:1c:5d:b7:7f:a3:4c:b5:1b:69:64:bf:c3:e1:65:3b:c0:
70:21:39:15:fa:64:b7:4b:50:53:b8:8a:a7:cd:b4:6f:2b:92:
a9:ef:91:76:c1:eb:d5:fd:90:a6:c3:dd:18:c9:19:4f:20:88:
13:dd:60:a3:36:d0:3c:0c:64:f8:d5:b2:b6:87:d8:42:e3:dd:
3e:66:5d:3d:0b:1f:78:b6:66:31:a4:0e:08:cf:4e:52:c9:2a:
93:2e:50:8a:ff:87:1b:05:94:15:f1:8f:de:37:0c:9a:70:56:
45:ce:1d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:36 2025 by rpki-client