Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
File: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json)
Hash identifier: rseQ4KgKdDFA/ZWaGWfbheoT4E26xzEC7sxSpigiqhE=
Subject key identifier: 9A:2F:20:A5:27:A4:50:42:F8:73:A7:9F:69:FA:4A:78:5E:C1:56:07
Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592
Certificate serial: 0198D4A83ABB5D0D69184E53A6A3C654FB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
Manifest number: 0425
Signing time: Sat 23 Aug 2025 02:00:51 +0000
Manifest this update: Sat 23 Aug 2025 02:00:51 +0000
Manifest next update: Sun 24 Aug 2025 02:00:51 +0000
Files and hashes: 1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: 3xEtUGnh2ZFS6VpWPm6QpQrRUfY4qDoOk3glI6MbOJ4=)
2: 8W-Z7iZTKA-3rkNjiAd5VURXMsw.roa (hash: 2BY/rA9giuFltjXSROUw0wjIihHos+N8ZqL5OdXbUVw=)
3: SiGDnp8oSt95ArckPVGAAWtJUNs.roa (hash: j9ZTEJfSb12eUtJGUY9GVfUETUmyTkhHBnRZ+wXplM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:3a:bb:5d:0d:69:18:4e:53:a6:a3:c6:54:fb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc327af32a98492757b200ea040db24ec3136592
Validity
Not Before: Aug 23 02:00:51 2025 GMT
Not After : Aug 24 02:00:51 2025 GMT
Subject: CN=9a2f20a527a45042f873a79f69fa4a785ec15607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:8e:16:77:54:c0:49:0a:98:90:fa:da:bf:
78:d5:79:7e:26:0b:eb:1a:6e:8c:a1:d2:33:ac:94:
2e:17:0f:9d:7a:85:6e:a7:10:45:14:b4:a4:5b:5c:
6c:95:4d:bc:50:ad:97:0a:bc:4b:87:ee:92:02:79:
08:eb:6e:80:63:23:08:69:c2:14:82:01:fa:c7:bf:
fb:83:2f:31:0b:62:c7:51:32:ce:a9:c1:de:42:7b:
61:a6:c5:b6:10:48:81:8e:15:a4:10:39:90:9c:e7:
f4:77:25:d6:02:3e:2c:e0:6f:04:15:b9:9f:9b:11:
04:6e:99:b2:7f:da:f1:75:5d:d4:f6:6e:fb:f1:74:
ec:02:b4:3c:c7:ba:e0:c0:f1:5e:d7:a4:f7:74:2a:
58:ef:52:11:29:78:56:70:e3:01:05:62:b0:e0:65:
14:1c:05:52:25:6e:3c:d1:14:6d:bb:93:43:a6:a2:
ea:bc:2b:af:d8:4a:55:3e:c9:7b:85:7f:30:ca:e2:
79:8d:f1:c1:54:ea:da:0a:c4:49:77:67:96:68:36:
fc:35:eb:37:31:0a:22:9c:cb:69:b2:c0:36:de:c7:
d6:a7:3f:d7:7c:78:41:f5:a9:5e:fb:15:bf:fe:08:
fd:7e:81:96:ca:4d:f9:5d:e3:d2:b3:e1:b4:d7:2e:
2c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2F:20:A5:27:A4:50:42:F8:73:A7:9F:69:FA:4A:78:5E:C1:56:07
X509v3 Authority Key Identifier:
keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:03:99:a9:8e:4d:23:b1:3b:8d:34:38:62:b6:d3:24:84:7e:
43:70:1d:8f:eb:c4:14:c1:c0:ec:2d:c4:ff:79:91:53:b8:b7:
b7:b4:a3:dd:56:e9:8d:84:09:02:ea:82:e5:69:7f:4b:84:ae:
43:87:04:1e:8d:9a:44:27:4d:7d:2f:ce:49:94:61:05:38:5a:
e6:62:13:98:9f:64:85:8d:67:2f:11:df:85:9b:a3:f0:7f:68:
3a:f6:3b:d0:9a:d5:29:75:d6:65:36:b2:c0:4f:aa:81:9c:a9:
33:19:e3:e5:e8:3e:31:eb:8a:10:27:f6:46:3e:16:cb:73:bf:
8a:e9:27:5d:68:c9:e5:8a:54:4a:06:49:d6:30:9a:65:be:f1:
8d:a8:4c:68:c4:7b:57:cc:af:89:63:fd:b0:49:b9:c2:e9:42:
fc:f4:d5:99:bb:b5:c2:48:d0:83:9b:47:cb:ec:5e:5a:85:43:
12:83:13:1b:32:4f:57:6e:5d:28:6a:57:43:f2:e3:4e:e2:ff:
4d:a7:5b:e9:b1:d7:ba:fb:10:2a:d7:6a:7e:6b:d2:fd:14:c4:
52:83:1b:f1:7d:c9:33:1c:78:a3:91:99:ee:af:d5:93:1c:c8:
b7:14:a1:91:dc:bd:6b:0c:47:f6:75:8d:7b:a2:35:0a:53:94:
ad:10:c9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:48 2025 by rpki-client