Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier: eaBtwwmcm8gH+RrCg7aRAM5ckH/UidXD3lwiorP1SFE=
Subject key identifier: 72:2D:E2:F2:0A:C8:1A:3D:1B:7D:A1:45:7C:11:BA:4B:06:FC:CC:7A
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial: 0198D472C34DE347FC4B53FFFF6AB9798B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:27 +0000
Manifest this update: Sat 23 Aug 2025 01:02:27 +0000
Manifest next update: Sun 24 Aug 2025 01:02:27 +0000
Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: MZT+m0Bd/jdrUERO4voI+e7gZ4ANvfsxYfKd18XEb/Y=)
2: 4aMsThSQ8pto7QNh_kFB73sOXo8.roa (hash: HEBFusOcNgQfdZRF0U/he5dAzzkTri4ddTPSMK0+giU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:c3:4d:e3:47:fc:4b:53:ff:ff:6a:b9:79:8b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Validity
Not Before: Aug 23 01:02:27 2025 GMT
Not After : Aug 24 01:02:27 2025 GMT
Subject: CN=722de2f20ac81a3d1b7da1457c11ba4b06fccc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:b9:aa:62:4b:60:29:7a:b4:cd:5f:63:a7:
a7:6e:af:b4:1f:61:ae:4d:b2:8e:2b:3d:06:48:72:
57:5d:1e:ae:54:ad:97:a4:0e:cf:85:88:ab:cc:21:
af:ec:56:bf:da:df:71:2c:e5:fd:c8:54:15:fe:c5:
4c:e0:86:10:b3:3c:ad:32:11:9c:62:d3:43:31:5e:
06:48:e1:d1:37:56:28:e2:39:ee:88:5c:b9:ef:76:
c0:fb:1d:d4:e4:3c:8f:42:30:05:d2:1a:c3:2b:80:
cf:f6:cd:aa:97:54:98:e3:39:85:89:d2:4f:4f:9b:
12:fa:74:94:59:5c:e5:3a:6a:8d:90:34:9a:bc:54:
da:16:ff:5c:f9:54:cc:9d:6f:dc:14:42:ff:ce:8f:
f2:97:83:64:8d:62:8a:cf:80:0c:0c:51:17:8a:c6:
21:56:0c:f8:4f:dd:7f:d9:de:65:5c:97:89:26:c2:
78:52:53:d7:5c:8b:6b:eb:dd:b6:ab:35:3c:cd:19:
97:db:4e:95:c4:7a:91:92:d6:21:be:de:de:da:7a:
4c:3a:03:25:58:f9:1a:e1:88:5c:29:39:78:14:f9:
b7:cc:c5:44:8c:d7:f9:9d:0f:bc:bb:b3:a7:6b:e4:
bf:4e:48:20:78:cc:94:42:15:9e:df:3e:f2:8c:2d:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2D:E2:F2:0A:C8:1A:3D:1B:7D:A1:45:7C:11:BA:4B:06:FC:CC:7A
X509v3 Authority Key Identifier:
keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2d:67:1f:47:72:ef:e9:ee:27:37:bd:3a:65:d4:a9:8c:34:
e1:3e:69:32:1a:9f:5c:e3:a5:89:2a:da:af:91:02:ee:45:74:
f7:06:63:4d:f0:37:d9:a7:83:bd:7b:2c:a5:b5:0a:81:9b:4e:
72:c9:82:2d:17:56:90:10:d8:be:01:2c:cb:48:d7:19:b1:58:
eb:4d:b8:d8:73:1a:08:6c:45:e8:31:4f:0a:b7:10:55:06:f4:
a3:c0:b4:c6:e0:28:98:56:f2:81:58:c4:cd:cf:75:c1:f9:b3:
ee:c3:64:28:e1:d8:d6:ab:b8:5e:f0:04:39:82:28:dd:b9:d7:
b9:c8:cf:3f:1b:b0:36:b1:fb:6f:89:e8:5c:df:ac:0c:fd:c3:
e5:c6:60:1b:6c:6e:61:23:02:d0:17:e6:3e:5d:5c:92:6d:39:
89:fa:d0:bd:64:ab:1e:62:d0:0f:9d:ef:4c:28:07:d4:6b:08:
eb:82:7f:6a:cb:6f:95:0e:5d:8d:e1:89:3c:3c:bd:fd:b9:cb:
58:84:31:71:86:dc:61:97:91:7d:ca:99:d5:fd:e5:1b:f5:fb:
84:c0:07:7e:d6:7a:d9:35:53:00:49:25:a4:76:13:59:e5:3d:
07:96:a2:c3:81:f6:98:d0:2a:23:f8:0b:c1:19:6f:cb:0a:fb:
44:8b:77:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:36 2025 by rpki-client