Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
File: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json)
Hash identifier: I8tix6zzpXxegCmlJSKU/hXWD3GrJGDTvKzOyWhUvWQ=
Subject key identifier: 17:87:CD:8D:CE:8F:36:D1:EC:4A:BB:FE:D2:DD:5E:61:E4:63:80:50
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial: 0198D4E024A041AF2B5DD5764B79745176CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
Manifest number: 0F87
Signing time: Sat 23 Aug 2025 03:01:55 +0000
Manifest this update: Sat 23 Aug 2025 03:01:55 +0000
Manifest next update: Sun 24 Aug 2025 03:01:55 +0000
Files and hashes: 1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: haUKK2z3ZrO2e/E+UT+eWSHDHAi4wEZV6MhaOSF0uqA=)
2: s199ikwEffBbz4N51o9Z93m71rk.roa (hash: Tb9twTEkz+iPQZdYGEiHKKRquApELQ9qVFqV3IE19gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:24:a0:41:af:2b:5d:d5:76:4b:79:74:51:76:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Validity
Not Before: Aug 23 03:01:55 2025 GMT
Not After : Aug 24 03:01:55 2025 GMT
Subject: CN=1787cd8dce8f36d1ec4abbfed2dd5e61e4638050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:36:97:57:47:06:89:42:be:dc:27:4e:1d:
c8:01:c3:69:d6:de:04:86:7d:96:62:67:b9:0b:32:
23:96:0f:44:3c:65:5b:dc:21:3b:80:53:e8:a1:bf:
99:ee:a4:c5:cc:d0:68:bc:d9:cd:61:29:58:69:50:
77:be:07:cd:79:44:d3:b5:ae:49:1e:c0:41:4a:cb:
aa:e9:a0:f4:90:47:37:1e:b7:5d:f8:d3:c8:5d:ee:
0b:8d:39:d0:5b:3f:0f:fc:ca:0c:f9:87:b0:da:d8:
7e:cd:ef:28:01:9e:be:ca:fa:5c:ab:36:53:c6:16:
82:76:30:3d:3f:be:43:72:e0:19:21:c8:70:d1:53:
04:84:07:04:f8:2d:db:74:0b:15:15:67:f6:87:2c:
1b:ca:08:40:99:04:c2:1c:44:64:35:3a:b2:63:e6:
45:b8:3e:68:1a:e4:78:f0:86:42:44:d8:6c:2e:d4:
a2:5f:ca:8d:cb:a9:94:ef:51:aa:a5:7d:f1:ce:03:
58:4e:3d:3b:e3:4e:aa:57:e8:ff:d8:03:72:48:33:
c6:ef:bf:7f:6e:c7:f5:06:f5:49:b0:b3:e3:13:38:
b9:3b:8d:51:3b:37:a8:0a:71:2d:87:49:c2:a5:45:
36:84:ac:3a:16:e1:43:e0:76:8b:7f:58:e5:20:b2:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:87:CD:8D:CE:8F:36:D1:EC:4A:BB:FE:D2:DD:5E:61:E4:63:80:50
X509v3 Authority Key Identifier:
keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:30:10:9d:64:d5:38:3b:6f:4a:29:b6:08:0d:6b:e1:82:5e:
1f:c4:88:d7:d2:75:34:d6:84:8b:3d:a7:24:bf:57:07:90:b8:
b5:dd:71:06:01:3f:1f:26:6b:f1:8d:e0:5d:48:42:9c:91:a8:
ec:3f:9d:46:d0:dd:fa:e1:4e:44:e1:91:02:ed:18:bf:b6:42:
00:00:50:a5:7d:2d:2c:83:88:b6:14:da:b0:bf:76:a4:d0:19:
2c:3c:36:60:3d:0f:60:94:2b:4e:03:b6:75:b9:80:e0:00:ae:
f1:d5:55:f1:4e:0f:8c:ad:8b:67:ce:0b:df:7d:7e:35:66:76:
0f:4c:4c:96:2d:2f:97:e0:39:3e:b0:9d:04:d2:86:cf:b0:8a:
e5:15:5e:78:d9:ef:87:9d:ff:f7:a2:f3:68:51:0d:f8:2a:df:
22:c2:87:0d:9b:bc:27:8b:33:3e:0e:87:69:88:fb:ae:b5:1c:
e1:30:6e:e9:9c:9f:32:4a:f6:fd:c5:19:be:fb:e0:63:26:0b:
ee:c0:d2:ea:37:6c:ff:29:7b:97:39:77:27:e6:d5:9c:03:39:
08:df:f2:34:67:02:2f:03:cb:d7:13:e4:62:8a:ef:dd:0d:30:
fd:64:7a:96:2c:b2:fa:53:47:b6:e8:dd:e5:ed:dc:71:ac:30:
d3:7f:50:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:15 2025 by rpki-client