Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: w/alW4FikGBzSGo+IdJbR4uO6q9v7DuXYz6vUttM7N8=
Subject key identifier: E3:E3:31:26:17:07:BA:B8:EB:7B:70:4F:57:60:3F:BD:30:3F:4E:E0
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 0198D5BB98DB975E80FABAB04F3C163635C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 0CE1
Signing time: Sat 23 Aug 2025 07:01:37 +0000
Manifest this update: Sat 23 Aug 2025 07:01:37 +0000
Manifest next update: Sun 24 Aug 2025 07:01:37 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: iGnek+Hm+UVHmSft6U88vcp/5fGj2IXaWpYFstPCeKo=)
2: mKsKKQCdLodyBncOeNIhWtaYAoQ.roa (hash: fizUUsz/TAb+LHuegB83yr/hnzwxKplkZhpso2ufXV4=)
3: xfMF5Mt4jBFimRoPjDOTrOYZb_c.roa (hash: GuaLpdFfqfVEq3DS5+BP2JqM2gB3tItjQlR22xolKBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:98:db:97:5e:80:fa:ba:b0:4f:3c:16:36:35:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Aug 23 07:01:37 2025 GMT
Not After : Aug 24 07:01:37 2025 GMT
Subject: CN=e3e331261707bab8eb7b704f57603fbd303f4ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:e1:0c:b7:0f:f4:80:6f:1e:07:4d:4d:e9:
ed:c2:26:84:af:15:ff:1c:50:21:60:a3:16:62:bb:
39:c8:5b:d3:b4:2f:32:f6:da:5c:be:c2:e3:4d:b2:
2e:0a:0b:b3:12:11:7b:74:ad:d8:d3:eb:ed:76:dd:
cb:3d:59:70:a5:6a:46:6a:7c:12:30:e5:7a:7a:30:
ad:1a:2b:8f:25:3c:85:15:0d:58:dd:3c:08:a0:7f:
30:c1:07:51:4f:89:a9:ab:22:2d:bd:e6:b4:89:c9:
56:3a:60:4d:c2:d8:4b:ba:12:37:e2:dc:dd:bf:87:
ca:34:d6:b8:39:6d:92:67:55:43:fd:ac:77:87:d1:
a0:be:ea:47:66:9e:82:51:ee:fe:13:41:b5:93:36:
5c:93:fb:ee:f8:be:23:ac:32:64:1c:49:58:aa:65:
5c:55:37:89:53:ff:94:e5:68:47:7e:b2:0f:87:dc:
cf:04:8d:d3:dc:74:8e:aa:4c:d9:f7:87:65:b4:5c:
79:3e:6a:c3:99:89:97:52:24:2c:f2:55:77:ce:02:
a0:27:0b:85:c3:1b:f2:f9:60:c5:0c:74:c4:15:cd:
f3:a8:e4:43:f4:85:8c:77:46:6c:8d:bb:d4:81:0b:
22:e5:11:f9:bf:31:15:e1:21:56:02:bf:60:a6:b0:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E3:31:26:17:07:BA:B8:EB:7B:70:4F:57:60:3F:BD:30:3F:4E:E0
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:57:58:1c:f2:9a:ea:5c:5a:78:8e:d6:50:c1:d9:41:33:c1:
a7:dc:b5:21:bd:50:47:92:d6:e9:09:cc:e2:2e:f4:6e:0a:62:
b1:22:46:79:10:5d:2b:af:5a:c6:8a:b2:28:e2:a5:1e:cc:7c:
8f:6b:cd:27:46:c5:6a:e1:3b:6d:5d:7c:99:65:aa:72:9f:32:
04:09:7c:75:cd:b1:16:d3:a9:63:fc:3c:29:77:e7:eb:20:e4:
93:29:9d:2e:b0:6b:5b:6e:e5:8f:0c:ac:dd:5e:e9:07:00:a8:
c0:02:94:97:8e:22:ec:a8:ef:c5:ca:6f:90:60:8b:cc:ec:e5:
91:24:40:14:96:24:cc:8b:b5:3b:17:60:3c:69:9b:fc:af:45:
5b:9d:09:3b:0a:4f:c8:1e:44:2e:f0:bd:14:92:7f:b9:a6:e9:
d4:f5:a0:13:a5:2e:15:d3:2d:5f:8a:71:20:67:90:9e:20:da:
5e:91:59:df:f4:e6:78:a1:23:77:e7:c1:99:bc:5d:cf:dc:5a:
4c:56:0a:42:15:bf:4c:93:92:d3:c4:0d:56:d6:7f:d4:0f:09:
33:a0:30:0c:ab:76:cb:a1:dd:6c:8f:bb:95:9b:a7:19:20:9c:
f7:72:1f:57:52:8e:8e:50:19:91:86:ea:92:14:37:ec:e1:ee:
1f:b4:ae:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:28 2025 by rpki-client