Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: ff1vQRaSSEWC8ecGuV33RKwpK9UVI2X4z2X3jU2Bjqk=
Subject key identifier: 08:E4:4C:86:95:B6:6A:B0:FF:9E:5F:E4:2A:4B:3B:D6:38:AE:BC:FE
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 0198D705835C87E0565366B1917101286539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 115C
Signing time: Sat 23 Aug 2025 13:01:59 +0000
Manifest this update: Sat 23 Aug 2025 13:01:59 +0000
Manifest next update: Sun 24 Aug 2025 13:01:59 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: Xa6afS0cDnXX3zq5MMF0P1reCkLH5+Bc7Tq2aEaFpf4=)
2: ruyaJPOfuuheWzXgHxMIwRIiRmI.roa (hash: dOziRNC4DuCftQxbewVCKgY2HoDJCSSxS8NFyfVWRc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:83:5c:87:e0:56:53:66:b1:91:71:01:28:65:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Aug 23 13:01:59 2025 GMT
Not After : Aug 24 13:01:59 2025 GMT
Subject: CN=08e44c8695b66ab0ff9e5fe42a4b3bd638aebcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:4d:12:cb:3c:40:05:79:f8:8a:18:89:51:
e6:3a:1c:f4:ad:96:a0:af:c0:df:46:c8:0e:80:eb:
c5:4f:f7:38:0d:5a:51:69:aa:27:80:e3:c8:e6:5a:
31:c6:12:8c:84:ff:05:99:71:a6:7f:6f:f2:48:5e:
53:1d:b2:36:b8:09:31:38:97:d0:2e:a2:af:c5:58:
06:a0:17:65:c2:c3:b1:08:77:51:f1:2e:a6:0e:c4:
df:09:63:67:b9:4c:c7:dd:e1:15:16:5e:b0:ac:c4:
6b:d1:b1:39:f5:55:30:26:b1:bf:96:c3:a5:ce:bb:
f5:f3:0b:42:78:28:f5:ec:3a:7f:b0:64:ae:82:fc:
73:a8:46:f4:d2:4e:e2:36:82:6f:d0:d9:69:ce:5e:
52:52:b8:5a:dd:7a:b5:7c:a3:31:7e:13:4b:ab:01:
80:8a:dd:84:72:4a:af:12:1d:17:48:fa:cb:e0:b6:
d7:88:c1:bd:b3:cc:5f:a2:8d:fc:f4:85:b5:56:27:
45:51:dd:25:48:ed:af:68:ec:db:83:f9:c7:16:1e:
e6:54:b8:38:17:f0:ba:76:35:82:a5:4f:d4:97:65:
c1:3a:28:5f:ba:56:a0:d0:3d:3a:d6:0e:cc:39:58:
50:8b:bd:33:ac:55:72:45:ec:39:99:e5:25:9c:37:
f5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E4:4C:86:95:B6:6A:B0:FF:9E:5F:E4:2A:4B:3B:D6:38:AE:BC:FE
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5c:15:53:d6:f0:22:a4:c6:cb:43:66:f8:b8:1a:76:0e:da:
d5:df:f5:d7:7f:c7:a0:6a:0e:82:de:2e:57:32:89:7f:8c:2a:
5a:ea:5e:87:97:c1:af:7c:53:13:18:f8:d2:d5:2c:30:c2:81:
61:1f:05:62:94:65:77:fb:2d:f8:79:bb:bc:53:cc:11:1a:51:
c9:92:78:42:03:d9:57:0f:c8:2b:5b:ac:4a:5e:f4:84:d0:15:
d5:5f:cc:63:ce:16:a2:63:9e:32:a3:aa:54:83:ae:59:4b:18:
2d:cd:9e:9e:12:f1:11:4e:8d:a6:fa:22:aa:6f:98:96:8d:bf:
01:15:1c:8e:cd:54:33:e8:82:86:5e:06:d4:5a:95:a2:c9:b4:
cf:79:a7:f0:4a:47:ec:8b:0f:a4:3e:34:13:32:1d:23:44:95:
6a:25:55:02:17:2d:cc:c8:87:20:f5:85:6b:c5:fe:4e:81:24:
ac:e5:22:ff:38:69:f7:6f:de:a2:6a:8e:43:86:6b:de:b0:08:
b5:c1:1c:d8:f9:af:18:e7:33:f1:c5:a1:da:9d:ad:7b:cb:44:
2f:35:75:2e:6a:e7:06:30:15:27:95:9c:9a:3d:7b:4d:3c:53:
6c:be:db:4a:60:07:bb:04:fc:94:2e:1c:3c:26:c3:5b:41:c0:
23:77:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:25 2025 by rpki-client