Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier: 0paiPWanfnFElnN9HDcrn/+bl8hAG1yiv6gF71FmP2g=
Subject key identifier: 0D:EF:DB:BC:BB:44:91:3F:F0:12:D3:82:C6:3C:93:13:90:2F:1C:A5
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 0198D5162E081D5C54455E5F8255F642BF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number: 03C1
Signing time: Sat 23 Aug 2025 04:00:57 +0000
Manifest this update: Sat 23 Aug 2025 04:00:57 +0000
Manifest next update: Sun 24 Aug 2025 04:00:57 +0000
Files and hashes: 1: KIBPt_IHF6y4uJMTevu1k0aU37E.roa (hash: xnu5MWsk10XHvOorhDM/6K8KY5BqTo0pp6Ckq1C4ML0=)
2: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: yPUobnx0h7K/cvJeAs8/5LhVlCVQ8ecZsztjA38gTWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:2e:08:1d:5c:54:45:5e:5f:82:55:f6:42:bf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: Aug 23 04:00:57 2025 GMT
Not After : Aug 24 04:00:57 2025 GMT
Subject: CN=0defdbbcbb44913ff012d382c63c9313902f1ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:54:33:5f:ec:0f:b1:1d:3c:69:d5:ec:2d:
51:cd:d3:72:1e:5f:47:2f:ae:b7:51:cb:4e:70:ac:
28:bd:1e:47:b5:e2:a0:c3:b2:90:69:2e:18:bb:0b:
a1:22:01:42:e5:3e:c2:97:d1:d3:6d:a9:22:9c:05:
06:87:e9:a5:1c:f7:e6:46:3e:30:fb:0f:22:f3:6b:
1d:e1:31:47:9a:51:ac:9d:80:2e:3a:b2:30:e0:ef:
ff:b3:5c:d8:0a:0c:c4:0c:21:43:fe:26:1a:40:b5:
68:62:3b:98:4e:f1:0c:eb:c8:f9:90:90:c8:71:41:
ba:23:7a:a7:74:96:16:03:57:6a:47:f5:cb:cb:f5:
e2:9c:e2:9a:02:16:1d:c2:1c:f3:f0:dc:43:c4:52:
ad:f9:98:f7:8b:cd:33:05:0a:c8:0d:07:bc:9f:aa:
1d:b2:6d:a4:74:12:49:4c:6a:59:60:5c:70:16:c0:
40:e8:f8:a9:8f:1e:d0:72:93:38:41:58:c8:1c:45:
7b:9d:cb:62:c9:cc:8a:38:22:52:69:11:40:76:b1:
98:9e:9b:ad:c4:ec:b9:8c:4d:39:3c:e6:ba:f9:03:
51:0b:bd:49:76:49:76:ce:b3:d7:07:74:d4:91:4c:
39:80:48:f0:ab:f7:f2:c4:19:00:9c:a5:c8:63:a6:
21:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EF:DB:BC:BB:44:91:3F:F0:12:D3:82:C6:3C:93:13:90:2F:1C:A5
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:00:17:28:21:85:a4:a3:82:77:a0:c1:55:f5:a5:e2:4d:39:
94:f7:bb:8b:18:f1:99:10:b5:e8:40:f3:7b:de:3c:92:a0:4e:
f5:cd:61:60:29:c1:a7:1a:f4:4c:24:a3:72:ee:03:f8:19:02:
76:3e:0a:1d:55:cc:04:0c:97:e6:2f:ca:48:04:86:b6:0c:62:
1a:b7:bf:89:9f:b6:da:69:e0:df:d9:c4:81:e6:22:bb:5f:8f:
26:50:06:82:6c:92:4d:58:6c:2b:3f:68:6b:f9:f6:c4:2e:28:
a0:53:26:f8:39:92:69:b5:29:49:f1:60:ee:a4:22:c9:40:b6:
3d:f6:37:79:12:70:5c:f7:bb:00:f9:96:b3:7e:cc:99:b5:ac:
82:9b:17:dd:05:b9:07:81:cb:6c:59:bd:92:22:8c:90:52:28:
c9:8d:dd:41:7b:24:90:4c:cf:0a:6e:25:b0:6c:e5:d3:08:3a:
42:9d:dc:2a:45:20:da:af:37:2d:e2:8a:67:22:61:fc:6a:c3:
8c:64:4a:7f:16:f8:f7:17:83:53:ef:09:c0:cb:e8:e7:1e:33:
6c:8b:9b:47:a9:6b:ea:ba:02:25:18:bc:86:df:79:27:d5:5f:
63:5c:7e:06:07:35:1c:3f:b7:55:d1:94:95:52:56:47:fa:83:
d8:f4:de:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:32 2025 by rpki-client