Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
File: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft (raw, json)
Hash identifier: GsXIs93DMXk4x5ADe9y8Ka0Hw47Ol1t73UzktSkntr4=
Subject key identifier: C1:38:C0:6E:32:16:C2:57:94:BE:3B:81:1B:64:67:D8:4C:A9:36:D6
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Certificate issuer: /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial: 0198D4E01B3E6668AF67BB8C5E76178582E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
Manifest number: 0ECA
Signing time: Sat 23 Aug 2025 03:01:53 +0000
Manifest this update: Sat 23 Aug 2025 03:01:53 +0000
Manifest next update: Sun 24 Aug 2025 03:01:53 +0000
Files and hashes: 1: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl (hash: KR3Oxg2JGdwivS8rFgIK/XZYjO4QBLQt2RzBoYXTREM=)
2: Kw550ydpOki0PWOYy-6z5BR-VIE.roa (hash: DJKKlAPQ1FQMVESwtaTdBMt71sNwkspOh/dlMgsjkTY=)
3: fcEpjbgKYOO71SWou3_dCE-kLKk.roa (hash: zROet63WRPPKV6TiwIGdua33aTn4W6zOjjUbs9hhWRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1b:3e:66:68:af:67:bb:8c:5e:76:17:85:82:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Validity
Not Before: Aug 23 03:01:53 2025 GMT
Not After : Aug 24 03:01:53 2025 GMT
Subject: CN=c138c06e3216c25794be3b811b6467d84ca936d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:3c:bf:4f:2d:99:96:11:fe:ba:94:9c:7a:
f6:35:0f:83:a6:9f:47:14:3d:bf:8b:03:af:72:38:
fd:bc:3e:05:58:79:7f:a4:15:48:e5:85:56:fa:ef:
00:e3:0b:b3:f0:21:cb:b1:57:50:c8:ab:ee:c9:40:
8a:f8:7a:81:48:42:ed:3a:5a:fa:11:09:f9:51:82:
50:bd:9d:57:1e:29:b8:80:db:67:a9:66:6d:30:6b:
a6:cf:e9:61:2d:bc:4c:8b:02:f8:6f:b5:af:54:4d:
84:a0:33:00:d3:bc:33:a0:73:aa:4e:63:f7:bb:56:
cc:c1:5e:2b:80:93:56:ce:dd:74:64:99:30:50:02:
15:2a:67:3e:ec:f8:16:4c:e2:eb:6c:18:7e:6d:8f:
61:14:fe:8c:ab:34:be:d8:65:bd:cb:e5:67:8a:18:
c8:01:0d:9d:45:2c:4e:e7:0b:3a:ea:cb:1e:72:bc:
17:6a:4d:19:86:86:27:72:50:26:72:2e:8e:f8:71:
97:4c:f3:c5:f9:cc:aa:df:bf:ac:e7:fa:cc:3d:ff:
71:da:f4:b9:8b:d5:99:59:77:3e:ab:45:1d:d4:65:
66:a3:65:32:a9:92:a4:14:cc:12:d8:95:49:d4:74:
20:23:45:2f:2b:d1:df:07:06:85:21:b7:42:1b:b1:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:38:C0:6E:32:16:C2:57:94:BE:3B:81:1B:64:67:D8:4C:A9:36:D6
X509v3 Authority Key Identifier:
keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:64:33:e2:9b:d5:4f:2a:d6:12:10:43:b7:92:6f:21:ac:f3:
fc:fe:8c:22:d1:5b:82:bc:16:6f:7e:9e:8c:0a:e2:d6:41:eb:
6d:67:b0:f4:38:d7:44:57:5c:a0:e0:ab:81:5a:55:a9:f2:a4:
68:0b:ab:d0:f7:35:5f:57:f0:c3:40:d0:df:e3:2e:35:0b:05:
ac:ad:d0:69:de:da:6c:97:7c:31:33:ac:27:fe:50:cc:8b:54:
6d:ef:b7:32:39:d8:12:94:af:b5:73:b9:37:bd:c2:1a:fb:f0:
ac:99:a0:d7:46:69:a8:be:20:97:ba:6b:ff:28:8b:3a:7a:ff:
ba:8e:91:e0:f3:fc:c2:2b:14:b9:e9:5a:12:d0:45:75:28:af:
6b:c3:c3:3b:c7:30:59:f7:93:02:8d:80:17:f3:52:97:8c:7a:
73:bc:3d:b0:4c:51:04:ab:23:47:a5:28:9a:3c:17:e2:9d:74:
55:3c:40:d9:8e:8a:a5:fc:5a:5f:9b:4c:2c:dc:d1:a0:4d:80:
57:7d:4b:3c:84:ca:27:bb:f5:ee:c1:a6:e9:55:e7:3c:1f:7e:
92:18:fe:12:08:7b:b7:aa:89:a4:78:90:fd:ff:7f:77:be:47:
62:30:98:01:39:48:03:16:42:12:8c:1e:db:c6:e5:44:20:6a:
31:73:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:31 2025 by rpki-client