Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: 4F+RE+9eCj5puBMhMWWfCb7VdGbXUN6rmAl/tylnwA8=
Subject key identifier: 55:64:95:3E:80:A6:AC:5A:95:E8:04:F5:9F:51:C1:FD:B7:45:80:9C
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 0198D65F799FE27AE625AA694526DAA6DFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 0CDE
Signing time: Sat 23 Aug 2025 10:00:37 +0000
Manifest this update: Sat 23 Aug 2025 10:00:37 +0000
Manifest next update: Sun 24 Aug 2025 10:00:37 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: Z5kFy0SNQifzd10ZLPLSeXFe15v+PWvSxC9Lc2Z6Fvs=)
2: 8miIDeBQxB0aKJY-TlsIuuJ2hww.roa (hash: mQmM8Cjnfx5WSvhPSj11m+hm6JvBiNUtIRExWbof9J8=)
3: IRGnT1eQmUBmgR6_xtusELr-83s.roa (hash: dJ3+bDwzY4UO43kbNXGDeFrUEwRtOB0R3J1TQjuxqCQ=)
4: aw3P8V17V992wZUulFnFkkVrMmo.roa (hash: O9AIELr13JUWTjKqPnJ8lbjYgl5+VRQqDU69j3HTMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:79:9f:e2:7a:e6:25:aa:69:45:26:da:a6:df:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Aug 23 10:00:37 2025 GMT
Not After : Aug 24 10:00:37 2025 GMT
Subject: CN=5564953e80a6ac5a95e804f59f51c1fdb745809c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:8e:30:8d:e1:e1:21:b7:34:ad:27:df:0f:
f7:8b:0f:11:be:8e:25:1d:e2:31:7a:2f:57:06:ed:
37:b5:22:b2:ad:ad:e8:8a:72:b2:fa:11:13:04:94:
20:94:15:15:32:10:ff:23:12:dc:35:d4:24:1d:22:
84:34:c6:1a:89:0b:fa:bc:34:93:82:77:59:07:ed:
7b:7f:82:6c:a7:d0:28:9b:a3:81:ba:41:ce:a5:90:
4e:55:6b:25:6c:1c:d2:ed:fc:25:04:bb:34:93:cb:
5f:91:dd:1a:d8:f1:bf:c6:36:7f:87:0d:44:2a:17:
24:b8:26:46:96:9b:76:d9:86:dd:88:b6:41:60:f6:
ed:1f:5b:d7:2b:8e:17:85:b0:16:30:98:c3:38:2e:
b4:5a:cf:b7:35:e5:77:63:45:d5:10:17:e2:b7:a6:
c5:4a:63:96:ae:b0:06:96:6c:a2:cc:cd:73:91:44:
e7:37:d0:50:d0:18:1d:92:fb:6e:5e:5d:02:9d:15:
8c:ff:68:d6:7b:91:13:ef:a9:ba:11:39:a0:67:3a:
62:40:8a:81:9d:58:9b:36:2e:e2:e3:e7:be:09:9d:
53:c9:c8:19:d4:27:e3:34:a8:df:9f:34:18:62:c3:
13:b8:c3:20:c8:8b:cc:5a:6b:18:af:ed:ea:a0:07:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:64:95:3E:80:A6:AC:5A:95:E8:04:F5:9F:51:C1:FD:B7:45:80:9C
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c9:7d:4d:58:a9:3f:34:dd:35:12:03:4b:5f:01:5f:75:71:
ab:56:b6:1b:e9:19:4d:ad:2b:34:e0:17:74:82:01:da:66:c3:
1d:35:0d:83:90:34:02:43:55:38:80:8f:e0:49:3a:17:45:d5:
e1:06:45:66:89:00:e7:a3:87:6f:98:62:46:8d:84:c1:75:cf:
e8:e4:16:17:45:da:e6:55:f2:0b:1d:0a:76:0f:8a:c2:8a:1e:
86:2e:3d:61:3e:ec:6c:83:a6:11:1c:d3:75:b2:ad:28:d4:16:
3d:a8:4d:45:44:b6:dd:7b:f4:97:b8:17:08:64:9c:5c:8f:29:
e0:e2:d7:74:a4:bd:18:29:c2:b2:47:9e:44:e5:2d:02:56:03:
89:dd:b3:fe:c3:5b:ba:70:03:08:2f:37:47:e2:24:c9:8e:6c:
20:5a:32:7d:90:25:a0:e8:7f:1b:9a:f0:b6:c1:ae:78:f4:7f:
6b:27:9d:d9:49:c9:52:b4:2c:45:81:91:65:b9:72:e1:77:c8:
c5:0f:fd:79:d4:72:5b:ca:ec:1f:93:11:8a:7b:f3:2f:70:ca:
45:a6:32:41:52:51:af:d9:7f:d8:f7:93:30:cf:b2:24:1f:11:
6d:65:60:36:c6:df:8b:9a:55:8c:ee:f1:75:ff:fb:9b:5d:fc:
c7:84:40:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:42 2025 by rpki-client