Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: avnZJIeol5/NMdnxzjplDyjuyFYiT3wb3wsvVmLJnE0=
Subject key identifier: FB:A6:13:F4:0D:F6:5A:F4:99:AC:63:AB:E8:69:76:A1:8A:7F:CB:0C
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 0198D54E322FB2BE591C0FAF8E0D2003B209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 0F8C
Signing time: Sat 23 Aug 2025 05:02:08 +0000
Manifest this update: Sat 23 Aug 2025 05:02:08 +0000
Manifest next update: Sun 24 Aug 2025 05:02:08 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: 9O2I9xoWIhlyO+WUgKy3UxZ5ZPNDPTZV9XpM7oT5JG8=)
2: GJgS7xgFqg_T1Brv5T3Z3VSHSQs.roa (hash: qcKfQ/V3fbXzE7gbTkc10cKeggN9uhLupcmee0zeuj8=)
3: gDn1RHCMxQyNW_pGfUDeAoFsteY.roa (hash: aOveJJ3ah1WLjPcvfI87OOrTavXERjpgS9XWi0GEgq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:32:2f:b2:be:59:1c:0f:af:8e:0d:20:03:b2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Aug 23 05:02:08 2025 GMT
Not After : Aug 24 05:02:08 2025 GMT
Subject: CN=fba613f40df65af499ac63abe86976a18a7fcb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:80:ef:7b:9e:f5:28:f7:61:2e:67:b2:63:
df:ae:1c:91:7a:b9:93:92:cd:f6:5b:86:a6:b7:f4:
02:c1:ae:e5:63:6f:2d:8b:9d:a6:1e:e3:ca:fc:b9:
fd:ea:0d:66:14:ad:6c:58:be:cf:1c:d1:14:9a:22:
7f:5f:c5:fc:7c:1a:f5:40:45:89:38:cf:32:d2:df:
93:59:fe:d8:d8:68:5d:4d:65:0a:99:d1:25:7d:78:
36:af:b6:6d:13:8c:9c:95:44:2c:1a:20:0c:25:92:
e8:d1:fb:b6:6c:39:23:31:2a:24:9e:e0:dc:88:34:
e3:bc:f9:18:69:35:fd:80:49:78:69:2f:8e:33:b5:
5a:b2:ee:ca:a0:c4:f0:c2:1c:83:25:54:8d:68:73:
4f:60:65:98:88:bd:04:66:b1:0b:58:91:bc:04:e5:
f7:e5:6a:9c:d4:eb:06:97:1c:20:f6:05:a9:88:a7:
93:ef:f9:e7:b7:46:5a:70:d1:62:25:3a:82:65:77:
59:1a:85:44:8a:f5:14:1f:a6:89:b9:43:fa:43:89:
6d:06:b2:a8:c0:45:54:41:a8:d0:cb:6f:62:e4:44:
39:b9:63:fc:ae:d5:2c:c9:8d:f9:c1:3d:be:79:18:
58:db:fe:8a:40:1b:06:e3:30:0f:a1:5f:99:86:b2:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A6:13:F4:0D:F6:5A:F4:99:AC:63:AB:E8:69:76:A1:8A:7F:CB:0C
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:be:8f:66:41:3f:c2:75:42:d0:66:48:7a:fe:aa:ba:c0:68:
6f:8a:fe:49:8c:80:f4:97:30:91:bb:ab:11:40:01:b1:cf:9a:
fc:d1:9b:db:db:af:5a:bc:fd:e6:a3:a3:04:c8:09:b2:ad:90:
60:12:3a:ac:34:ab:81:2e:d5:bc:e7:fe:57:e2:7a:c7:2f:14:
c4:83:63:e8:39:d6:bb:e6:71:3f:12:9f:07:d3:3d:81:35:cc:
16:ad:11:d5:37:4b:0b:af:f9:63:13:34:83:64:5f:59:63:68:
ac:a5:5a:af:e5:61:15:58:8e:ef:86:bd:d1:22:93:9c:d0:a2:
f4:0a:77:73:d9:f5:77:ec:34:9e:45:8f:c1:97:10:cf:f5:dd:
c5:a8:f4:c2:94:0e:2a:6c:49:26:70:8d:96:50:04:6a:3c:63:
da:37:b8:ad:ed:49:cb:ca:6b:29:21:5e:9a:7c:a8:6a:80:0b:
c2:b7:20:ed:2d:91:e8:cb:8e:83:48:36:27:35:47:ba:90:a9:
39:c4:c0:cb:8a:78:97:9b:a4:a5:8f:6b:1d:a9:eb:24:23:43:
d4:88:ff:29:2b:01:83:e7:70:d9:d4:0e:99:46:39:5e:7e:b0:
c8:5c:16:d1:65:f0:7f:31:09:71:4d:ed:a7:f7:80:ec:c9:76:
1a:05:00:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:29 2025 by rpki-client