Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: VTDlvrhObZsNOOuwDX2Q59w+ULJG2N/Nc5uWGKmm5H8=
Subject key identifier: 5B:73:4A:37:8F:AC:34:65:BD:1E:9C:50:4A:40:20:52:B0:53:CA:85
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 0198D6986095A625D6739E39D8D54D252945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:47 +0000
Manifest this update: Sat 23 Aug 2025 11:02:47 +0000
Manifest next update: Sun 24 Aug 2025 11:02:47 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: xAHiwsbZjIIVUKbCeUt6E9JuTpHz6MdcZ/jFhPPm7aE=)
2: aUaxmc4yn8DWQgssucohLW2GTOs.roa (hash: SOdn4BM+lJeHsX2EdSBfNJjI/S1sYp7gdR+GcCunEpg=)
3: v8c3Ww_Eihi-LvyDOVvXBJwo9F8.roa (hash: 0sTmm1OvDNHW8cfRGw9gOppSFK5VfYqSrXVw8T0yJBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:60:95:a6:25:d6:73:9e:39:d8:d5:4d:25:29:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Aug 23 11:02:47 2025 GMT
Not After : Aug 24 11:02:47 2025 GMT
Subject: CN=5b734a378fac3465bd1e9c504a402052b053ca85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:62:2d:22:ed:7a:c6:4d:2e:d0:02:a2:2b:
85:d7:ea:57:b3:0b:31:b8:09:d6:80:02:94:4c:5c:
c7:38:a8:c1:c2:a4:95:93:dc:e2:8b:78:64:37:29:
ee:cd:74:cc:e2:94:6f:a9:99:88:82:18:54:93:2c:
e5:c5:e2:d2:f4:af:a2:76:6f:18:fb:9a:0b:6f:e8:
31:95:52:0b:1c:ea:84:1d:78:de:da:bd:69:b9:9a:
5c:94:2f:f5:b8:69:08:60:68:b9:8b:22:2d:a3:fb:
b0:f8:a0:a6:5f:60:eb:df:ae:c5:59:57:48:66:70:
b1:27:05:d5:39:51:ea:4f:09:7b:d9:40:d7:e4:53:
f5:12:d9:54:e7:85:5d:8c:b0:82:c9:e2:79:12:64:
07:b7:99:11:65:32:38:6e:61:20:cf:73:82:4c:a9:
35:d9:b9:df:cf:45:95:70:3b:89:55:19:cc:68:0f:
ef:4e:da:bd:03:a1:26:f7:6a:bc:1b:72:c6:5c:27:
05:66:5d:99:64:ae:bd:95:85:ec:f1:5b:c9:07:84:
54:59:c8:9e:44:a0:f6:6c:4d:35:95:ef:88:75:07:
6f:bd:65:e7:59:1a:f5:c4:b7:e3:e2:a4:56:da:89:
6c:fd:d8:8e:21:a4:89:06:de:4c:4c:48:aa:5b:be:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:73:4A:37:8F:AC:34:65:BD:1E:9C:50:4A:40:20:52:B0:53:CA:85
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b7:a2:68:fd:1d:b5:79:56:3c:15:98:c3:86:2e:64:b7:c2:
ca:e5:39:42:39:c0:67:87:d6:5e:73:6c:4f:2d:40:df:b6:77:
08:09:6b:62:60:db:8e:3d:64:e7:cf:f1:b8:e3:f0:ba:7c:7b:
83:b6:76:9b:08:db:0b:be:79:33:b9:18:5d:7a:ed:ac:e9:a9:
cd:2a:2e:f9:df:27:65:83:ee:8a:a2:2a:ee:c1:93:d8:2b:7e:
3c:0a:50:aa:41:c2:a0:ed:98:c5:70:57:27:6a:22:51:ed:f0:
f9:44:84:fd:62:01:0f:65:a5:2c:43:1d:b2:62:74:4b:8f:9c:
ef:4c:0c:7d:5f:9c:0d:c4:2f:e1:6b:d4:a8:67:82:2f:25:8f:
90:4b:5f:48:3f:d3:44:47:7d:00:85:49:ce:e5:21:0c:19:32:
3f:7e:b9:c4:49:a4:19:42:7f:8e:b5:b6:e7:e1:f3:da:a2:36:
a9:f0:8c:1e:99:e9:e4:af:0d:ef:ff:71:70:7c:b7:99:7d:32:
bc:5a:26:e6:35:2f:f5:28:f1:45:00:8e:59:81:92:1e:d4:7c:
71:26:61:23:1b:33:b7:dc:7f:75:eb:79:cc:04:04:09:b2:ae:
1c:90:53:e2:69:99:43:af:dc:70:ec:28:20:13:70:58:74:7b:
17:85:08:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:02 2025 by rpki-client