Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
File: 3tsgAwkB_y3069H0nkiRyyj-BzA.mft (raw, json)
Hash identifier: N5qii73bNmPSswo8f1FZr1ZTA6KNRxvaoSe0/N4xeyU=
Subject key identifier: D0:F4:D2:EE:B5:AD:F0:A0:45:50:D1:C3:1C:2F:43:9A:27:4F:E6:D9
Authority key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
Certificate issuer: /CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Certificate serial: 0198D4048856A330C9E114FB5236205BD6B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
Manifest number: 164E
Signing time: Fri 22 Aug 2025 23:02:03 +0000
Manifest this update: Fri 22 Aug 2025 23:02:03 +0000
Manifest next update: Sat 23 Aug 2025 23:02:03 +0000
Files and hashes: 1: 3tsgAwkB_y3069H0nkiRyyj-BzA.crl (hash: OR68fav1GSS7Nt/6h+VmOP4ntxbk8KCT9J8sFbnzy7E=)
2: ZJCu1yU9m3Cq5WWLkeWOotibU-k.roa (hash: km1a7hNobV+/Bq/2l3UQLOxoqTuuQQAxWKpbP+WCwQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:88:56:a3:30:c9:e1:14:fb:52:36:20:5b:d6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730
Validity
Not Before: Aug 22 23:02:03 2025 GMT
Not After : Aug 23 23:02:03 2025 GMT
Subject: CN=d0f4d2eeb5adf0a04550d1c31c2f439a274fe6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:4a:12:5b:32:54:e7:a9:e8:6b:5d:c3:1d:
0f:1f:b9:63:97:a7:81:3a:5a:a9:97:39:90:0e:0a:
72:c2:97:54:ef:b8:2c:64:f2:98:d1:2e:1c:30:84:
73:56:f3:6f:e0:1b:86:2d:8f:d3:63:75:f3:3f:07:
a3:b7:be:e9:da:50:b5:6f:6c:2b:71:b8:55:e9:2e:
83:6e:14:c7:96:2e:22:20:49:ff:b8:c3:32:5e:82:
f2:ec:36:c8:83:c7:cf:98:0c:6f:b8:73:71:0d:b5:
fb:41:42:7d:86:57:6a:74:87:db:39:cc:61:68:48:
e0:e5:cc:24:64:74:ae:cd:68:1e:7c:ca:b4:fa:df:
51:48:a8:92:3f:98:4c:41:a5:9a:e1:b2:23:e4:a5:
a5:cd:3f:d6:7d:ef:4f:0f:3f:af:cc:c2:00:96:13:
ec:05:88:28:e6:66:c2:bb:2f:7c:52:92:03:f9:b8:
9d:43:b4:cc:76:98:93:6c:0b:a4:99:40:43:d0:30:
b5:2e:45:74:d0:59:66:37:62:9a:30:97:00:e4:af:
62:32:c6:b4:08:68:57:d7:dc:ca:56:2b:a9:a8:d3:
90:69:43:5d:35:ae:49:e8:4a:ea:19:f5:ff:14:f1:
59:63:98:a7:23:17:8b:79:c1:f4:6d:e1:2e:9c:3f:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F4:D2:EE:B5:AD:F0:A0:45:50:D1:C3:1C:2F:43:9A:27:4F:E6:D9
X509v3 Authority Key Identifier:
keyid:DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:44:ae:5b:d0:41:27:73:1c:62:01:6d:ac:96:cf:89:70:45:
8b:d3:63:4a:30:db:00:24:03:b1:d1:2d:52:67:ef:7e:0f:93:
9d:49:82:f9:55:0a:18:9b:2d:73:19:7c:fa:8c:3a:e9:ed:27:
e3:36:59:8e:5d:f2:23:62:54:aa:a6:c5:a1:21:44:9e:91:ac:
f3:86:93:77:28:17:ba:55:1e:8f:6e:73:45:d0:a3:d4:1b:03:
87:e0:0b:7a:c5:21:9f:9e:9e:6c:84:7e:fb:2d:85:37:2c:30:
ad:a5:57:3a:e3:90:29:0c:d8:4b:26:b1:f8:20:c1:58:27:d5:
db:c6:a2:21:a6:f2:80:65:2f:d6:16:8c:98:05:af:29:01:3f:
8e:a6:89:7d:a3:f7:ef:85:2b:89:c6:29:09:02:cf:73:92:e1:
29:8d:64:73:25:d1:4f:46:28:fc:34:ed:36:ad:64:4e:39:f2:
6a:03:d2:d1:fb:27:5f:cf:2c:97:de:c6:e2:9f:f7:bc:5a:98:
f0:45:cb:13:c2:c7:4b:44:0c:20:61:7d:5b:f7:91:61:8b:83:
51:24:31:fc:d9:21:44:3b:8f:2a:eb:a1:77:ec:90:b0:9f:ef:
18:c6:2a:0d:05:23:7e:ae:d5:66:e8:2f:7f:74:cf:96:a6:f5:
a9:02:ef:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:20 2025 by rpki-client