Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: dDYZ0D/DR7XfJ9XOfojaEpAqI1Yf7SVsyj0QTWZ6cck=
Subject key identifier: 88:6A:EB:F9:62:EF:42:63:F0:77:31:89:40:58:22:B3:C7:6B:8E:A5
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 0198D705F640B10DB4A5063F582709610C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 1151
Signing time: Sat 23 Aug 2025 13:02:28 +0000
Manifest this update: Sat 23 Aug 2025 13:02:28 +0000
Manifest next update: Sun 24 Aug 2025 13:02:28 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: T5Bq4vnx8/K6aVNodxwJ33Pz5TMs7UxN+9nAOp0EjE4=)
2: _eQTxfZZbwefhXlLKHO7CEbeNzo.roa (hash: XwbhtEsqMzoTs493oAMc1WoC+bVurXPqsNp3fAtN59M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:f6:40:b1:0d:b4:a5:06:3f:58:27:09:61:0c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Aug 23 13:02:28 2025 GMT
Not After : Aug 24 13:02:28 2025 GMT
Subject: CN=886aebf962ef4263f0773189405822b3c76b8ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:65:d4:c4:17:d5:9d:eb:fe:13:a3:56:64:78:
f2:95:db:89:92:ac:92:d5:a9:d7:4a:a7:7d:73:b9:
65:10:d2:c9:6b:4e:31:97:2c:0d:77:4f:59:a9:8a:
d1:42:18:c4:17:cb:64:f4:57:ad:90:92:1c:62:af:
4e:3a:04:7e:cc:05:09:79:8b:a8:c0:c8:dd:03:2f:
5a:c4:f9:bc:fa:c9:d2:88:57:64:4a:d3:7c:65:6f:
51:72:57:8e:da:e9:f9:b2:48:4d:b8:37:14:92:e6:
cf:16:22:65:65:bf:80:07:92:92:fb:0c:e2:d4:3a:
67:c9:b5:c5:90:6d:8f:bd:f2:a0:f3:61:8e:4f:0e:
3d:f0:a5:27:4e:5b:0e:cf:0e:6d:05:77:80:d2:62:
c4:98:da:91:cb:44:72:c9:15:ca:16:dc:1c:54:ae:
da:06:e7:c4:da:90:c0:55:46:53:67:cb:e2:7b:bf:
38:fe:3c:b0:cd:ae:97:b6:30:24:28:f9:a8:17:33:
c6:65:e7:91:23:e6:6e:3e:c2:f1:e8:67:27:d0:39:
84:28:48:33:85:e9:52:80:96:84:32:03:1d:a1:8f:
79:25:0f:b9:cb:67:55:e4:69:61:df:bd:80:3e:34:
bb:87:66:0b:6d:03:fa:0a:0f:cb:e2:06:d6:72:1d:
60:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6A:EB:F9:62:EF:42:63:F0:77:31:89:40:58:22:B3:C7:6B:8E:A5
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:52:aa:bd:92:e9:3a:20:23:86:84:c1:67:4a:bc:1d:79:96:
46:69:eb:17:e2:40:8b:03:33:3b:e7:56:92:4c:21:3c:02:c2:
72:eb:4a:80:3e:e4:bc:17:54:fb:cf:5c:3d:54:c0:41:cf:77:
fe:c3:50:41:11:7c:cd:e1:8c:dd:b1:59:b1:a9:53:6b:9b:c8:
96:1a:77:93:a4:6b:0c:d3:09:20:71:6f:ac:4b:6c:93:52:a8:
5f:12:95:cb:6c:e9:f6:bd:00:08:c4:79:d6:4a:9e:f6:fb:e2:
75:0d:e6:dc:6f:85:e3:0b:23:30:17:ee:78:11:63:88:07:51:
7f:c9:d4:33:f6:ff:28:43:5d:31:45:fd:ed:c8:d0:c5:26:e2:
33:41:00:f7:03:ca:7c:f7:42:83:70:c9:ee:af:17:10:b8:5c:
af:99:f6:8e:ab:62:2c:48:9e:06:d2:06:20:e5:04:7d:c8:01:
24:66:a0:34:75:34:6a:40:44:02:86:76:5d:d3:8c:8c:da:ad:
1d:74:f4:9b:39:03:a1:e9:42:32:8f:43:1e:8a:ba:13:c5:b1:
15:7f:05:d5:90:34:38:a6:10:5b:c4:aa:81:c1:2e:32:fd:04:
60:05:77:14:a5:e8:e7:54:63:dc:88:79:29:cc:bc:51:97:c3:
1a:23:2b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:20 2025 by rpki-client