Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: 0uDNyNdfCi3AcOwhDTj6Xd0d/6f5VGTABMN9YvkFoX4=
Subject key identifier: EF:40:E5:94:CB:D1:45:2B:C1:25:38:9A:14:0F:87:FE:73:B4:92:A1
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 0198D5F15EFAB99F006C8FE2D1989A1F8CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 1457
Signing time: Sat 23 Aug 2025 08:00:21 +0000
Manifest this update: Sat 23 Aug 2025 08:00:21 +0000
Manifest next update: Sun 24 Aug 2025 08:00:21 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: CLVoHs7WNqDsxtC50TZ9x3w5KEIu6xG0ghXN1IzQk8Y=)
2: UXWSLhVlTXSrRh4vQjiJGZfTc28.roa (hash: GwWbj030dqXFgPoZUUmrOygMcwYdz6TWzzcKF95NLWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:5e:fa:b9:9f:00:6c:8f:e2:d1:98:9a:1f:8c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Aug 23 08:00:21 2025 GMT
Not After : Aug 24 08:00:21 2025 GMT
Subject: CN=ef40e594cbd1452bc125389a140f87fe73b492a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:57:d8:94:07:1e:03:9c:f0:19:50:ee:94:
fc:75:b3:34:1e:b8:77:05:50:db:de:78:12:58:be:
10:ac:09:5d:d4:80:96:38:7d:cf:a6:30:45:49:f2:
6b:dc:60:e5:9e:88:bf:db:19:55:99:94:49:22:03:
60:17:1c:86:d0:63:50:55:f1:b6:49:ac:42:61:bf:
bb:16:16:48:8a:b3:62:6f:0a:95:44:a3:3d:0e:6e:
44:b0:9a:20:23:15:d6:6f:58:28:fa:c0:ea:4a:9c:
15:81:d4:7a:29:d4:74:a2:12:93:9a:6e:39:3e:67:
5d:8c:49:a5:fb:e5:bc:d8:d5:76:20:57:4e:b8:57:
85:e9:15:cf:61:15:cf:08:be:f2:87:ea:df:7f:f8:
26:57:d1:3c:e4:cb:9f:09:50:e0:ca:79:9a:6c:a1:
d4:cd:05:43:8e:05:a5:dd:0f:6c:4c:6f:ab:16:fd:
93:ee:c3:09:ac:ec:96:86:ac:d4:19:33:b1:1a:56:
58:d3:1a:3a:26:94:03:7b:6b:2f:7e:87:d2:6b:63:
0d:b1:77:84:f6:90:7e:d2:e9:46:c2:81:1a:0d:38:
12:dd:96:de:7f:4d:93:8d:b3:d2:5b:26:a9:ba:87:
8b:c7:96:28:9b:8d:23:32:ec:ed:f3:b0:92:6e:bd:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:40:E5:94:CB:D1:45:2B:C1:25:38:9A:14:0F:87:FE:73:B4:92:A1
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:02:4a:b4:e0:12:44:c0:dd:f6:83:11:ba:bc:3a:95:92:44:
6e:40:b4:a7:a3:53:f2:f3:74:56:8b:52:bd:3b:28:dc:a0:d7:
3e:59:c2:c4:59:85:b3:ad:0b:1c:ab:a3:63:fc:81:03:2d:0a:
28:13:5c:cb:af:09:4b:91:e7:87:53:93:97:2e:42:53:f7:c1:
54:59:a9:8f:cd:e8:8d:b2:aa:5d:5d:5e:98:6c:58:4f:cd:b9:
a0:6b:cf:b7:d3:7e:67:1f:05:b7:f9:3a:4b:e4:03:ed:51:b4:
ef:de:5c:cd:31:b4:91:91:b0:ba:4b:06:e6:ce:04:88:ae:73:
0d:8b:13:b0:64:9d:da:34:4b:e8:9f:53:0d:51:ca:51:fb:c8:
9c:4f:10:9b:51:18:62:ae:ed:75:e6:51:51:57:36:62:26:50:
af:b0:92:08:86:15:51:c8:ca:65:e0:b0:98:59:7c:cd:9f:59:
10:2a:3e:2b:fc:3a:de:b3:0e:e6:12:b2:11:72:19:3d:c7:c0:
46:7e:be:96:2c:20:d0:37:28:6d:cb:26:c7:ba:93:16:31:90:
51:de:13:88:94:49:c5:5e:14:d4:4a:1e:7f:3a:85:08:06:d0:
d0:75:31:d8:bb:0d:09:a2:74:fc:2e:d5:b0:2e:46:db:49:c1:
73:3d:23:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:44 2025 by rpki-client