Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier: D3DPcuhJWse7Ox+dI3sJPSgRDL0CbFkAyvGPChxHEnc=
Subject key identifier: ED:0D:2B:CB:B8:64:46:EA:60:70:EC:0B:4F:9C:D7:F1:9F:0D:AA:F4
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial: 0198D7A94C83BAD3B8590DE8C64A6612FD07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number: 128D
Signing time: Sat 23 Aug 2025 16:00:52 +0000
Manifest this update: Sat 23 Aug 2025 16:00:52 +0000
Manifest next update: Sun 24 Aug 2025 16:00:52 +0000
Files and hashes: 1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: 0Vw2Md24cCmjdn6n40NRqWzu8uAUKOKcGAAW6GKrREw=)
2: yvHmtz-vd__QGyK6PoEkr_n-Dok.roa (hash: K4rgADfkHdT22x5s6vfWG3HXGINmJUAubhmd+BDk2vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:4c:83:ba:d3:b8:59:0d:e8:c6:4a:66:12:fd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
Validity
Not Before: Aug 23 16:00:52 2025 GMT
Not After : Aug 24 16:00:52 2025 GMT
Subject: CN=ed0d2bcbb86446ea6070ec0b4f9cd7f19f0daaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:29:09:4a:60:d8:3a:3b:91:09:58:e3:e9:d4:
71:a1:4d:30:53:f0:2c:fe:be:73:8c:11:65:60:e9:
2c:98:41:16:f5:03:ec:62:35:97:11:7e:9c:b7:65:
2f:dc:71:2a:ac:a1:47:fd:56:0b:08:58:bc:d4:76:
f5:10:97:78:7c:c4:40:7b:33:e0:ac:b9:31:23:21:
18:98:f3:6d:40:9c:2e:a9:45:8d:54:08:b7:15:c4:
2c:49:92:b5:94:1d:48:30:9b:c3:c9:9b:21:69:69:
8b:66:43:5b:57:c0:bd:4f:bc:58:8f:13:6f:18:c3:
48:f2:69:30:65:8d:1f:1c:00:d0:bc:9e:02:ae:79:
a3:6f:30:89:a8:51:4c:92:01:66:3d:05:fa:c2:a9:
63:49:7b:e0:ae:33:4d:71:23:e5:c2:57:b9:52:0b:
06:77:cc:fe:12:63:cd:cc:81:d5:5f:ee:b0:04:0b:
43:a5:42:5d:1e:dd:48:a8:c3:48:00:3f:66:14:4f:
c9:9a:eb:67:d1:4a:34:49:00:34:cb:f5:ca:2f:82:
a4:9b:c1:9a:cb:c0:47:80:d9:47:ab:10:5e:78:52:
3b:6f:23:41:aa:f4:25:bf:1b:c9:74:52:95:07:fd:
60:f7:c4:e9:43:3e:75:38:4b:6e:38:d0:03:65:fb:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0D:2B:CB:B8:64:46:EA:60:70:EC:0B:4F:9C:D7:F1:9F:0D:AA:F4
X509v3 Authority Key Identifier:
keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:45:e1:1c:ff:00:01:1d:54:a9:b8:cf:7d:b7:10:7a:01:41:
70:02:94:23:1c:a4:50:b4:45:51:fb:08:17:24:33:24:98:b2:
64:62:9f:8c:9b:49:d0:55:c4:25:56:b3:a0:7e:a5:a4:1e:1d:
e8:ba:db:47:08:10:87:81:77:61:d4:1d:e8:19:82:a1:67:49:
dc:6c:69:d1:e7:e1:1e:24:ac:e3:ca:71:c1:ed:8b:13:ca:08:
e7:9d:e3:3e:40:00:32:75:2e:3c:1d:b3:00:96:86:38:de:fe:
00:4f:60:4b:37:b6:5a:fb:0e:7a:94:11:3a:b1:b4:b7:9c:31:
79:b2:09:99:98:07:21:5d:28:35:4d:7d:54:69:47:c5:89:4b:
39:db:0e:cd:67:a9:55:53:29:e3:73:9b:5b:99:2c:db:38:e3:
2e:29:9a:5c:2b:fd:a7:69:fc:54:3d:b4:a4:ed:99:d4:d6:62:
e6:ea:0a:7c:b9:92:25:13:a3:bd:d2:36:a0:fb:6e:4a:32:df:
6c:5a:2b:69:5a:a0:83:c8:70:0a:b4:50:c1:bc:63:24:87:dd:
e5:e1:68:37:a5:5a:1a:98:c6:c4:68:1b:99:43:aa:96:58:0a:
62:a6:b2:34:8b:29:71:52:10:b2:f2:6b:fd:15:d9:44:31:42:
a0:5c:db:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:24:11 2025 by rpki-client