Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: xqIhdupoJocbuVs/1txz+4IEo5jNwDYHTo1VIgiLk0Y=
Subject key identifier: 12:F4:56:D8:67:C4:90:3D:8F:6F:BD:CA:67:6E:2D:D4:31:FD:E9:78
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 0198D54E3B261394170BB4536BA32484D562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 15A3
Signing time: Sat 23 Aug 2025 05:02:10 +0000
Manifest this update: Sat 23 Aug 2025 05:02:10 +0000
Manifest next update: Sun 24 Aug 2025 05:02:10 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: pas+7XvS3HQpXuw40L8voCcAU7moXGreX/ao8iCB02M=)
2: bPbl9DKxYJUxR3ZUVzukhGWYurM.roa (hash: FAnYMWhXeH8TjI8m2ivn5nzVc0hLKvZ4QbjQQh/aekU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3b:26:13:94:17:0b:b4:53:6b:a3:24:84:d5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Aug 23 05:02:10 2025 GMT
Not After : Aug 24 05:02:10 2025 GMT
Subject: CN=12f456d867c4903d8f6fbdca676e2dd431fde978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4b:fc:64:2f:e1:23:e3:33:e2:08:a2:9a:cc:
0d:cd:3d:28:f1:5a:d4:6e:86:71:9c:8e:6a:35:2e:
c7:66:97:9a:af:5e:70:09:68:02:ee:f1:28:82:24:
8d:80:f6:d5:3c:47:b8:1a:b2:cb:87:d5:9c:63:95:
7c:18:7a:74:f2:7c:ad:c6:25:3c:63:ed:eb:81:3a:
b9:52:ae:f9:d9:37:3a:37:a6:70:02:3d:2c:ef:94:
f3:b2:5f:c1:4e:69:b8:9e:a7:05:49:1f:9c:0f:32:
1c:ec:01:eb:98:81:93:b0:ea:e9:77:66:d7:04:b5:
16:db:eb:ec:e2:0a:19:16:62:d1:34:b9:fd:b1:70:
61:b1:e6:66:88:06:a8:a9:bc:d5:88:7c:96:f9:2b:
7c:78:d2:fc:b6:af:e0:b3:29:19:a7:3a:0a:3c:a9:
fd:c3:7f:e2:c2:ff:5f:b6:2a:b2:94:6f:a8:99:c9:
5e:8f:60:83:81:64:99:c1:40:d8:3e:b4:23:8a:89:
91:18:cb:39:d0:b2:17:bf:95:db:76:3d:4f:4d:be:
c1:d6:88:50:1c:56:03:af:62:6e:60:fc:af:df:4a:
b6:eb:a5:55:e5:e3:c6:29:28:24:9a:65:14:be:24:
1f:05:93:6d:37:22:c0:0e:fa:ff:97:09:a4:67:d1:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F4:56:D8:67:C4:90:3D:8F:6F:BD:CA:67:6E:2D:D4:31:FD:E9:78
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:aa:e9:57:cf:86:62:df:18:df:b5:84:4b:e3:de:de:d9:2b:
e1:6e:9c:a9:60:a0:6c:64:17:b2:ce:6f:ad:69:de:21:63:06:
e7:c5:a7:38:55:3c:60:c0:97:36:08:d7:e4:33:9c:d1:da:4e:
34:ce:b8:18:ac:d9:95:1c:62:ab:df:62:bf:36:97:67:32:ec:
e3:29:ba:cf:ea:27:4b:f1:ee:13:bd:11:71:a5:bc:5d:b2:56:
f0:80:ae:37:12:40:96:57:10:2e:c5:09:ca:34:8f:e6:ae:29:
ed:75:cf:d5:0a:3c:03:b3:94:15:7e:2f:d6:68:2b:d3:07:d5:
4a:46:fe:da:ae:30:ea:05:57:4b:ab:59:5f:e5:4c:3f:37:77:
97:eb:90:41:16:74:9b:8e:15:cc:ce:aa:69:80:e0:5e:3a:7c:
d3:23:ea:ba:ed:05:86:6a:53:7d:9b:71:c6:d5:63:b2:41:0b:
06:33:9a:16:08:b9:b7:b7:97:7e:77:ef:1e:bc:92:f1:fc:e6:
13:f3:11:19:41:88:c1:39:ac:c3:2a:33:4f:9e:d1:4e:cb:70:
ad:99:b0:c0:13:f0:f9:77:39:4c:28:90:8f:b4:a9:d3:a7:30:
23:af:14:a6:dd:da:b2:09:51:c3:59:ef:bf:b7:e7:d8:57:56:
ba:f1:ba:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:33 2025 by rpki-client