Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: u/hEebCGMgvL0vHQcsNbtbuW8iRlZdWcq+X7M/NY+Sc=
Subject key identifier: 6C:F6:55:82:04:F1:67:5E:26:9F:A5:E8:D7:5E:FE:1F:D9:28:C1:09
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 0198D58354A017461E21C2ACD4C7FE3C6986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 118A
Signing time: Sat 23 Aug 2025 06:00:10 +0000
Manifest this update: Sat 23 Aug 2025 06:00:10 +0000
Manifest next update: Sun 24 Aug 2025 06:00:10 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: 7xFVLMI4JSQWBuX8tBHMQdN4OmVcZh/sG6tiZXCW/8k=)
2: _Sn3RhfY--fiVliyrSpcw_Dpx8U.roa (hash: 0DlsX3tbgemelzimR5EC4gu2Xnu0fF/hzb1n4QMYZI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:54:a0:17:46:1e:21:c2:ac:d4:c7:fe:3c:69:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Aug 23 06:00:10 2025 GMT
Not After : Aug 24 06:00:10 2025 GMT
Subject: CN=6cf6558204f1675e269fa5e8d75efe1fd928c109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:04:c6:0b:08:73:28:34:ce:93:26:2c:b3:
67:fe:2d:5a:50:7f:cb:33:8b:30:9b:49:24:9f:18:
27:d2:36:68:e6:6f:1e:65:b1:e8:f8:74:c6:08:d2:
79:d4:02:d5:09:54:fe:7a:7e:13:75:0b:b9:dd:c5:
89:f5:43:e2:49:c4:5f:b2:4f:94:f5:0b:af:c8:eb:
57:77:05:2f:9c:d6:5a:de:ef:f2:23:b5:7c:69:03:
86:99:14:22:37:52:f0:ae:ad:f5:78:3c:8f:69:33:
58:86:bc:41:f4:13:b0:fa:90:71:99:e7:b1:db:b9:
d4:a9:89:b0:1a:7c:b4:56:a8:50:32:d1:4b:77:7b:
c3:ce:1c:e9:96:e9:ab:46:aa:5d:f1:58:e4:69:e9:
6f:4a:13:e1:4a:fb:f8:44:ed:15:c4:a3:43:cd:5a:
e2:ae:e4:a1:76:45:36:d1:10:c5:69:df:05:ca:1e:
7d:60:bf:de:31:ea:67:de:d8:30:3e:93:8f:af:18:
9a:b8:ae:f1:28:c7:c6:9f:cf:4e:3d:70:83:59:11:
29:6d:43:61:a0:3e:23:e3:4d:e2:c4:fd:83:0c:bc:
ad:28:2f:db:aa:f0:66:3e:2a:c2:fc:16:ec:39:9c:
47:fd:51:c1:99:14:01:f5:ab:88:d7:78:18:47:1b:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F6:55:82:04:F1:67:5E:26:9F:A5:E8:D7:5E:FE:1F:D9:28:C1:09
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2c:34:9e:e1:76:c5:55:a6:80:ce:9e:64:45:5b:7a:73:08:
53:d6:5d:dc:cb:f6:fb:f5:58:08:d0:90:6a:db:76:ba:04:16:
cb:ea:01:6e:0a:44:37:d7:6f:5b:cb:52:b1:42:e7:84:22:2d:
3f:e2:59:5c:ec:fb:7c:98:78:73:8e:2c:62:3b:e9:cc:7b:e5:
38:80:13:68:da:58:c2:e5:80:ac:54:b2:04:c3:2f:50:0c:f4:
69:88:ca:f1:12:83:f4:24:c1:ea:22:ea:7b:7b:ea:93:bf:da:
f3:8b:cc:f8:34:91:ae:11:98:e8:39:bd:e9:48:bc:6a:f1:c4:
40:06:84:03:f0:56:08:77:bb:45:09:60:ee:17:b7:78:51:d7:
c8:3d:45:c9:33:3b:e6:a6:b9:cf:4c:86:f5:ff:d3:c1:da:18:
43:cd:51:95:40:48:9e:8c:55:95:55:8e:69:f6:40:df:a9:b2:
8b:bb:9f:b1:be:a6:35:ef:ea:a0:55:e2:63:49:70:04:9e:fa:
6f:41:75:41:c0:4c:be:0c:6f:99:d3:79:d2:64:b9:e5:00:e9:
d1:83:cc:c2:c3:29:d4:5a:f7:7d:9c:84:09:5a:13:8d:75:7b:
0b:b9:ea:1c:97:fa:14:f4:69:82:db:8a:d3:1e:76:bf:2f:8a:
39:d6:48:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:23 2025 by rpki-client