Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: a1VQ82f5TGfS6ICZiVD0AJ/3+D3rnSHYl/t5YJ3DdWI=
Subject key identifier: 7E:49:92:CA:9B:F3:F0:FF:B1:E5:6F:41:8B:DF:37:34:33:28:D5:DF
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 0198D472B91EBBEDEB5A932E520099121C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 0D79
Signing time: Sat 23 Aug 2025 01:02:24 +0000
Manifest this update: Sat 23 Aug 2025 01:02:24 +0000
Manifest next update: Sun 24 Aug 2025 01:02:24 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: S9JI2lVvhjsiFjbzixBctSlTzenzM6pZlx0HriKvKGs=)
2: pKu7UglcJmA-j3iLVLdtywNO9BE.roa (hash: Zkb8HbwY2s1iIMkolnog2EvROcriM2gwSI0ajYjdw4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:b9:1e:bb:ed:eb:5a:93:2e:52:00:99:12:1c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Aug 23 01:02:24 2025 GMT
Not After : Aug 24 01:02:24 2025 GMT
Subject: CN=7e4992ca9bf3f0ffb1e56f418bdf37343328d5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:92:0f:67:db:d3:2b:e7:21:0c:09:c9:64:
07:15:a3:9d:ab:67:3c:76:1d:af:51:7b:8d:9e:20:
a4:9d:16:5c:25:4d:fb:6a:d0:76:ab:10:36:d9:73:
c6:1a:8e:59:51:94:3f:f6:bf:85:64:e9:8e:a7:5f:
f0:11:6a:3a:d2:53:c0:36:a3:d5:18:00:e0:9e:4b:
43:6a:81:f9:a9:3d:15:aa:9c:9a:2c:d0:9a:7a:66:
b0:12:a2:8d:5c:23:ee:32:41:57:d6:43:f3:4e:f5:
f0:7f:25:c2:8a:be:fc:28:32:3d:98:81:1e:b7:0a:
7d:96:1a:b9:2e:46:10:1a:4c:f3:63:af:61:77:cb:
6c:d2:d4:69:00:ca:58:85:1d:1a:58:93:65:77:71:
c0:e1:21:7b:b7:b2:76:c0:e9:38:5a:c7:75:4c:b3:
42:32:78:d4:9b:06:ea:e3:e3:19:aa:98:fc:3a:82:
44:15:21:57:fa:13:eb:4e:3e:8b:5c:d9:6e:56:da:
bf:b6:18:72:44:c0:a5:92:70:0e:2b:1a:79:fe:c4:
93:51:fa:7d:36:9f:95:ed:3d:b4:8a:6e:74:1b:4d:
d2:e9:d6:99:b6:ed:7e:51:25:51:9a:69:d0:27:5a:
9e:04:37:c2:1f:48:a2:b8:bd:16:17:eb:aa:d1:42:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:49:92:CA:9B:F3:F0:FF:B1:E5:6F:41:8B:DF:37:34:33:28:D5:DF
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f4:ae:70:eb:71:cb:cc:73:54:58:5d:b0:bd:6c:e4:c9:78:
82:4d:c0:76:69:ad:32:f8:08:01:f8:0d:fb:ac:9b:61:b4:d9:
c1:43:2b:61:3d:5d:2b:a8:5b:81:57:2c:51:a2:dd:be:e1:5c:
bf:15:1e:fa:70:79:b3:21:34:8d:9d:77:ce:aa:d8:b2:36:82:
3d:7d:19:a9:5a:61:9f:2d:c2:57:3c:a2:5a:36:b9:c9:19:9b:
2e:76:c2:f1:21:72:d4:c6:81:7b:f2:26:c0:6e:36:09:0d:fe:
03:b4:37:ba:ca:15:27:d8:30:c9:97:8c:be:2a:f7:e0:e2:a5:
6d:72:eb:99:b9:90:6f:3c:20:49:ec:72:fd:38:c6:62:8c:65:
30:be:38:06:67:bb:da:98:ef:7d:15:b0:2b:d9:24:2f:8d:88:
75:6b:a0:41:ae:f5:97:69:e0:dd:a1:cc:35:61:b5:b1:08:38:
6d:81:44:a6:83:c7:ad:f0:58:90:97:32:18:02:a2:5b:91:a4:
8b:dd:f8:34:b9:82:d9:e3:f2:a4:c2:0a:de:5d:ee:06:0c:72:
63:22:1d:da:2b:18:e3:d2:1c:8e:d2:a3:a3:e0:af:30:62:cb:
de:ad:c5:bc:15:fc:d1:01:0e:75:de:98:70:33:16:f2:bc:40:
a3:77:c1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:43 2025 by rpki-client