Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier: uN1ULRLbiphGBnzmAyTyeMvFHHkZcU3I6u02hWjPoeE=
Subject key identifier: EB:22:BA:B3:B8:64:1B:F6:BA:31:03:4E:74:AE:55:44:6B:EA:3F:6E
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 0198D69860557EE6C527A5FFF6B1F579895F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number: 03F9
Signing time: Sat 23 Aug 2025 11:02:46 +0000
Manifest this update: Sat 23 Aug 2025 11:02:46 +0000
Manifest next update: Sun 24 Aug 2025 11:02:46 +0000
Files and hashes: 1: Vephb5Pt3B3EXLg7EOPVAzOC8yA.roa (hash: wPf553d/HK8+hJAOoCPQVSLwr68fouqN6FsXjPzFiWo=)
2: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: LJbKp6FtGl3cddnnVEJxbzV5mmzSoRsRDiqS1SEq/2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:60:55:7e:e6:c5:27:a5:ff:f6:b1:f5:79:89:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: Aug 23 11:02:46 2025 GMT
Not After : Aug 24 11:02:46 2025 GMT
Subject: CN=eb22bab3b8641bf6ba31034e74ae55446bea3f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e2:c7:f2:81:f3:72:d0:57:8b:ca:2b:27:69:
9b:6b:35:2b:a9:5d:2c:18:2b:90:b0:f4:3f:b4:8a:
c3:8e:88:43:a4:84:c0:b2:c1:b6:77:b1:b8:78:b9:
e8:1e:7d:99:45:d5:08:0f:9c:63:46:47:5a:b4:58:
9d:2a:ad:06:64:7f:96:0c:7d:f8:06:41:dc:3d:40:
65:f3:e8:87:0c:9e:02:0d:2d:c9:bd:9f:88:47:e8:
ff:f2:72:1c:63:db:46:c8:22:dd:a9:f2:94:e5:65:
11:20:84:7c:e4:38:15:19:cd:5a:0c:83:f4:ba:c0:
87:b3:c4:b4:e5:ff:e2:a0:54:60:1c:6f:4b:72:d4:
3f:4d:c3:4a:f7:93:4a:81:a9:ab:09:78:71:f7:84:
72:f6:cc:7b:9c:ef:73:7a:62:e8:1f:5d:46:70:9d:
fd:f7:ea:3d:92:29:d4:e0:55:fc:2c:77:0f:2a:4f:
ca:a8:4d:52:fe:58:32:9b:ba:c1:fc:e4:8f:08:76:
b4:da:fd:f7:8e:ae:6e:0c:74:4e:1f:bd:e1:3d:7e:
b0:89:20:23:c8:ec:43:70:9c:7f:37:19:51:35:68:
72:18:ea:d8:50:10:75:0f:86:2d:e7:75:84:67:f2:
6e:16:02:7d:93:ff:ee:c4:7a:9a:f9:f7:7e:2c:a0:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:22:BA:B3:B8:64:1B:F6:BA:31:03:4E:74:AE:55:44:6B:EA:3F:6E
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:de:dc:ce:07:45:5c:b8:b9:2d:13:61:44:9d:ff:c4:8a:68:
22:43:3f:37:b9:16:d9:1f:e1:b3:36:22:5f:7d:38:58:81:50:
4f:5e:b2:89:1b:61:2f:8a:15:76:eb:3c:e6:3c:e3:3e:eb:a1:
ec:04:55:90:d9:dd:55:cb:d7:0e:68:f6:3d:7e:47:43:1d:92:
92:16:26:86:94:c8:01:3e:c3:a3:ba:05:bf:99:d7:da:e4:7c:
10:de:29:10:27:b1:88:b4:26:c4:b9:7b:44:82:81:fd:8c:d0:
37:95:56:d5:d6:16:74:e6:c1:84:98:05:0e:f9:4a:d7:f9:55:
9b:d3:fa:c6:46:9c:c3:33:cc:1e:ed:5d:c1:9f:e7:3c:7e:42:
de:4f:bc:92:d3:7f:a7:25:12:e0:59:17:ea:e3:5f:bd:b5:0a:
a6:30:fc:f2:2c:fb:c8:c9:5b:51:8e:83:9a:a0:c1:9d:a9:0c:
36:73:b9:83:f0:57:d4:dd:bc:09:a8:12:cb:dd:0a:1d:ca:c4:
03:ed:55:7b:e4:69:96:3d:6b:11:de:a1:f6:b2:d0:9c:a9:ca:
4e:22:1e:58:54:85:29:d9:e5:2a:ee:31:d4:3a:dc:c1:5e:d2:
14:be:e8:bc:31:50:15:96:02:03:92:d8:fc:e3:c4:89:ba:a4:
63:04:22:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:27:24 2025 by rpki-client