Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier: 3iYe6b/bIRGkeE4tjqhUL6KbgL+3zMfi2NxgBP88Djs=
Subject key identifier: 7D:C3:AE:F6:0C:AA:6C:9F:8F:8A:33:26:22:11:E6:6A:79:9F:07:08
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial: 019849D3838AE79EAA6106DAAACDB518AED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number: 04CC
Signing time: Sun 27 Jul 2025 03:00:55 +0000
Manifest this update: Sun 27 Jul 2025 03:00:55 +0000
Manifest next update: Mon 28 Jul 2025 03:00:55 +0000
Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: o2Di0IRBvS8qLQRS4TsaLI28NASdkITT9Fne8Bmiru0=)
2: Mvk_oqElVRdnhvvvd2d0ON2M6O0.roa (hash: h/FNSiffcYfhZT3VlgEkLi4vidisAmOMBIjfYdnqCDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:83:8a:e7:9e:aa:61:06:da:aa:cd:b5:18:ae:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Validity
Not Before: Jul 27 03:00:55 2025 GMT
Not After : Jul 28 03:00:55 2025 GMT
Subject: CN=7dc3aef60caa6c9f8f8a33262211e66a799f0708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:d1:f4:b2:b4:a8:af:57:77:61:f8:03:18:
01:84:77:5e:a2:2b:e2:04:b8:a9:d2:49:94:10:d6:
ce:7b:5c:5f:06:99:f9:71:4b:6f:43:42:2a:5b:5a:
93:7d:60:b0:32:51:9e:7b:1f:6a:68:9d:0e:2c:ca:
1e:31:db:e9:df:47:be:c8:ab:a0:4d:de:85:9f:c4:
96:23:f0:4c:86:08:28:e9:51:14:4b:d5:ad:73:54:
cf:a6:9c:76:28:7b:fc:04:93:b8:90:bd:de:a4:9a:
5c:6c:1b:ec:dc:64:d5:48:b6:04:9f:3f:7c:06:f6:
67:b7:ad:66:80:00:31:c5:38:a0:03:33:64:57:75:
e4:af:6e:c8:84:96:41:23:04:ce:bf:a3:44:04:b3:
a8:20:90:b7:8f:8b:48:27:58:4f:fa:b5:cf:d4:aa:
b9:61:e1:63:36:9e:29:13:e6:04:bc:9a:8e:1f:98:
76:13:de:c4:3e:34:fe:11:1d:0d:ea:be:95:5e:32:
eb:88:ee:5d:03:3d:c1:37:90:ee:83:3c:75:10:25:
83:cb:e4:25:2d:65:62:68:98:e6:6a:b7:97:4d:56:
fa:17:45:0d:b6:f1:db:5b:00:c3:b7:da:c2:0c:bb:
66:29:03:3d:fd:3a:bc:30:0d:01:77:36:5e:75:19:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C3:AE:F6:0C:AA:6C:9F:8F:8A:33:26:22:11:E6:6A:79:9F:07:08
X509v3 Authority Key Identifier:
keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d3:5e:a4:ff:2e:5f:0a:34:e5:0d:9e:39:2e:c1:bd:e9:4f:
88:72:2e:91:95:18:b9:b9:80:3d:06:30:7a:e7:b3:e2:f1:b5:
5b:b6:2b:f1:25:ee:73:72:13:96:da:0a:2e:2a:f6:c4:07:6b:
e1:2c:e7:28:42:96:3f:68:5e:3a:32:1d:8c:34:b9:cf:37:30:
19:c7:cb:d7:6b:f2:ac:28:25:3b:ea:ff:dd:4a:52:32:25:08:
75:9f:79:e6:2e:39:5c:74:3a:61:ea:19:71:00:f6:a8:a5:7f:
ee:e1:ee:0b:56:f9:57:2c:14:63:c2:19:27:e7:c7:57:08:91:
e0:30:ac:70:f6:a4:f8:d9:18:3f:5c:c9:10:eb:ed:ad:2b:27:
3d:b2:3a:c1:e7:e7:51:30:d7:e2:de:4d:87:ed:57:0f:a0:43:
d3:9b:46:b6:68:96:4b:21:90:62:2d:09:94:d7:8c:30:f9:bf:
f2:e0:c9:49:8e:4d:c6:a7:11:b4:66:fe:db:35:ac:e7:56:0d:
38:93:e1:b8:83:2c:df:9d:e7:90:fd:8f:1d:f5:0a:12:54:1d:
17:3b:40:3c:9c:30:b6:49:c8:14:b2:11:99:24:3d:80:c6:4a:
40:49:3f:90:8d:38:af:f8:41:a7:84:b3:4e:b4:20:22:07:ba:
99:d0:44:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:07 2025 by rpki-client