Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
File: r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json)
Hash identifier: e+X7W7gjKmcOzzffoZyna6lA4rGxXs6Y7MO6VBKSFmQ=
Subject key identifier: 94:E7:3E:8C:A8:B1:5B:4C:C9:07:8C:7B:C6:6E:D1:91:4C:0D:2D:38
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial: 01984852E382E81292804EC4B99A3E868D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
Manifest number: 1609
Signing time: Sat 26 Jul 2025 20:00:48 +0000
Manifest this update: Sat 26 Jul 2025 20:00:48 +0000
Manifest next update: Sun 27 Jul 2025 20:00:48 +0000
Files and hashes: 1: N9sOXFw97UnrkSQWGmd4QE2g0Pc.roa (hash: FcVUr7Wqd51Nq1eKBFPb0ZOL/WKLNXNrrGtgMRztb2M=)
2: p6HHOYDEee_YFxcXEQQw4tj_loo.roa (hash: XVgmeoKKw2smz01W8p65Y0a7sBeyS3+sdPmsdrroyxo=)
3: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: RnvGTvBMeCNGgdocqwc7+KOx/A2qd9i2D9c6LwU9wmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:e3:82:e8:12:92:80:4e:c4:b9:9a:3e:86:8d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Validity
Not Before: Jul 26 20:00:48 2025 GMT
Not After : Jul 27 20:00:48 2025 GMT
Subject: CN=94e73e8ca8b15b4cc9078c7bc66ed1914c0d2d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:95:f9:a0:41:63:d6:f3:2f:e6:cf:a7:32:
3a:21:b3:84:35:6f:0a:18:c2:fa:3a:cd:e2:a5:23:
e5:2c:66:3f:51:40:81:74:ff:17:e7:73:60:df:af:
87:f6:62:76:97:c9:34:ed:fe:01:b6:56:5c:9a:bc:
5c:c2:c0:9c:da:e0:d1:a5:0f:92:57:8d:6c:9f:d4:
6e:6a:c7:ca:51:75:37:18:57:3b:00:02:6d:f3:c3:
6c:e2:d1:a3:43:d1:89:6f:0d:d4:42:f1:08:ee:bf:
77:0c:d7:fb:99:0a:1d:d7:82:bb:09:2d:a9:81:15:
36:4a:c2:4c:2b:0b:5a:5c:68:21:05:0a:1b:dd:e8:
49:cf:3d:8e:e2:64:c5:b4:4b:f4:da:e6:36:6e:50:
b5:e3:49:62:56:c8:1d:dc:6f:cb:01:78:56:48:6e:
14:ee:31:22:ea:f8:3d:87:06:dc:44:87:65:35:9d:
eb:0b:4e:73:60:f8:b9:fa:e5:70:09:8f:c3:46:f4:
1e:e6:15:9e:bd:e8:6e:07:91:ff:b6:a0:e1:30:33:
c7:a5:c3:42:fd:03:50:64:b0:cf:6a:7a:88:58:f8:
e7:f8:c5:a6:41:58:22:4a:c8:3f:77:87:0c:84:e6:
1b:89:da:84:78:ef:1b:dc:89:35:c8:c7:7f:a6:a2:
22:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E7:3E:8C:A8:B1:5B:4C:C9:07:8C:7B:C6:6E:D1:91:4C:0D:2D:38
X509v3 Authority Key Identifier:
keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:53:ab:2b:8b:38:84:6f:36:f4:a2:67:5e:d9:73:af:4a:2e:
2a:68:2f:a2:79:3f:a0:e1:aa:0d:e2:93:09:18:8a:24:0c:6e:
1b:26:98:f4:2c:ab:b7:57:54:2c:2d:ea:bb:17:1c:72:e6:00:
82:a6:63:7d:53:cb:8e:36:db:74:2e:e3:31:9f:cc:19:e2:c8:
1a:a8:dc:cd:6e:e1:3a:5f:fb:54:fa:39:cb:5d:df:b6:b6:bc:
52:57:13:80:ae:33:c2:cf:a1:66:23:90:25:7d:7c:63:e0:a1:
6a:bb:11:53:95:f2:65:9b:ff:e0:8f:a4:04:a2:d5:b4:ec:8e:
85:ad:88:90:b9:1f:f0:8d:b4:bd:1c:51:2a:c3:ff:b1:94:d0:
c9:25:b7:b5:21:c3:e8:e2:3a:d3:a0:63:7f:d8:9a:87:7d:bc:
f4:7d:dd:0c:13:20:4a:e6:d1:af:72:aa:a5:68:fe:b5:b7:8f:
bc:1a:7b:5f:63:3a:81:aa:9d:85:bc:45:22:e0:63:a5:57:58:
a4:84:85:79:8d:b4:65:5d:0b:31:ff:9d:a9:22:49:28:22:32:
4c:71:40:25:40:0c:a6:ee:5c:02:84:82:5b:85:7b:8e:46:f2:
42:d7:fe:bd:30:6e:d9:11:17:22:60:29:e8:3c:5d:d4:b9:7c:
26:6f:6f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:22:20 2025 by rpki-client