Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json)
Hash identifier: EtckhlABKU/jHFtHjyASjvshipizdiPnPHbyev1q+Sw=
Subject key identifier: 53:23:EA:77:52:74:7B:21:A2:60:E2:6C:5F:28:FB:49:AC:9B:70:FB
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 01984B8AD71ABD0AC76B0FCBE3D18A127765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
Manifest number: 1145
Signing time: Sun 27 Jul 2025 11:00:46 +0000
Manifest this update: Sun 27 Jul 2025 11:00:46 +0000
Manifest next update: Mon 28 Jul 2025 11:00:46 +0000
Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: RfPwpLc0RTrKZZ7FwB9j/3HHD2H+w1bzhphmu+fBq0U=)
2: bJ6OkDBz35azmUeGZSSY8SRMI4Y.roa (hash: y21BnaoaGpgbQvC0jOtfGrk+wq3H1xWVUYMR7XJq8OU=)
3: zDL_THkFuQHLJwbg-SI_E4lpZ3A.roa (hash: krJTySa4xAIWcd+RLsqPBRipwsimqCaZxlGeTrQ72GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:d7:1a:bd:0a:c7:6b:0f:cb:e3:d1:8a:12:77:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Jul 27 11:00:46 2025 GMT
Not After : Jul 28 11:00:46 2025 GMT
Subject: CN=5323ea7752747b21a260e26c5f28fb49ac9b70fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:d2:3a:01:6e:24:01:2b:b2:d0:28:6f:f5:
7c:35:3f:a8:94:0f:80:ea:5c:6a:2b:ec:fb:c7:c6:
28:16:96:b5:59:4e:31:a0:ee:fe:62:d3:63:c3:ad:
80:2c:d5:7f:cc:36:cd:6d:c6:4a:48:1b:98:73:4a:
35:23:3c:3f:e0:30:bf:4b:fd:c6:35:58:58:4c:16:
ec:f1:3c:05:7d:77:f4:2f:33:8c:a8:fb:ed:9b:bd:
9a:54:f4:b7:98:87:7c:79:ed:e3:53:6d:0b:36:a8:
15:23:cb:d7:5a:37:b7:f5:49:8f:9d:a6:6c:3c:76:
c0:06:9b:61:10:e2:63:4f:20:d8:1f:c3:18:d5:45:
7f:60:4e:60:5c:a1:cd:b9:dc:0b:8d:a5:95:fa:ca:
9d:f7:67:e4:25:0d:bb:46:5e:83:22:23:29:f8:c5:
5a:74:ce:c2:c1:55:cc:45:18:08:14:d7:21:59:e2:
28:d6:b9:55:26:b0:70:45:cd:28:95:31:b7:46:56:
d6:63:13:30:72:a0:d6:7a:7c:bc:aa:93:6c:dd:b6:
45:06:1b:31:09:35:a1:64:49:2d:4f:79:b0:b8:6e:
5c:ba:16:34:de:cc:ce:aa:98:a2:23:99:b4:93:e7:
54:a6:59:06:49:d9:8b:51:26:9a:7d:84:6e:3e:31:
79:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:23:EA:77:52:74:7B:21:A2:60:E2:6C:5F:28:FB:49:AC:9B:70:FB
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d3:92:66:df:e9:b5:6c:2a:3e:ca:eb:24:4b:49:97:af:21:
71:f0:c6:58:37:6d:7d:aa:80:6c:34:02:ec:62:11:74:98:6c:
c6:08:39:0e:3a:0a:ed:d1:75:2b:62:23:a4:a1:9e:12:30:10:
83:f5:a2:d2:8f:80:de:c9:b6:e0:04:75:c0:cd:fc:6e:64:af:
1e:0e:62:8f:9b:14:05:fa:de:9b:8b:09:b2:22:54:41:1c:71:
60:21:08:4d:1e:f0:04:65:c6:ec:5e:a6:58:0a:39:0a:df:f9:
1f:db:4d:dd:25:8f:f2:9f:77:db:00:27:09:9c:1e:56:d0:c3:
51:6a:84:cb:16:96:ba:90:90:00:c5:6d:e3:68:e0:9e:3e:07:
aa:5f:4b:70:39:c0:b3:61:0e:7c:42:83:07:16:5c:a2:1f:04:
8d:20:3a:76:a7:5f:af:7e:e9:00:4a:45:9c:92:51:08:7b:46:
d4:c3:e6:65:24:88:6e:ea:5e:7f:c9:72:c4:d2:5f:e7:d1:a4:
db:b4:39:4e:c4:9e:6f:77:f0:13:ec:5d:13:fe:09:1b:05:98:
ac:26:97:16:58:b0:f9:07:e2:2e:11:b0:d1:f4:a3:c0:4d:b7:
e9:6a:f2:87:b6:98:3c:04:67:eb:0c:3f:04:04:0d:9c:76:b7:
db:42:33:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:08:34 2025 by rpki-client