Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
File: 3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft (raw, json)
Hash identifier: 9rtstNvbT0DPWyjJ8Pkqt7L3ruzV9fAKBfTj5O2/eis=
Subject key identifier: 93:73:57:19:59:92:0C:2B:DA:88:80:9D:91:D0:93:A9:97:73:39:8F
Authority key identifier: DC:C4:3A:47:09:76:F3:74:7F:68:2E:32:D2:7C:3E:CA:CE:E0:CC:59
Certificate issuer: /CN=dcc43a470976f3747f682e32d27c3ecacee0cc59
Certificate serial: 01984BC1C9B3F9DBE07C57F1B6AF7BD00D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
Manifest number: A3
Signing time: Sun 27 Jul 2025 12:00:47 +0000
Manifest this update: Sun 27 Jul 2025 12:00:47 +0000
Manifest next update: Mon 28 Jul 2025 12:00:47 +0000
Files and hashes: 1: 3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl (hash: upbYi+UyNNvIE/Z+cK9S2bodvkYgY1vxyPESohft5fQ=)
2: ttiSctxtKk--_TjJLyKyxsLTH5M.roa (hash: cExQTThTOKNeo7f6JBcYKDPiMo9ejsGy+rMa2dC0A4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:c9:b3:f9:db:e0:7c:57:f1:b6:af:7b:d0:0d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc43a470976f3747f682e32d27c3ecacee0cc59
Validity
Not Before: Jul 27 12:00:47 2025 GMT
Not After : Jul 28 12:00:47 2025 GMT
Subject: CN=9373571959920c2bda88809d91d093a99773398f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5e:76:9e:2e:44:e8:90:93:3f:2b:90:ec:62:
bf:d1:49:c9:3c:86:2b:2c:15:28:08:9c:6b:1d:e2:
7b:8e:44:22:94:df:bc:1a:6a:b2:49:20:f3:c5:f8:
25:17:43:03:be:62:54:e2:30:ea:ac:62:22:94:06:
01:ea:94:c6:e9:74:fa:14:e9:e6:2b:01:c4:b8:16:
9c:0b:5a:f4:52:91:60:93:24:b9:40:76:71:0f:a4:
e7:71:02:d6:51:4a:f7:cb:59:ed:8b:82:90:d2:eb:
49:43:31:dc:49:3d:e3:84:e7:47:0d:16:52:89:d1:
77:ee:cd:00:36:1b:22:9e:03:66:43:3d:59:a3:13:
59:ca:6e:40:7e:cc:5f:33:5b:b8:4b:5b:8f:3e:46:
5c:8f:74:ac:65:c2:b4:55:d5:ea:38:a1:3e:e0:5a:
c7:5e:06:09:ec:f7:df:d2:5a:cb:cf:56:ce:4b:f4:
1a:c5:ae:c2:e1:6d:ee:ae:81:2d:12:a9:c6:86:fb:
11:1d:f4:d0:31:91:4b:9e:64:88:a0:b5:aa:7f:ee:
d1:ca:45:50:e1:02:77:1e:82:1c:c9:ff:f8:0b:f9:
1e:16:0f:8b:f7:cd:6f:bb:52:ef:30:55:b9:aa:5c:
02:5e:75:e4:49:8d:f1:24:f8:0d:cf:e6:42:31:c0:
86:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:73:57:19:59:92:0C:2B:DA:88:80:9D:91:D0:93:A9:97:73:39:8F
X509v3 Authority Key Identifier:
keyid:DC:C4:3A:47:09:76:F3:74:7F:68:2E:32:D2:7C:3E:CA:CE:E0:CC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MQ6Rwl283R_aC4y0nw-ys7gzFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/8a71dc-9356-4d3f-80a4-51c6f60d5979/1/3MQ6Rwl283R_aC4y0nw-ys7gzFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:19:36:83:7c:60:98:b0:62:f9:f0:bb:03:a5:1f:9c:c2:46:
08:fe:fa:4f:55:98:2c:d7:22:50:cb:d9:53:3a:92:9a:dd:5a:
0f:e9:22:59:50:ed:94:cd:bf:54:aa:d1:53:82:5c:3f:f7:3b:
02:b8:61:fa:13:3c:a3:58:24:82:c2:96:8c:69:cf:9c:a9:43:
04:e3:c1:68:ea:df:2f:ab:66:4e:6f:52:42:d9:0c:75:3b:e6:
83:f6:72:03:f9:c0:1f:f1:fa:71:83:8d:ce:48:d9:20:5b:0f:
00:5f:01:e8:73:d1:92:57:39:e1:09:a3:98:0a:30:8a:f3:40:
86:9d:4e:06:01:53:06:39:c3:af:60:c6:13:44:47:5e:56:46:
31:4e:19:0f:e6:3b:c2:19:b6:44:cf:83:0d:c7:aa:da:2a:b1:
fb:33:1d:79:a5:94:a1:43:d9:29:22:b1:c5:e4:d8:aa:b9:da:
be:02:0f:b8:83:94:89:32:9e:ed:cd:e4:24:6e:d6:4f:4f:be:
fc:03:74:06:c8:c0:25:f2:71:cc:79:c2:7b:21:fc:5f:b6:b1:
e9:d6:9a:fb:57:c5:ff:07:d2:2c:27:26:76:8e:cb:f5:6b:3e:
32:b3:bb:9e:80:6d:25:c5:77:7f:d2:78:ab:72:b1:0f:50:a6:
bd:2d:28:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:29:08 2025 by rpki-client