Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier: AidiFjMNOVFdN/HcXEaU+t/XfYyT6jDGDrcQM1hsUvM=
Subject key identifier: EA:E3:33:E2:D6:CC:BE:D7:9D:54:25:2B:CE:A1:5B:E0:4F:C8:23:67
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 01985D239FD39FDA17C11E9A406E21F7CAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number: 0C0B
Signing time: Wed 30 Jul 2025 21:01:12 +0000
Manifest this update: Wed 30 Jul 2025 21:01:12 +0000
Manifest next update: Thu 31 Jul 2025 21:01:12 +0000
Files and hashes: 1: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: HBVMjTPgJdvCtgsNfAC/M/vhpTEGcieoYrViled8uzk=)
2: hfSj4Acr0ZdBdVZF-bmfhSWxDR0.roa (hash: qMvzKdtsac1CrAS5/GB10mnE0HZEb+d2b/OglfbpJc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5d:23:9f:d3:9f:da:17:c1:1e:9a:40:6e:21:f7:ca:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: Jul 30 21:01:12 2025 GMT
Not After : Jul 31 21:01:12 2025 GMT
Subject: CN=eae333e2d6ccbed79d54252bcea15be04fc82367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bb:ba:f8:8d:b7:04:cd:c4:32:9a:6d:52:a8:
4a:12:29:9a:8e:7a:3e:38:34:75:f8:a2:12:f0:83:
e2:20:17:eb:19:69:be:04:29:4c:11:46:5c:be:72:
83:85:bb:fa:63:96:b4:25:a9:a6:80:0c:54:c9:b4:
d6:8c:ca:50:1f:2a:15:b3:35:fc:f2:a6:0c:b0:53:
59:63:05:7c:24:e6:b0:5b:0f:8e:08:9e:87:52:97:
26:89:7c:6e:47:44:1a:9e:84:8a:90:9a:87:03:21:
5c:31:52:c7:f7:c0:1a:d1:4d:af:4d:ed:58:a2:6f:
36:55:d1:32:bb:d6:60:92:24:57:6a:44:ed:38:4b:
a5:f6:37:3d:87:1d:40:f1:07:35:87:50:34:2f:3c:
65:a8:94:58:56:fa:bc:aa:4b:42:7c:19:a6:e1:23:
14:ad:e1:68:d2:37:e6:71:3c:ab:5d:d1:8a:e0:21:
df:d5:18:c9:d2:f6:be:b9:27:e9:e7:fd:00:82:65:
dd:3c:e8:f6:84:d4:13:c4:02:88:21:be:ca:05:b6:
94:a4:ba:67:2a:d7:65:45:9d:4a:14:61:11:2f:a8:
7a:4a:aa:e5:6e:66:aa:51:0f:b6:51:7c:ca:c4:6a:
7a:cd:3a:66:8f:af:12:8d:78:8b:5c:4f:3a:1a:b4:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E3:33:E2:D6:CC:BE:D7:9D:54:25:2B:CE:A1:5B:E0:4F:C8:23:67
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e1:0b:95:2e:f4:d7:a3:03:d0:87:0a:27:d9:f5:fc:8d:32:
63:e5:02:c6:e5:ae:24:78:00:cc:bb:20:6f:a1:91:99:33:24:
2f:fd:75:df:83:1f:7d:8c:ae:dc:8b:90:02:85:a7:c9:41:f2:
68:01:1e:54:3f:db:64:cb:3a:31:2d:d4:f4:8a:5d:00:71:48:
76:2b:a8:b6:55:92:65:82:6b:d0:4b:45:38:00:e2:03:8b:ec:
f6:ae:a4:50:c9:d3:1d:7d:82:0d:34:33:1d:2c:22:2c:ab:06:
dd:2c:b7:91:a1:73:6b:86:c2:0f:eb:be:32:e4:27:b1:03:3e:
8e:c9:a0:c3:b1:93:16:4d:e5:5d:32:bb:45:a7:04:d8:7b:3f:
d7:96:25:c5:14:7c:ed:aa:ee:9a:4b:e1:f6:d4:a7:1d:fa:28:
73:41:7a:6d:2f:6f:19:64:32:96:c9:43:28:83:6d:6b:5c:d0:
bc:55:41:ad:32:97:dc:af:46:0c:eb:62:53:4e:de:6d:41:87:
6a:e0:4e:f5:17:c4:0b:a6:0b:35:7c:35:12:a8:9b:67:7f:59:
0e:c2:42:fb:f6:b2:ab:2b:d5:aa:a2:7d:fb:0a:c4:34:58:fc:
ff:4d:8f:08:c6:d3:23:0b:36:ab:e9:e7:4c:89:0d:bf:26:ad:
88:20:c6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 05:42:39 2025 by rpki-client