Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier: 0tUJ+YMItBKC/lg1Zs1bVZdTdQRuNhy9XRYL8+wtw38=
Subject key identifier: 7A:5C:3C:DC:50:E6:A1:F7:32:DD:BB:51:54:E1:5E:BE:51:10:3D:D1
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 01984A77B98220AD972DAF6A8947012E51AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number: 128A
Signing time: Sun 27 Jul 2025 06:00:16 +0000
Manifest this update: Sun 27 Jul 2025 06:00:16 +0000
Manifest next update: Mon 28 Jul 2025 06:00:16 +0000
Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: XQE41gEOSvMtTrNKhX8cgYVNodlkvSCo+uErsJenRkA=)
2: _iwCmsjTAlw634BVcFH9x4y6od0.roa (hash: sGzYd7+zk4VbbBPH9QI8yNwz1RatcjDRVrzAv9yiEMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:b9:82:20:ad:97:2d:af:6a:89:47:01:2e:51:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: Jul 27 06:00:16 2025 GMT
Not After : Jul 28 06:00:16 2025 GMT
Subject: CN=7a5c3cdc50e6a1f732ddbb5154e15ebe51103dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3e:d3:45:61:66:e6:f8:6e:e9:1a:ba:e3:98:
b4:f5:34:bd:bc:3f:53:1d:5d:31:a6:6a:36:88:ec:
3c:8d:b8:b7:70:f6:e8:cd:22:28:86:a2:d3:bf:3c:
74:8b:d5:eb:10:95:a6:c1:23:f1:ac:8a:91:3b:e5:
69:0c:6c:41:df:3f:c6:e1:85:32:96:69:7a:1a:8c:
23:76:70:4d:c7:8d:03:f6:9f:af:c0:3c:fe:81:41:
46:e6:fe:4a:d7:ff:c3:a1:79:f9:41:6b:ee:2a:93:
1e:48:39:4d:94:5d:65:3a:ec:df:eb:10:74:85:ee:
b0:ce:54:08:5d:db:7c:9e:bb:4c:4b:87:f5:d0:10:
a5:cc:2c:71:ac:be:4d:50:a1:be:1c:fe:d6:e8:58:
e1:bd:b4:27:01:6c:8b:53:4a:64:4b:74:75:7a:e4:
ca:c2:70:3c:d1:63:1f:b4:22:8b:ca:ba:b2:af:d4:
ee:85:f5:92:32:f8:22:25:2c:2e:63:bf:a5:a6:ef:
48:d5:ff:bc:f4:1d:18:6c:1e:a4:e2:43:be:55:00:
1f:45:d7:8e:c8:4b:4a:27:44:64:8e:54:9d:4a:4c:
76:b2:1f:92:ea:fd:f5:a5:fb:33:d2:02:ca:d7:38:
d1:35:2d:66:c9:9b:06:af:d8:2f:5c:25:04:ad:8b:
05:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5C:3C:DC:50:E6:A1:F7:32:DD:BB:51:54:E1:5E:BE:51:10:3D:D1
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cb:9c:a5:0a:42:27:4c:04:03:5c:63:a6:99:82:5a:60:12:
d9:88:5d:1b:27:5f:04:de:f6:ca:54:f5:a0:43:a9:0f:bc:62:
06:6b:8f:e9:8e:8e:07:ff:ff:4a:e8:ec:1d:1e:ce:74:8b:d6:
4a:7d:93:64:09:02:ea:82:ef:de:92:22:10:c2:cf:d1:d4:5f:
ba:38:42:25:53:0b:32:c1:a7:c0:3a:33:8e:2c:e2:fa:32:99:
88:a4:78:6d:99:79:2a:ab:26:14:87:8f:67:21:73:15:a6:e2:
9f:51:ba:4f:c2:98:19:ed:84:4b:d5:79:3a:12:c3:47:d1:d7:
41:8c:88:c1:f7:2d:19:c7:d2:7a:d6:01:77:32:00:15:29:aa:
8b:a7:7b:cc:2f:54:b0:51:86:34:14:8b:1f:bb:dd:f6:39:6d:
e9:39:6d:e2:c7:c4:bf:64:a9:e4:7a:3a:f7:3c:0d:e9:a0:88:
87:f5:d1:c6:57:d3:98:57:a9:8f:a9:13:ab:00:0d:03:37:36:
8b:3d:cc:c1:7e:81:c4:61:85:b8:96:1c:dc:18:56:c8:23:80:
10:75:2b:8d:8b:98:8c:e7:29:58:aa:98:89:7f:91:2b:0f:22:
d0:0f:16:50:f3:87:a8:d6:6e:bb:26:45:f1:ce:89:05:37:15:
4c:92:a9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:00:27 2025 by rpki-client