Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: G9ooxGdU+61t5lvk04RgIAIGZOm6JaBElCTWRcTwf9w=
Subject key identifier: FB:36:E3:2B:D9:50:BE:CF:83:D8:5C:FA:81:88:90:56:B8:F8:56:52
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 01992F36B8B6F13E7D506AF537A14CD6FFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 1679
Signing time: Tue 09 Sep 2025 16:02:19 +0000
Manifest this update: Tue 09 Sep 2025 16:02:19 +0000
Manifest next update: Wed 10 Sep 2025 16:02:19 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: b7AoPitDd/fADZpis0F+v3nmDWEI7MUO550Oopu1v0Q=)
2: VU0FkvZgVaRI8EGkm-qXkP1h2_c.roa (hash: FXgImtBv7FeA5blXsKdg5pD7MuiscFVJi0Lfx25h6e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:36:b8:b6:f1:3e:7d:50:6a:f5:37:a1:4c:d6:ff:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Sep 9 16:02:19 2025 GMT
Not After : Sep 10 16:02:19 2025 GMT
Subject: CN=fb36e32bd950becf83d85cfa81889056b8f85652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:46:1f:ff:57:f9:6b:6e:7a:94:c0:60:4f:
08:21:66:87:b5:f5:9d:c8:a8:fa:01:d6:3c:bf:90:
86:bd:e4:be:61:e6:40:7f:7d:f2:8a:f6:fd:37:94:
ea:07:50:9a:60:96:3f:4a:e9:02:72:23:2b:6f:fe:
9f:e5:76:1c:33:f5:4f:54:c7:7d:94:64:7e:fd:fc:
50:35:0a:7e:cc:c5:71:ca:3e:85:48:06:ca:f8:84:
84:85:42:4e:b6:19:cb:47:48:68:28:30:aa:a0:ed:
f1:98:21:1a:6b:67:49:7e:6b:0b:1e:17:a1:99:82:
07:7b:5c:b3:fb:ab:53:84:ff:db:db:ee:df:ba:da:
ac:31:73:e3:dc:3f:40:c7:18:bf:41:55:3a:b1:b8:
5f:e3:af:f5:fa:6e:3f:4b:bd:1f:e8:cc:6d:58:fe:
ce:ed:44:4c:e0:cb:86:2b:bc:45:9b:af:1a:ba:e4:
d6:83:57:ff:ce:d4:48:3e:8d:2a:ca:14:1e:40:48:
81:66:8a:95:1d:08:82:1d:54:1a:84:12:fe:e1:4c:
43:4c:e6:f1:61:ec:68:a1:c8:74:dc:93:92:8a:91:
90:05:f3:49:62:38:2c:80:fe:43:e6:a1:4e:65:28:
1b:6b:9b:7e:67:f4:ed:b3:34:12:bb:3b:33:fc:17:
51:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:36:E3:2B:D9:50:BE:CF:83:D8:5C:FA:81:88:90:56:B8:F8:56:52
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:df:ff:c6:76:a7:71:ad:40:d3:80:89:07:5d:b1:81:f5:3e:
cd:34:c8:0f:70:af:c5:7d:8c:ce:a0:03:e9:8b:65:b0:aa:e8:
36:59:37:bb:10:29:4d:96:24:ef:66:cf:69:bc:45:8d:62:a7:
e8:d8:9f:c3:c8:c7:60:ea:14:37:ee:c7:aa:78:69:4b:a9:ff:
e9:8f:40:cd:ae:e7:25:57:ba:6c:08:6c:86:79:1c:47:9f:56:
be:ef:84:c9:f4:64:bf:5b:17:1f:d6:88:0e:49:e8:e3:24:a2:
32:bd:16:93:d1:e4:ac:59:08:ff:fe:75:e9:1f:c1:22:5e:51:
f2:e4:40:26:3e:f8:18:f8:2b:d1:09:8a:33:26:ad:1e:eb:89:
f2:42:cf:b9:ee:40:07:cd:f7:bf:1a:7c:b3:3e:01:8d:61:c1:
02:93:07:29:f2:58:68:a6:0f:c4:7f:5b:80:e6:ea:af:00:97:
88:49:6e:cf:90:a6:dd:7c:46:94:39:bb:0f:7b:5b:b1:44:aa:
76:4c:e7:5f:14:43:74:55:4a:94:53:d1:f2:ee:3e:96:ef:e8:
cb:9a:2f:b1:c0:47:5d:c7:08:13:69:1e:08:85:55:bc:34:cb:
e5:9b:de:5c:c5:fa:38:6f:55:07:ca:48:ae:8d:a1:c1:88:cb:
6c:91:8b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 21:56:52 2025 by rpki-client