Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: tUzXOXT6zOTqTQwtpBcq/33TUc+ECMo6M5XDORxSXKc=
Subject key identifier: 65:60:80:0A:1A:AB:3E:EE:C2:31:05:5A:9B:78:69:B3:84:5F:73:A5
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 0198402B872272ED1FA0E11C203CF7037BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 1590
Signing time: Fri 25 Jul 2025 06:00:51 +0000
Manifest this update: Fri 25 Jul 2025 06:00:51 +0000
Manifest next update: Sat 26 Jul 2025 06:00:51 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: KqbrlAn96TqB3AHe/PtO9N0f7jncJ133TnsN+qtpHXM=)
2: KC65iLduV38Y-_4YeZcOkvub1x0.roa (hash: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:2b:87:22:72:ed:1f:a0:e1:1c:20:3c:f7:03:7b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Jul 25 06:00:51 2025 GMT
Not After : Jul 26 06:00:51 2025 GMT
Subject: CN=6560800a1aab3eeec231055a9b7869b3845f73a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:2a:d0:8c:3e:9a:3c:3b:e8:fd:33:64:74:
0d:f6:43:be:11:0b:20:c7:b2:b1:b5:83:19:79:2c:
ce:b1:0f:96:f9:e3:cf:fd:39:2c:42:7a:bc:40:9f:
bf:13:6a:2f:79:a7:25:01:6a:6d:7b:17:e3:ff:01:
7f:c1:36:28:09:19:b8:ba:86:99:32:ad:06:58:65:
2b:ca:06:a1:eb:11:fe:33:31:86:62:12:0c:bb:d8:
99:38:3c:e0:fd:bd:43:f4:6c:f3:74:38:ab:98:0a:
9a:0d:c7:a5:da:17:f3:ef:6c:31:69:8c:16:13:35:
a4:6d:22:88:c9:08:9d:8f:b7:fb:c8:b4:92:aa:2b:
68:f6:aa:ac:15:97:0d:32:97:2a:87:d5:82:ea:45:
20:45:ab:4f:ab:61:d9:1b:51:64:6a:c6:c6:8b:47:
6f:3e:0f:4b:b4:da:b0:8b:96:d4:e4:83:76:13:ea:
51:ff:7b:49:68:bd:46:be:a5:d0:3d:96:fd:ee:69:
67:7f:63:de:12:6a:ae:57:c6:95:60:e8:ba:cc:85:
eb:76:b6:e0:95:63:8d:7b:ed:41:aa:28:55:de:3c:
09:fb:dd:52:4f:68:18:99:c0:3c:cd:55:f0:b4:cf:
38:f2:d5:97:ac:59:55:7c:4c:6b:e4:e1:a9:2f:09:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:60:80:0A:1A:AB:3E:EE:C2:31:05:5A:9B:78:69:B3:84:5F:73:A5
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c0:bf:5a:23:33:bd:30:57:69:4c:f1:cd:02:92:ae:8f:ea:
a2:39:29:32:74:76:e1:d8:73:11:79:5b:8b:d4:ad:5e:c6:ca:
82:ab:15:f9:9b:f4:91:0a:af:9c:85:f4:ea:3c:92:b7:2c:80:
12:50:fd:4e:d6:8c:e6:47:a0:0e:9f:35:94:37:ed:f4:98:02:
82:37:c7:8e:b3:89:7f:33:c7:cd:b6:9c:55:d2:bf:04:5b:b3:
32:9b:18:1f:1a:d3:a7:e8:00:2f:c7:b3:0d:a0:af:9c:b7:f0:
e7:5d:37:ae:05:2f:9a:5c:db:ef:29:b7:46:67:91:fa:aa:87:
b6:20:66:7c:73:88:79:0c:5e:72:04:e2:ac:09:68:84:cd:84:
21:81:4d:58:be:38:09:b5:78:65:23:e2:bc:bb:ea:d7:c7:72:
a8:e4:b3:02:4b:94:61:37:76:26:f5:58:a1:9d:89:a3:fe:1e:
52:e0:1e:20:60:c5:c8:6f:d7:38:23:1a:2e:96:d1:f7:d3:6b:
70:55:ba:85:fd:0e:07:9e:c8:87:d9:a4:1b:30:bb:94:09:37:
dc:1b:73:ff:ea:81:3d:e2:2c:ef:3a:73:c1:5f:1b:c8:5d:b3:
9b:5f:69:8e:4a:f8:70:33:96:5b:70:e7:be:c8:c7:57:72:ea:
43:23:06:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:58:29 2025 by rpki-client