Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
File: EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft (raw, json)
Hash identifier: qiw8XirmD0qIUAAOwSIYtjm29yyznWoHF3ge8OSjiik=
Subject key identifier: 3B:F8:EB:93:40:BB:3E:01:68:06:86:6C:73:CD:8E:16:65:62:B9:F1
Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Certificate issuer: /CN=1170356135adf47ed9708cb0a13680894c2339ea
Certificate serial: 0198684C0D576AEAE513CD7DC3573C0ACAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
Manifest number: 15A3
Signing time: Sat 02 Aug 2025 01:01:11 +0000
Manifest this update: Sat 02 Aug 2025 01:01:11 +0000
Manifest next update: Sun 03 Aug 2025 01:01:11 +0000
Files and hashes: 1: 8u57ArQxKO_4JRsiP8ig9E_nJLs.roa (hash: ifzsEyICQHhNmNaBIhgOvnazrnhVrug9jj3mLB5h7cs=)
2: EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl (hash: rgh+P2dlrYUavb6GZigD7+B1/WfuT9/Arg+i6t1pBR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:68:4c:0d:57:6a:ea:e5:13:cd:7d:c3:57:3c:0a:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea
Validity
Not Before: Aug 2 01:01:11 2025 GMT
Not After : Aug 3 01:01:11 2025 GMT
Subject: CN=3bf8eb9340bb3e016806866c73cd8e166562b9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:e1:65:b2:8c:3d:09:ec:d5:98:9a:87:40:
cd:c7:97:62:6a:c0:34:a4:f2:3d:6e:20:d0:e0:07:
91:4c:d0:6f:bd:3c:a0:06:95:fe:48:59:db:db:5b:
da:ba:5d:18:3f:f1:b2:3e:16:5e:d9:66:99:68:61:
f1:20:62:a9:3a:a2:6a:76:15:34:7d:10:53:b2:81:
2f:a1:79:e7:21:5b:34:85:01:5a:ef:4d:ed:db:3f:
d7:85:8a:c8:c7:3e:01:df:0d:ef:36:0d:25:7d:82:
e5:fc:60:91:fc:53:2e:6c:4c:c7:22:8c:dd:c2:4e:
8c:03:1b:51:bb:aa:3e:10:c7:a1:47:aa:73:10:c8:
29:37:5d:ce:74:47:d2:95:68:6a:3d:66:51:f6:90:
54:15:6e:91:01:72:f1:85:6b:3c:6a:5a:6b:36:b6:
5e:d7:23:01:06:3a:b0:61:1f:3f:4a:6f:e6:5d:cd:
e7:6a:b3:d2:24:a0:a1:d4:16:39:54:91:64:5e:b7:
bf:83:a8:96:b1:2d:d8:77:50:df:1a:02:b8:de:f1:
f3:ab:bc:f1:40:45:94:21:30:48:a1:e5:8c:9c:b2:
91:a7:03:94:8e:7b:dd:ba:d5:91:85:6e:af:b9:58:
3d:b1:7b:8a:a7:3a:e4:17:da:ec:53:9a:0f:f2:b2:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F8:EB:93:40:BB:3E:01:68:06:86:6C:73:CD:8E:16:65:62:B9:F1
X509v3 Authority Key Identifier:
keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:54:93:4d:82:55:45:b3:48:2d:37:4e:6b:6f:d8:97:a9:15:
36:ae:4e:97:49:07:8f:3a:d4:3e:1a:50:a9:20:a9:44:2f:07:
01:b8:70:88:81:41:ce:53:51:cc:3f:95:e9:b3:29:21:32:3d:
3e:9e:68:61:70:54:43:3c:bf:6d:e6:40:75:3b:ba:25:bb:f1:
38:5b:79:7b:d0:10:2a:91:09:7b:6b:2d:3d:eb:8d:05:3c:f2:
51:e9:bc:1e:39:1e:a8:99:8c:e6:42:f9:0c:45:30:05:2c:60:
f3:4d:24:29:e5:66:69:fc:fb:25:b3:6b:07:3a:2d:3c:ed:4b:
78:6b:3d:cf:12:5f:f9:ff:15:13:06:26:a6:62:81:5d:73:5f:
87:58:26:fd:68:ef:f9:08:ec:a3:cf:7d:1e:4e:eb:85:1f:e3:
94:bd:05:4a:42:81:f9:e1:66:60:ae:8d:13:71:25:b3:06:4a:
10:f9:b6:6d:54:6f:f7:b9:d2:fe:9f:e7:53:bd:5e:57:d4:f1:
69:f2:16:ce:9d:ca:56:dc:30:7e:99:f7:fb:13:d9:fd:53:c3:
44:fb:7a:23:04:72:95:bb:a5:f3:be:31:d5:6e:45:fc:57:7a:
2e:b2:ad:19:8a:81:da:cf:a0:c9:ad:7b:3f:6d:5f:3a:d5:31:
59:9e:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:33:01 2025 by rpki-client