Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: nAWY8CwdSbBnlFAO1FfNY5hChgu5XwOH+K6Q8cvhB94=
Subject key identifier: 39:2A:3F:ED:8D:14:C2:1F:41:79:FE:C2:07:02:00:3F:F2:69:85:4B
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 019848F79E9CD52D454140920FB5E91AA2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 23:00:44 +0000
Manifest this update: Sat 26 Jul 2025 23:00:44 +0000
Manifest next update: Sun 27 Jul 2025 23:00:44 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: RPpoZrsmHCVMbYJoLc8snsQPL0b0QoiBWgPhcw1tiI8=)
2: L9b4ducPYyR6qc5uaeOni9YJQHA.roa (hash: vaOymUj3eUPmbh7xiKllx8KgzftTh5qvMK+aeen3RXg=)
3: kpbrBAbvkEz7iwjj9qvNJnx2KAI.roa (hash: EaUeR1cKI29E16jF0XdNnwUwftG+vurlmN50dR3srjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:9e:9c:d5:2d:45:41:40:92:0f:b5:e9:1a:a2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Jul 26 23:00:44 2025 GMT
Not After : Jul 27 23:00:44 2025 GMT
Subject: CN=392a3fed8d14c21f4179fec20702003ff269854b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:8c:14:fb:96:fd:6d:d0:b3:10:93:6d:a9:
21:98:fe:7f:0f:bc:21:73:cf:cb:70:87:47:9b:f2:
b7:3a:db:54:2c:a2:c7:99:81:21:fe:b3:0b:e2:61:
66:ae:cd:1c:94:40:f7:18:c0:72:d5:a6:ae:11:1b:
b7:ac:5f:42:41:4a:75:6e:e3:91:2e:48:22:8f:00:
ed:70:b9:ac:91:e9:2f:11:55:4a:45:68:8e:de:c4:
08:a3:e5:3c:09:67:de:90:08:84:65:2b:4b:bf:21:
43:63:4d:3e:e4:b8:18:28:d4:b5:70:7a:a2:c9:37:
69:af:2b:e2:75:81:46:c8:e9:bf:bc:dc:58:5f:5f:
4e:ae:8e:71:8c:c3:64:9f:87:2d:01:ec:ce:81:78:
0d:94:77:5d:c5:8c:7e:3f:d1:af:58:aa:84:42:3c:
56:ac:ed:be:49:94:3a:31:08:e3:a5:ff:9f:53:a7:
f0:52:41:79:cf:e8:c2:58:ff:34:49:28:8c:13:7b:
ed:6e:97:68:4c:11:86:85:ba:c7:7b:3f:1a:fa:69:
4b:13:cb:da:5d:de:36:10:80:c5:b3:48:6a:25:3d:
bb:89:35:3b:ef:42:86:28:58:9e:b2:44:bf:42:74:
2c:96:22:85:de:60:6e:65:07:cd:89:01:43:fe:97:
9f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2A:3F:ED:8D:14:C2:1F:41:79:FE:C2:07:02:00:3F:F2:69:85:4B
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:57:a6:49:6e:4a:e8:01:ab:bd:06:fc:4a:0d:3f:9a:49:d4:
23:08:4d:33:34:f4:cd:00:5d:dc:c7:fc:73:6d:31:5d:fe:6c:
ee:4e:c6:ba:c9:35:10:91:c5:47:f0:57:62:c8:8a:d8:33:e7:
a8:45:71:9a:02:22:d9:c4:46:e9:88:26:88:83:2e:22:4c:ff:
aa:8a:67:82:a7:df:1c:3f:16:5b:c7:49:d6:8f:24:6e:ab:45:
74:db:17:fe:8a:3d:99:30:28:ed:89:67:4b:35:f6:33:7f:e9:
30:bc:96:b7:03:c6:38:ab:02:ef:d9:4f:37:50:16:0c:81:69:
58:44:ed:e2:92:3c:54:9c:b4:9b:6f:da:4a:36:27:75:d5:09:
a9:97:bf:d7:b5:26:49:2c:5c:fb:12:5d:c5:39:30:a4:30:30:
3d:32:4e:c9:12:d7:ed:03:11:93:25:55:ad:20:67:a8:de:0f:
90:33:0c:a6:54:a1:07:0b:f4:a3:61:36:d5:07:cb:d3:7f:9d:
fb:ac:9b:62:98:b9:f2:60:a9:ec:3a:5d:9a:e8:c2:e4:a1:62:
9e:3b:e6:06:7b:61:28:3f:2b:73:4b:6a:75:b2:9b:2c:fc:0b:
ea:94:f0:f5:24:e7:fc:ae:64:bf:21:6a:0d:1e:a9:e5:bc:6c:
9a:53:54:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:41:30 2025 by rpki-client