Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: XFawz4W9f+xuBdBaVwSQhN+bpRBwp5a9KgBUfvsc6Yk=
Subject key identifier: 8E:62:F0:22:1D:45:47:EB:EA:99:14:F3:04:51:66:BF:8C:90:5F:CF
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 01984965AC06A2243D14A45FF6F15B2FC965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 0BFD
Signing time: Sun 27 Jul 2025 01:00:56 +0000
Manifest this update: Sun 27 Jul 2025 01:00:56 +0000
Manifest next update: Mon 28 Jul 2025 01:00:56 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: /LbJkqs2YhpPjFQ0PTpGGyhP+I7dT4Tt9UnUMxKW81A=)
2: XaWBl1pdgCEAOtWYlDnABozWGpY.roa (hash: NkTYxkGxoFs3l9oUz9ZXBu6um1xVsgaeI44+mBnF24s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:ac:06:a2:24:3d:14:a4:5f:f6:f1:5b:2f:c9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Jul 27 01:00:56 2025 GMT
Not After : Jul 28 01:00:56 2025 GMT
Subject: CN=8e62f0221d4547ebea9914f3045166bf8c905fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:64:98:c8:6b:d5:12:b3:dc:f0:de:61:d4:
4c:77:41:27:dd:df:61:a8:f8:fc:4d:9f:f5:6f:85:
67:17:cf:93:cc:3b:9a:f4:87:81:90:7e:d8:12:73:
22:ab:82:73:42:99:5a:e6:5c:37:69:09:a7:76:c9:
01:6e:24:24:53:33:62:02:9f:28:d9:30:2d:41:ef:
1e:b4:69:dc:c8:12:d8:80:52:aa:1c:8a:52:65:04:
73:97:8d:31:c4:78:11:d7:e4:b6:34:51:71:76:4a:
4d:f2:25:63:c6:ca:e0:b2:e4:9b:90:7f:1c:b1:49:
c1:99:62:5f:06:27:42:fb:f3:5a:ac:81:a9:0d:d8:
a1:79:ef:3e:86:52:de:62:2e:f3:2a:b3:40:80:bd:
93:c5:d4:f5:3f:28:bd:8d:19:0d:39:0c:4a:32:73:
c3:d3:84:58:a8:f7:dd:71:ea:1f:66:05:80:0c:8c:
3b:f7:2f:2b:3c:23:32:d2:4a:f4:6d:75:98:d1:69:
3c:d2:b6:63:b8:f0:94:d7:c0:ce:cb:46:05:aa:f6:
bf:b6:1d:f4:69:7c:ce:10:d8:c2:68:b6:0c:5f:61:
41:b9:65:59:50:bd:cb:ff:92:31:6d:af:bb:63:5a:
d5:ff:4a:8b:68:e8:2b:bb:64:09:98:ba:71:d6:79:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:62:F0:22:1D:45:47:EB:EA:99:14:F3:04:51:66:BF:8C:90:5F:CF
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:99:aa:ef:be:28:ad:d8:e9:44:c0:66:d1:48:0b:e3:e9:9a:
5d:e8:1e:d0:81:65:e6:46:6e:ef:78:24:26:8f:d4:96:19:7c:
ee:35:e3:2c:db:22:df:17:08:7d:7b:67:94:fe:4a:40:2a:f8:
d2:30:21:1a:12:60:ab:dd:b0:95:be:2f:58:7c:3a:b0:58:1a:
af:cd:d8:e3:85:bc:2b:4c:95:74:1e:e8:42:33:8a:57:0a:f2:
8c:58:45:d1:33:be:af:0c:c0:8b:6f:47:b4:91:33:39:de:91:
a7:1a:04:3a:38:fb:94:7c:f0:f8:cb:a0:89:40:fd:ed:8d:e6:
4f:91:ac:4c:38:1a:7c:ac:47:16:72:fe:ca:da:bb:bd:a5:0d:
bd:00:af:6f:a8:14:36:97:ff:04:aa:3c:83:85:4a:7a:15:cf:
5e:89:a2:c7:56:e1:e5:5d:18:c4:ec:e4:c1:e3:51:68:11:ef:
8f:1d:06:48:c8:09:b4:3a:08:0f:98:db:49:6d:1f:fa:f4:37:
95:94:5f:e3:b0:a4:d5:db:a5:2a:a1:6a:64:bb:43:c9:db:aa:
3c:dc:f2:9b:89:bf:69:75:86:8c:93:3a:72:21:48:63:f5:84:
8e:fe:d7:c9:0b:15:c6:04:dc:c3:42:bc:93:1a:17:9e:0b:c3:
ac:bc:64:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:40 2025 by rpki-client