Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: 5KupCo5wV6A7lGaziyy8QZt5Knh5xxP+y+3cm1cQ0Qg=
Subject key identifier: 63:9E:0F:33:52:28:83:0C:10:5A:D8:67:CF:FE:42:B5:B4:50:FF:A8
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 01984A09C3E61A6FF2EC344980FB711860C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 0C8F
Signing time: Sun 27 Jul 2025 04:00:10 +0000
Manifest this update: Sun 27 Jul 2025 04:00:10 +0000
Manifest next update: Mon 28 Jul 2025 04:00:10 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: 7nCMnNOnHVIs4eUwL0QPCDTjaf/W3+ZtnjNFzZ6gzVM=)
2: prKzcOdb2gq7whbRtn2j18st210.roa (hash: TLxvtHMzXY4Lge96VJalh1cOFoXVbLd9V2/rCUHRN3g=)
3: zxXrJCgqT81AO-d4vpKnqCQPEGE.roa (hash: WugT5zcayhMYDSTA/kF2PldTCBDPYZiQht5Wqh3j65Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:c3:e6:1a:6f:f2:ec:34:49:80:fb:71:18:60:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Jul 27 04:00:10 2025 GMT
Not After : Jul 28 04:00:10 2025 GMT
Subject: CN=639e0f335228830c105ad867cffe42b5b450ffa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dc:08:e6:42:ae:12:28:3c:f4:4c:50:fe:6b:
e5:1e:f4:76:d1:39:27:67:93:88:c4:92:b5:eb:80:
4e:64:09:91:28:1d:5e:26:99:9a:c2:4b:f1:05:d7:
fc:68:7c:f2:57:54:5f:22:41:f9:66:82:8c:15:00:
2f:48:44:d1:fd:42:42:37:2c:a7:5f:f0:c0:1b:41:
c6:f3:e7:d3:99:c9:d5:ea:72:3c:19:93:12:b0:8f:
fe:c5:8e:f8:2a:c9:7e:3f:8f:64:15:50:6c:ce:c2:
9a:bb:eb:50:8b:e1:35:59:91:7b:96:30:61:20:2b:
67:97:1a:e9:18:47:1e:32:0b:ae:6d:b5:d4:b6:77:
cd:bc:a1:55:bd:38:ac:55:7c:06:7c:3c:80:74:98:
83:d9:ff:50:a3:87:ab:88:9d:1d:0b:be:47:82:32:
30:f1:92:bf:98:ed:87:d5:f9:84:e2:65:c7:26:de:
d3:83:a7:47:d9:3e:13:ad:12:33:cb:e5:07:4d:86:
43:a5:33:e3:56:a6:0a:01:54:a0:28:c6:37:fb:b4:
39:94:5b:77:29:01:51:e6:7b:41:00:82:de:ce:a5:
29:3c:f1:b6:22:50:dd:46:54:4a:e3:02:d1:0a:0e:
ed:8e:43:db:44:ae:35:e3:28:28:d7:95:f7:ca:e4:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9E:0F:33:52:28:83:0C:10:5A:D8:67:CF:FE:42:B5:B4:50:FF:A8
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0f:96:54:b1:57:13:c4:72:91:18:7c:8a:de:5d:a0:ed:d4:
8a:f1:4b:05:d0:1b:cc:5f:8e:b1:4c:f5:35:e0:0f:2a:b0:b7:
a5:eb:c4:37:3a:06:cf:aa:e9:8d:6b:af:49:22:b0:0f:0f:73:
b9:09:84:65:e2:e3:58:f5:e8:59:e6:49:7f:20:a5:4a:60:a4:
20:53:71:07:70:22:2b:f5:19:29:73:8f:71:ef:e1:65:28:dd:
51:ac:93:ea:09:02:f9:8e:d3:3d:0c:86:2e:93:6b:bb:ae:42:
15:96:05:01:ef:2f:de:5e:90:df:27:c2:5e:94:f3:7e:a4:70:
67:e1:04:ad:17:57:00:65:a7:37:ef:bf:01:c4:94:07:df:58:
14:12:9f:af:77:92:f0:c0:82:02:6e:ad:03:d6:d2:a3:04:74:
26:f6:30:6e:4b:58:30:4d:ec:0b:66:f3:98:d6:fa:69:75:dd:
a3:86:a1:f1:3f:cb:8d:5e:83:6f:e1:2b:71:48:98:79:db:bb:
9f:23:a3:15:aa:31:d4:e8:47:98:99:10:a1:84:cf:8c:e6:a2:
1d:8a:cb:92:f2:6c:a8:ee:27:da:e2:65:02:aa:2e:37:4a:dd:
c5:9f:e7:7d:16:5d:13:5c:41:9a:25:14:0e:26:3e:42:4a:4d:
42:7a:7f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:53 2025 by rpki-client