Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: bznqaQNpzBeMe/huHc43Om0IacwQTEpKDadhkCMQhvE=
Subject key identifier: 48:BB:BE:BD:78:D1:2F:98:B8:50:F5:98:FB:DC:C5:C8:38:57:69:F5
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 0198541F809D447CB2B8ABB1D6D7665A1F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 0F47
Signing time: Tue 29 Jul 2025 03:00:07 +0000
Manifest this update: Tue 29 Jul 2025 03:00:07 +0000
Manifest next update: Wed 30 Jul 2025 03:00:07 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: wFiPsrZNFyVT3XcfH56L95YX5sTFIwbKKEsiLmCSTMg=)
2: M0CEGpqdnFyhH05u6ywrw5xpjxw.roa (hash: Da8bL20Ezk/7GnIViJo/xS7eFj2lqLDIbA2oioZuSt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:80:9d:44:7c:b2:b8:ab:b1:d6:d7:66:5a:1f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Jul 29 03:00:07 2025 GMT
Not After : Jul 30 03:00:07 2025 GMT
Subject: CN=48bbbebd78d12f98b850f598fbdcc5c8385769f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a3:2c:7c:6d:a3:0f:82:ab:19:b1:3a:6f:11:
8f:75:4e:82:1d:3d:ff:26:dd:92:af:10:14:21:6f:
06:f5:33:fc:35:b3:c2:77:aa:23:1a:68:df:f9:40:
40:ab:28:a0:ba:00:0f:99:21:0b:4e:81:a6:5f:99:
f1:a3:09:4a:a6:42:aa:d4:3e:db:4b:60:e5:6d:67:
36:da:ce:6d:da:48:ee:13:be:e9:ea:27:28:e0:08:
24:ca:d9:65:00:86:98:8d:ce:8f:c1:79:03:ec:90:
c5:1a:f3:8e:18:83:b9:67:51:60:3d:c0:23:3a:f0:
e7:88:8a:be:bb:8a:3f:80:0e:2b:5a:05:98:99:5a:
b6:a8:2f:74:73:61:e8:4a:5c:77:c7:9c:d1:3d:65:
56:e2:58:a6:aa:a7:18:96:92:8b:97:9d:b7:c4:e6:
66:5b:20:e2:c8:1a:f7:4e:ac:16:2f:ea:0f:07:e6:
4d:48:2f:10:d1:1f:06:6e:70:0a:f5:b7:e6:b3:f3:
0c:13:cd:f7:40:d5:a6:a0:16:61:19:e0:11:55:8a:
24:2d:f2:52:46:35:e1:b1:ad:32:94:d6:46:8b:e2:
98:d1:04:ef:c8:21:e1:b5:ae:8c:d3:4a:3c:0d:6d:
ca:28:a1:c3:94:34:c9:70:5b:8e:0c:f3:13:84:f4:
b5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BB:BE:BD:78:D1:2F:98:B8:50:F5:98:FB:DC:C5:C8:38:57:69:F5
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:00:8b:d8:af:2b:b0:69:89:f1:6d:62:93:65:4a:0d:34:b5:
87:70:33:9f:f5:b4:e0:f2:ca:31:4b:44:d2:d8:94:18:67:bb:
dd:c4:d0:be:87:fd:62:ee:7e:63:e0:09:cf:b4:8a:cd:28:59:
7a:c0:f9:3b:27:4c:0e:54:31:4c:e7:3a:d3:d9:5d:0d:62:fa:
9a:2a:21:8a:d6:cc:93:d2:27:59:25:23:b9:bd:1c:f8:e2:47:
16:b3:07:a4:eb:5b:a2:91:df:2e:5c:8a:ba:17:cf:6b:1f:68:
e8:79:c7:bb:8e:8c:67:59:69:b3:42:cc:04:c0:5c:71:c3:dd:
6e:e9:ba:32:9c:b0:47:fd:12:7c:4a:17:96:5f:ae:80:e6:bb:
48:f9:2e:12:83:43:ba:6c:12:76:5b:22:15:83:b0:55:a1:5d:
99:80:7e:2e:36:b3:0c:91:f3:27:c7:8e:ac:ca:f5:a6:42:3f:
1f:58:10:28:14:bd:78:ea:50:f4:98:a9:80:30:1a:cc:ce:0c:
15:22:91:c9:8d:18:d2:1f:ae:b7:cf:c7:75:db:31:34:4f:ba:
e9:62:f5:46:c1:f6:14:9f:1d:76:55:5e:1a:f1:22:75:a5:fd:
ee:9d:f8:b4:19:06:de:fe:0e:67:bd:e0:2e:bc:bb:8a:18:41:
90:3f:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:40:17 2025 by rpki-client