Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
File: k3hbOp4zxStYueyVo3cj8ACL-UY.mft (raw, json)
Hash identifier: HvpoYEE13okYdDl1xGuraIfjRBhA9qYNyGwky+AF86c=
Subject key identifier: D5:E3:43:8E:95:C0:9B:CE:23:85:0F:4B:AC:3A:80:AC:0B:61:1D:69
Authority key identifier: 93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
Certificate issuer: /CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Certificate serial: 01984AAF23BA9E60131C6C2B18A5EEEAD557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 07:00:48 +0000
Manifest this update: Sun 27 Jul 2025 07:00:48 +0000
Manifest next update: Mon 28 Jul 2025 07:00:48 +0000
Files and hashes: 1: k3hbOp4zxStYueyVo3cj8ACL-UY.crl (hash: wmDmQNCRIIk3EF6ZTgDKvonTe3W17tEVmYpyRgdZmAA=)
2: nuidpU4aDNDfpkpE3RPeG40f1q4.roa (hash: KG4XUtkHgFpia+tczkzg4tQ7m8oF5y68xoUIqm5c/jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:23:ba:9e:60:13:1c:6c:2b:18:a5:ee:ea:d5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Validity
Not Before: Jul 27 07:00:48 2025 GMT
Not After : Jul 28 07:00:48 2025 GMT
Subject: CN=d5e3438e95c09bce23850f4bac3a80ac0b611d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e2:eb:d1:52:1f:57:ef:26:92:12:e9:5f:cc:
c9:6a:3e:a0:0e:f6:3f:e1:d0:5a:27:d3:29:d7:a0:
a9:01:4c:c7:da:c4:b5:44:47:99:4a:e7:57:da:a9:
9c:05:9b:97:11:66:88:c1:01:ea:cd:9d:35:18:1a:
8d:0f:c8:ad:2f:23:93:90:f7:42:d8:ae:1b:4d:40:
aa:6e:ea:16:5c:47:3e:87:0f:ec:94:20:53:99:67:
02:c1:cf:b9:91:24:7b:fc:86:9d:3a:8e:31:63:56:
13:02:5e:fe:74:37:71:7a:33:f0:47:f4:aa:1b:84:
06:7b:66:ff:11:0b:17:44:7e:03:8f:a9:af:e1:0f:
3a:67:b6:0b:b1:64:a1:a5:ff:69:7d:82:e3:ac:e0:
92:c8:90:00:e0:be:e7:63:12:31:3c:06:13:a8:77:
75:55:25:de:c5:bb:0e:69:70:32:b6:93:ad:1c:79:
62:b6:97:98:3d:f8:f1:ee:95:14:1c:eb:6c:3d:c3:
d1:22:3b:3d:d2:b2:5e:16:a4:b4:d2:10:eb:c8:4c:
3f:b7:40:83:15:91:8b:4a:b3:2f:6c:7f:f1:87:5d:
75:1a:f4:f0:3e:b5:b3:d7:84:3e:87:4c:8c:f0:9e:
98:dd:d6:50:12:96:da:c2:5b:a9:29:b5:c4:1e:84:
c4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E3:43:8E:95:C0:9B:CE:23:85:0F:4B:AC:3A:80:AC:0B:61:1D:69
X509v3 Authority Key Identifier:
keyid:93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:33:c9:65:44:5e:a1:7a:9d:95:ab:3d:2f:60:56:63:63:4e:
0d:fb:f7:95:ac:80:5f:41:86:83:7d:fc:76:88:7f:43:11:41:
e1:5e:f6:78:88:eb:fa:43:c7:70:a5:a1:a2:05:37:e1:c6:d0:
9d:a2:62:31:0b:0e:4f:93:83:60:c6:18:e3:08:50:0e:f0:b9:
6b:7d:a3:86:a2:2f:09:d7:e9:cf:e3:72:05:e2:be:9c:64:c8:
0e:a6:0b:38:dc:70:20:e7:23:7f:69:87:a9:ed:77:b3:3b:92:
a7:6a:67:2a:0f:c6:e2:d8:1e:10:41:e7:f4:36:e0:6f:81:9a:
7b:b8:ed:58:05:5f:68:a5:c8:dc:f6:12:23:81:00:d2:7e:a7:
28:66:d8:87:98:96:ba:d6:44:6c:b0:b1:f2:fe:74:d7:d7:3b:
6e:0f:17:fd:99:9a:ec:23:14:a5:4e:92:93:10:22:ff:c5:bb:
fe:4f:8d:18:9f:7b:57:b5:f8:07:bc:3d:fa:2d:77:fd:8b:3f:
c6:45:ad:83:40:e2:2d:3d:1f:46:2e:f2:1e:10:2c:21:92:5b:
b4:1b:f9:20:53:16:e4:4b:35:ae:13:c2:d3:d5:ed:0b:b2:4c:
69:b9:79:90:32:4f:59:bb:a6:7a:e7:11:25:98:53:96:72:4c:
42:a4:93:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:19:57 2025 by rpki-client