Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
File: 3A4l4XpRaWkjpcApZnh0CarJqjY.mft (raw, json)
Hash identifier: SIQ2x1sX9ltdC14AajLnUIAm+jh9o08MzLiH6+KjahQ=
Subject key identifier: 94:6B:E5:CA:9C:FC:A9:96:57:93:B9:4C:45:5A:53:0B:FD:7C:32:D4
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 019854FC7831A19F26C921454EFF9DEDF140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
Manifest number: 098B
Signing time: Tue 29 Jul 2025 07:01:28 +0000
Manifest this update: Tue 29 Jul 2025 07:01:28 +0000
Manifest next update: Wed 30 Jul 2025 07:01:28 +0000
Files and hashes: 1: 3A4l4XpRaWkjpcApZnh0CarJqjY.crl (hash: bPfFkLdA2QUD+YKhh0unJHkngtMWPBoMMSRQi/Prfi4=)
2: WGy1cA3da99W4WDLy3MY4ZyczoU.roa (hash: SJ9b+hH7b3cVwCr6CT26WQO6ifaQhtn6CrsiD/nybF0=)
3: jkdGIndQz1w9lSn5gC2Ktns7PmQ.roa (hash: VwGNfeMCv18NN23Twwp0pPWxKthypMsuMJxPjN6yLC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:78:31:a1:9f:26:c9:21:45:4e:ff:9d:ed:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: Jul 29 07:01:28 2025 GMT
Not After : Jul 30 07:01:28 2025 GMT
Subject: CN=946be5ca9cfca9965793b94c455a530bfd7c32d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:95:7d:5c:71:f7:0a:3f:66:67:b2:49:ec:c1:
9f:26:66:3b:05:97:d6:00:c0:17:a5:47:b0:0b:d6:
02:87:4c:4f:3f:01:14:f7:73:c9:ea:f8:40:f3:d6:
31:c5:09:80:dd:10:00:41:ed:48:71:cc:af:b5:b3:
10:ce:d6:59:6e:5b:19:62:b1:a1:d1:ca:dd:ab:f1:
52:3d:6e:31:bf:ef:3d:27:93:24:43:d5:04:71:d5:
86:1e:fe:99:c0:55:3a:44:9a:1c:ac:df:3d:a3:33:
40:52:9a:f6:a5:1a:8c:7d:a1:41:8f:d0:ad:49:78:
6b:39:89:6e:46:f4:ca:43:53:43:7d:11:44:4f:79:
70:ca:b7:f6:9f:b8:2c:08:87:c9:81:b9:ca:36:dc:
e6:50:ba:5b:69:ad:81:e3:35:13:85:77:3f:bb:c9:
f7:0e:b9:d3:f2:c1:1e:89:97:f9:79:4f:49:62:65:
d3:15:92:3c:45:80:bf:69:8f:f4:2e:63:43:4d:39:
74:47:48:eb:c1:7d:df:c3:94:16:86:3d:9a:fe:85:
ed:3e:55:6e:14:f4:26:96:41:28:e3:cd:71:73:7e:
fb:c2:65:6c:42:d8:1f:90:ac:b1:9f:fa:03:b9:35:
bb:f9:72:58:5d:85:6d:7e:c4:85:b8:92:6d:9e:23:
63:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6B:E5:CA:9C:FC:A9:96:57:93:B9:4C:45:5A:53:0B:FD:7C:32:D4
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:79:09:65:f0:f1:64:92:35:b9:26:3e:eb:f5:a3:a3:4c:6e:
50:f3:38:59:d9:a0:49:7e:c6:aa:39:38:57:60:1d:09:6f:4e:
06:27:60:32:c5:49:af:14:12:c6:e4:a4:eb:1f:2c:67:1a:a5:
cc:68:c5:2e:aa:d1:38:eb:ff:f7:b9:54:d6:6b:2f:6e:8d:f9:
df:c5:1a:55:e5:0e:23:24:b2:cd:da:25:e7:46:90:3c:71:b6:
d5:55:27:b1:7d:1e:6c:c5:88:79:a9:c4:d1:7c:31:a0:4c:3f:
3b:5d:9a:17:0c:1d:f4:e8:da:b6:18:a3:71:ff:95:35:fe:ce:
fb:c9:a5:10:f8:43:55:ba:72:59:f4:9f:38:db:13:ee:21:52:
a0:0e:8f:9f:2b:b1:19:2d:49:fb:86:c2:c9:dd:7d:cf:34:15:
23:64:87:7c:db:95:b9:dc:5d:35:ec:20:75:1f:d4:c7:7e:09:
64:dd:bc:3e:56:2a:ce:12:b6:5c:8e:10:60:31:e7:0c:d9:0b:
28:23:c1:30:1f:11:65:25:8f:75:c9:d9:81:32:12:70:97:42:
2f:cd:8d:ed:6c:1d:a0:fc:da:23:81:2c:9d:5d:7d:72:fd:90:
7c:e5:3a:d3:c5:0d:36:7c:2d:60:16:b1:5a:fa:e6:b5:e6:b5:
7b:cd:59:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:39:01 2025 by rpki-client