
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
File: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json)
Hash identifier: Hu3F54+C4EqyzIE+wmuaVNql6QFbgtWf/Gyoeik9m+o=
Subject key identifier: 67:93:A8:2E:4C:0E:FB:60:40:6D:14:85:82:E7:1D:E6:8D:AE:DF:6F
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Certificate issuer: /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial: 01984776918F84D0D3A56A4D068CEAED4F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
Manifest number: 1555
Signing time: Sat 26 Jul 2025 16:00:09 +0000
Manifest this update: Sat 26 Jul 2025 16:00:09 +0000
Manifest next update: Sun 27 Jul 2025 16:00:09 +0000
Files and hashes: 1: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: M+xLIfdzPxImoDlenDQmfO9a0zbuQ8e4PScTluc6op8=)
2: Ldu0EGXQ1MYyGdeyQmSIejuBpSw.roa (hash: zigF7LOpUtd1pS/tfQIWkRyp68k6cu70RaVSak3Qv0w=)
3: Y2gjl-Swzk92ryq3Z-Z6gp7HzLE.roa (hash: PMTJytzI+iwFKg204deNXF6qN+csOXo8Jl+I9xD+TfM=)
4: agxYPLnYdjCRAQfydoFhcZumCgg.roa (hash: NCy7EyPm/0lV8RywpILyDqtiIlQ48M258Jt/bjYI+0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:91:8f:84:d0:d3:a5:6a:4d:06:8c:ea:ed:4f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Validity
Not Before: Jul 26 16:00:09 2025 GMT
Not After : Jul 27 16:00:09 2025 GMT
Subject: CN=6793a82e4c0efb60406d148582e71de68daedf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:cf:b2:b5:03:f8:c1:c7:e2:12:45:cb:21:
e7:bc:92:b6:81:54:ed:0b:ad:2a:46:85:07:71:4c:
f8:5f:2a:06:59:c3:f5:ff:97:0d:d3:03:a1:20:ca:
b3:14:c1:ea:8d:75:98:b8:d7:ec:dc:a7:20:01:3b:
6e:ef:68:be:12:55:22:f0:2c:76:c6:1c:4e:42:a3:
f9:6a:b1:d1:02:28:f7:a3:bd:f3:91:b2:b5:c6:16:
84:99:92:11:f7:27:4a:80:d6:cb:8f:0e:f4:68:4b:
5a:a6:a4:fa:af:65:06:d8:7f:19:9f:23:0c:6b:fd:
98:aa:06:e8:13:57:57:ec:e9:ce:de:af:a0:55:10:
b4:a1:d9:95:7c:61:86:be:29:5f:cb:12:df:4e:f9:
41:e2:8e:9c:5e:9c:10:a0:89:7b:fa:b2:7a:e6:18:
f4:1c:d1:9d:1f:7e:7f:21:f7:d1:d5:58:62:5c:b0:
e5:47:d4:61:9b:c5:84:16:ca:9e:09:77:4f:83:e3:
ce:7d:2c:7d:ec:9e:c4:b2:45:58:c4:02:ec:47:52:
ab:54:4d:74:35:58:1a:48:a0:f0:69:92:9c:52:7b:
c3:4f:fe:04:53:6f:6c:25:d2:15:e5:b9:c8:bf:8f:
2a:96:60:55:f0:aa:e6:7e:09:9a:ef:e6:a2:cc:e4:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:93:A8:2E:4C:0E:FB:60:40:6D:14:85:82:E7:1D:E6:8D:AE:DF:6F
X509v3 Authority Key Identifier:
keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:81:4b:1c:e2:7a:f8:8a:f7:eb:c9:1a:46:d7:d5:51:9f:02:
5b:e8:3f:88:8c:53:33:e0:49:7f:e6:b0:69:71:99:fb:c4:2c:
d0:17:49:5c:99:a8:e4:08:1b:42:8c:6c:0e:cd:aa:61:03:05:
b4:79:f9:32:d8:32:9d:87:36:b2:ac:7d:41:e3:cd:7e:e8:d1:
03:0c:06:d8:3b:e8:f6:1e:0e:05:80:e3:28:e3:d4:bf:90:7c:
72:a0:f8:78:c9:70:35:da:9f:50:e2:5f:7c:8c:0d:6d:cb:3a:
79:24:26:b3:0c:27:0c:87:66:5b:80:f3:f7:f8:aa:ff:17:09:
ab:6e:ba:ce:34:8a:49:3e:12:5e:c5:5e:de:b3:3c:a5:db:18:
64:f7:6d:54:ab:4f:63:e5:ca:bc:5d:da:f2:df:15:e6:da:74:
6d:ed:79:2a:91:3a:f3:bc:ad:29:4c:df:6a:92:78:7b:1e:29:
21:be:4c:b8:a9:60:9a:22:af:e0:42:0f:70:70:bb:1a:c1:53:
45:a5:3e:e4:94:84:ba:6c:97:1c:32:ab:ad:39:2a:d9:47:fa:
18:f3:e9:1e:44:06:ad:8d:20:af:5d:9c:1a:1e:35:a3:eb:70:
2d:f2:f2:2d:4c:7b:a6:03:e0:96:88:aa:69:9c:84:36:1c:04:
76:6a:d3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:05:04 2025 by rpki-client