Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
File: 3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json)
Hash identifier: 6Jsk6lDRnr2Rd0kywVGG9oRXckUNMjRm7eV9HF6Yx2o=
Subject key identifier: 59:09:63:23:FF:C4:2B:DD:DD:F5:91:5C:01:1C:7F:D5:AC:57:44:76
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 019849D2EBC90EE403109CAF58D2F676B86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
Manifest number: 161D
Signing time: Sun 27 Jul 2025 03:00:16 +0000
Manifest this update: Sun 27 Jul 2025 03:00:16 +0000
Manifest next update: Mon 28 Jul 2025 03:00:16 +0000
Files and hashes: 1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: /3s0e8Juc++1MJGnskpdP1z8+JEFLzi2cYO4iDPQKJE=)
2: 6_bKweqWY78IaehR0T3SZdY9CQM.roa (hash: KTUilrEpIDNHWpqzD3ibc0/4lbQNOJc1mmLoHR7N/88=)
3: B_dytxxDPRteZVWj_5GTAT9t8BE.roa (hash: T860Q+FQFzVWcjsZOe8dk9hmlbNKGPeSX6qfmd4Fuhk=)
4: dbK-R91ZSUb0vmB9yu9XwDJ_RDw.roa (hash: YNxHBvfEGT+DFTrI9P9oVpm7y0mnqXQpEkbudzfn+nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:eb:c9:0e:e4:03:10:9c:af:58:d2:f6:76:b8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Jul 27 03:00:16 2025 GMT
Not After : Jul 28 03:00:16 2025 GMT
Subject: CN=59096323ffc42bddddf5915c011c7fd5ac574476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:bb:0c:03:f3:e3:b3:2f:46:bb:4c:15:1b:
62:e3:99:11:87:c8:5f:6f:8d:b6:2b:b7:f1:cc:df:
44:39:a8:ed:9f:ed:43:49:d8:1b:19:c0:54:31:0e:
61:64:9a:e0:8a:7a:35:5b:36:1b:fa:c4:c3:ff:7a:
0c:2f:9d:be:fb:55:04:eb:4d:0f:87:19:c5:02:be:
a5:bb:e9:ac:dd:66:7b:c9:6b:76:73:7e:55:02:c6:
ac:81:81:6e:4f:e8:e8:74:e7:b9:27:d6:6a:ec:7e:
95:dc:ac:73:98:ac:e4:10:a5:98:24:22:44:15:3f:
29:e2:d5:2b:57:96:d8:37:88:e1:dc:68:be:2a:b9:
e1:d4:b8:dc:c2:52:23:fc:1c:25:15:f8:2b:b0:0c:
29:b4:aa:7c:e1:f7:53:05:c4:a8:aa:26:cf:ca:f3:
5b:d6:07:ef:f6:fd:06:5d:0f:37:24:73:b7:dc:27:
e5:b0:e8:06:8a:16:fa:7c:03:e8:8d:4f:8c:d0:e8:
20:c9:1d:a9:05:c6:24:9e:a1:67:2b:61:95:60:3f:
3b:b1:b4:22:17:aa:39:36:ac:d5:bd:2e:62:f3:47:
fa:ef:e0:80:56:bd:de:b6:41:56:c7:0b:dd:8d:0c:
b1:03:5c:93:48:83:fe:66:5e:44:f1:e0:bd:71:f0:
5e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:09:63:23:FF:C4:2B:DD:DD:F5:91:5C:01:1C:7F:D5:AC:57:44:76
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f6:68:30:e3:60:b4:75:65:5d:3e:83:cf:66:b3:44:b2:62:ec:
93:06:6a:11:14:9a:f8:5b:da:6b:92:42:55:2d:36:35:c1:7a:
9e:c9:0f:cd:37:b6:70:b9:16:cf:4a:86:5d:ea:0c:b8:29:a1:
94:6d:2b:80:6e:69:02:76:34:49:63:97:45:90:61:87:2e:5f:
8d:51:05:71:bf:ee:6a:06:90:ef:be:6c:e8:0d:f4:51:c0:67:
28:6b:d1:a8:e0:6f:f8:90:d6:f3:c0:86:2b:9c:15:8c:f9:cf:
68:43:74:ae:93:13:55:ff:5c:ac:e2:62:8d:96:b2:b2:3c:2c:
ea:5c:1e:83:ac:a0:c4:32:c0:c8:56:ee:a9:11:05:27:0a:ae:
b3:b4:cf:75:81:9c:26:36:ef:d9:af:f0:26:24:24:5f:f5:b3:
25:af:f0:ee:22:a3:23:ff:06:5b:11:94:a7:0a:cd:96:0f:ff:
64:82:bc:68:74:b2:06:45:8a:df:ef:d7:06:cd:e9:45:f5:06:
7d:21:0c:11:e5:b6:06:db:ce:84:ca:21:4d:7c:53:a2:b0:8f:
87:e2:35:80:35:e5:55:16:8e:95:ca:86:ee:6e:0f:5e:f7:d3:
ea:e8:76:be:da:9b:1e:23:d3:58:38:5a:57:46:31:f8:0b:45:
a1:b2:74:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:36:16 2025 by rpki-client