Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
File: 3EFBHpPiXV7GUJlWmxtcX63Brj0.mft (raw, json)
Hash identifier: SpxGlY81qxIzkC6pNSeVSeH075qTvCSwjh7SlJPS9dA=
Subject key identifier: 08:C1:B7:96:F4:BF:53:84:70:7C:5E:87:52:A3:50:51:05:16:C8:DF
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 0198481BB58FFAF4BA084423AB3302F3D5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
Manifest number: 11CA
Signing time: Sat 26 Jul 2025 19:00:32 +0000
Manifest this update: Sat 26 Jul 2025 19:00:32 +0000
Manifest next update: Sun 27 Jul 2025 19:00:32 +0000
Files and hashes: 1: 3EFBHpPiXV7GUJlWmxtcX63Brj0.crl (hash: gqQSimEbueeZlEfGL0yc6uqansMomRhgNNCqMO+5mgI=)
2: I5wQnrgvMCaYn9C8yDvoLQWI0Fs.roa (hash: LLp7jSaPRxKkmfQPCgmC3oWPlWcodXukIf+OL2Y6Xy4=)
3: h62oWk5e6sS8zDCwC47t23u4hGk.roa (hash: KIOG5EX7T8Dsm3c4MU4hyZU5pek+PylPfC7rdsiyJoY=)
4: jGoTTL_48yWV-ohs_hgmOjEwT4E.roa (hash: Q0KSsruo9YLV5d/ARziN3CSGqP5OR6gQhOox+XP9FnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:b5:8f:fa:f4:ba:08:44:23:ab:33:02:f3:d5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Jul 26 19:00:32 2025 GMT
Not After : Jul 27 19:00:32 2025 GMT
Subject: CN=08c1b796f4bf5384707c5e8752a350510516c8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:87:67:f9:15:84:20:80:64:ee:f9:2d:b8:2d:
de:fa:d9:97:3b:a6:cd:79:9d:b6:6f:70:a9:e8:f1:
8b:26:d1:5d:17:a2:18:04:dc:98:78:26:6a:3e:c4:
f7:b5:74:4f:bf:32:6b:5c:b8:5e:ec:99:32:d6:25:
bf:2d:52:87:e6:9c:8a:f3:af:d7:9d:38:de:6a:0b:
44:95:43:a0:8d:2a:1e:03:ca:26:7b:4d:c5:db:59:
05:56:85:98:cf:ce:ac:f3:e1:0f:82:c8:08:5f:d4:
96:e1:3f:1a:40:f3:47:8a:a6:3d:c4:5f:2a:39:84:
4d:44:f4:23:65:74:2f:4a:d8:0a:92:b2:04:b8:56:
d2:bc:ff:d0:da:72:10:6d:90:4d:32:3e:16:17:82:
04:e4:15:72:48:f3:70:5a:6b:5b:86:df:55:a4:00:
47:ee:a3:9e:24:10:a5:e0:7a:3b:54:6f:0d:33:88:
52:57:95:61:16:fe:5f:3c:ff:64:66:24:20:a2:6d:
72:33:b0:51:05:c6:ec:7f:29:fe:66:98:3f:c8:50:
d5:ba:fb:17:9d:b4:3f:8d:fc:4f:5a:cf:68:15:1c:
ce:e5:1b:35:d2:0f:ca:5d:a1:fd:ad:21:dc:35:50:
cc:c3:bd:b8:65:c9:19:8c:7b:73:ff:bf:f0:d2:70:
4d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C1:B7:96:F4:BF:53:84:70:7C:5E:87:52:A3:50:51:05:16:C8:DF
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:99:14:bb:16:bc:fd:26:5a:f0:ad:0b:7b:b6:ac:8c:47:7b:
e6:a8:4d:c2:c8:5a:90:3b:ea:92:92:3e:3b:45:4e:6f:c1:d4:
17:94:ce:df:49:48:c1:bb:4e:43:d4:df:92:c1:54:1f:82:92:
74:0b:f4:7e:12:a9:75:8b:0f:6e:f9:7d:57:f5:d1:6b:7b:b1:
31:9a:ef:a1:fd:58:a2:c5:e5:05:f1:4b:bf:ab:ec:be:26:fe:
56:f7:07:27:ac:66:b4:1f:0a:b2:b9:c8:94:00:2b:70:f4:c3:
df:e4:28:4f:24:9d:4a:0f:0f:e4:f7:2a:08:63:da:c5:59:35:
65:e5:84:fd:1b:b8:da:dc:54:b5:66:f2:50:9b:82:af:17:7b:
c8:13:5d:7f:74:7b:df:d4:0d:3a:aa:ff:52:52:9b:14:a7:04:
7d:95:98:a8:99:66:1e:42:d8:11:63:41:03:28:0d:e9:0a:4f:
93:f0:12:dd:8b:5e:67:35:df:69:05:16:06:ec:60:95:2f:f2:
b1:74:9e:04:b6:ff:8b:f9:04:45:79:0a:b9:81:81:12:38:b9:
ec:f9:4c:02:0e:1a:96:76:77:8f:af:68:92:f8:2e:55:2d:e2:
32:37:2c:7a:7f:b3:52:6e:cd:dc:0e:5d:0a:90:88:bb:53:32:
df:ed:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:34:57 2025 by rpki-client