Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier: +Tl40+9I7XObkofBsnh+Mf+piGvPUiHnYnhbqF1/CMU=
Subject key identifier: 07:47:27:A1:E4:BE:D4:05:AC:20:BD:61:FB:F4:89:11:37:A7:5A:F2
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial: 0198530EEF7CDC2C04EC8EBCE01C39A2936F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 22:02:24 +0000
Manifest this update: Mon 28 Jul 2025 22:02:24 +0000
Manifest next update: Tue 29 Jul 2025 22:02:24 +0000
Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: 8IiXkIPxSSYJkVhsz3M4Ldi55AsIYM3nIinDPH2wx2A=)
2: 4aMsThSQ8pto7QNh_kFB73sOXo8.roa (hash: HEBFusOcNgQfdZRF0U/he5dAzzkTri4ddTPSMK0+giU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:ef:7c:dc:2c:04:ec:8e:bc:e0:1c:39:a2:93:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Validity
Not Before: Jul 28 22:02:24 2025 GMT
Not After : Jul 29 22:02:24 2025 GMT
Subject: CN=074727a1e4bed405ac20bd61fbf4891137a75af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:fe:63:ba:c0:26:86:66:04:4e:01:bc:1d:
14:5e:a5:69:5f:44:d3:da:55:fc:5e:6c:74:2d:92:
1c:3a:a3:3d:be:83:9f:4d:a8:dc:cc:fd:22:3a:37:
22:fb:3e:7d:1c:e1:c1:45:77:47:4e:04:bd:c0:d5:
5e:df:b9:25:33:cc:a4:6f:61:96:c4:64:fe:3f:cc:
7d:51:7d:fa:75:a6:89:a5:ee:ad:2f:6e:97:b1:7c:
28:d6:98:8d:1d:ee:0d:57:45:8e:e3:5e:2a:cc:b8:
ea:ae:5d:cb:14:65:fe:81:7e:ce:f4:17:c3:30:76:
80:e3:13:89:15:be:c4:58:5c:35:ed:b1:06:cd:71:
75:6f:c1:26:17:f6:0e:00:8b:dd:28:1e:70:38:9a:
40:d6:ad:2b:79:8b:fb:f6:1d:30:29:54:31:76:ff:
35:1d:a0:1e:ac:d0:0a:57:0d:8f:4f:7a:04:19:f6:
d7:b5:d9:f5:49:af:65:04:c2:fa:58:ec:f1:a1:d3:
33:b1:91:bc:87:21:1b:ac:9c:0d:bc:d5:44:16:0a:
20:7d:cf:15:8f:a5:1f:13:e5:17:f1:1f:66:65:ff:
cb:d2:cf:bc:77:93:89:8f:0a:15:ed:b4:5c:76:db:
e7:20:94:de:40:94:b7:82:31:24:c4:e5:3e:27:87:
f1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:47:27:A1:E4:BE:D4:05:AC:20:BD:61:FB:F4:89:11:37:A7:5A:F2
X509v3 Authority Key Identifier:
keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0d:25:68:3f:81:6f:73:e0:5d:d4:f1:dc:a4:77:1c:e8:86:
93:2f:c0:20:89:2d:e2:f2:4a:a6:97:f5:85:db:fe:85:7b:68:
49:ff:ca:85:bb:16:61:14:f3:5b:67:45:f8:2a:e9:5f:f0:9a:
99:6d:4c:af:36:75:ba:e5:16:69:a5:13:94:3e:02:7d:ed:87:
f5:92:72:bd:8f:a8:b3:68:22:e3:37:07:bf:1e:a3:22:e8:a4:
53:5e:10:e3:c4:f2:29:77:6e:3f:51:ee:07:7c:0a:84:46:d2:
7f:e8:75:36:47:af:0d:68:6f:bb:c3:b0:59:e6:91:1c:37:ef:
1e:6a:ba:2a:98:1e:89:2c:e4:ac:7d:de:09:43:77:c1:88:fe:
fd:dd:89:3d:9d:68:73:af:17:7d:63:32:74:57:15:c2:a3:87:
25:1a:6d:66:06:d2:bb:04:66:7c:f9:e9:08:24:e6:40:73:62:
54:af:68:63:24:08:da:d6:d7:ad:42:b5:a1:91:fb:0b:4f:1a:
2d:5a:ef:b6:9a:34:a5:cf:a2:e1:57:ec:94:89:e0:a9:66:76:
ec:f7:1f:fc:51:09:19:04:dd:0f:cd:54:b1:7f:4f:09:6e:b8:
12:3a:04:1b:0d:c5:8f:5d:f1:47:32:ae:39:d7:4a:c5:72:2d:
36:bc:da:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:23:50 2025 by rpki-client