Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: IzdFJh86iPieuYgZ0+BtVNfuZwG+3YsPfbm2YPGvAWo=
Subject key identifier: 66:E8:15:BC:D4:88:A4:86:E0:41:C1:D8:46:31:DF:5C:F2:BC:D6:B5
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 019853B1CE4516DF9D42333D64651DB97A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 1598
Signing time: Tue 29 Jul 2025 01:00:18 +0000
Manifest this update: Tue 29 Jul 2025 01:00:18 +0000
Manifest next update: Wed 30 Jul 2025 01:00:18 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: O8W+NXAiDUFX2nLkOLixTASbcqMQpQk4c1P/JHINBGc=)
2: QYQzorGK1cakLmK4R7aZ_z5BtRk.roa (hash: K/JfnEYnWlRvZUne2cydti381OQHnxSabuUVM9ge064=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:ce:45:16:df:9d:42:33:3d:64:65:1d:b9:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Jul 29 01:00:18 2025 GMT
Not After : Jul 30 01:00:18 2025 GMT
Subject: CN=66e815bcd488a486e041c1d84631df5cf2bcd6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:f3:79:5f:ce:28:79:3e:b4:67:0d:69:0b:
d9:3a:15:3c:35:f5:91:50:7f:38:f4:3f:8a:66:48:
99:b9:2e:c1:48:6a:6e:34:fc:60:54:7a:80:1a:69:
1d:4d:28:e2:1a:20:e2:7a:44:64:b3:3d:e8:1e:e4:
54:fc:6f:70:62:b3:28:0c:55:4e:fc:96:57:c3:ca:
ee:ce:7d:b9:ce:6a:24:ea:72:d8:10:55:d9:84:7f:
35:18:18:d3:e1:b5:e0:70:52:da:e5:0c:ad:d7:36:
82:63:fb:21:af:fa:fe:a3:c2:57:cf:d7:5e:f4:18:
c3:43:49:76:9d:e8:4c:b1:16:5c:8a:98:98:f2:08:
b6:a4:a6:72:0a:1b:17:c0:91:49:07:f1:f6:c6:17:
4f:70:65:82:86:04:fd:0b:4a:d3:67:2f:ff:15:5e:
72:90:b3:96:4d:c6:10:15:6c:fb:c6:7f:45:56:e4:
99:5c:fb:a2:bd:ec:0a:11:53:c0:ab:d5:f8:6b:9a:
c7:0e:56:ed:6b:f2:1b:4d:60:28:7b:b5:ad:5f:24:
44:35:0b:59:ba:09:64:c3:a9:05:fe:c6:72:5d:8d:
09:a8:f7:fc:59:4d:a1:91:c7:f6:14:79:02:12:18:
20:f2:f6:6c:a6:62:21:40:56:2c:c6:74:dc:33:c3:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E8:15:BC:D4:88:A4:86:E0:41:C1:D8:46:31:DF:5C:F2:BC:D6:B5
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:68:ee:3c:36:08:e0:3b:ab:4f:2f:da:f9:80:0f:d1:d9:1c:
de:6f:c3:37:9f:84:2f:86:7f:56:71:80:cb:bb:7e:d7:44:73:
f9:03:1e:11:c0:9e:06:ff:a4:e8:86:05:4f:98:b1:04:67:15:
99:58:ea:e1:28:2f:e3:7f:7e:bc:c1:fe:49:f3:c9:1e:0a:65:
25:ac:95:d5:be:ff:a5:1f:c2:98:7a:49:be:ca:75:81:a6:82:
fb:7f:67:4a:32:31:3c:8c:96:a6:ed:3c:db:a7:17:3f:97:8d:
7b:49:bf:90:44:d9:d5:8f:40:3f:34:a7:58:a2:02:a4:0e:b8:
63:06:a7:e1:86:56:12:fd:dc:fa:48:7d:68:72:e1:1f:13:32:
c4:a5:4c:87:8f:24:07:36:9f:f3:6f:1b:de:30:ba:44:ae:c1:
55:cd:2f:be:4f:29:ef:96:98:a1:3e:70:8f:96:9e:0f:b7:b0:
32:20:b9:e8:a6:ab:e4:85:6b:6f:fb:60:1f:9c:d6:18:fe:63:
c1:68:54:7a:b2:e8:e7:70:3f:5e:ea:8e:44:56:0e:89:e3:39:
2a:9f:b3:42:c9:bf:2d:e8:2c:0f:ef:e8:22:1d:00:87:05:a1:
c0:66:1c:f0:de:73:3c:8f:62:79:8d:00:f5:4f:26:d2:b2:a1:
06:04:c0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 02:50:40 2025 by rpki-client