Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
File: 3kVs200UA0XD3K6_x2NNTnzcuRM.mft (raw, json)
Hash identifier: yRxZ8wcu1LyXTo3JvNArjjB/q3LHioySDnSlSoN7L/8=
Subject key identifier: D0:DC:38:22:82:51:3B:91:BF:76:F9:92:8A:B6:0A:CD:15:48:B8:95
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial: 01985CB6EED60AC1714E9F1B0D94572ADEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
Manifest number: 1614
Signing time: Wed 30 Jul 2025 19:02:29 +0000
Manifest this update: Wed 30 Jul 2025 19:02:29 +0000
Manifest next update: Thu 31 Jul 2025 19:02:29 +0000
Files and hashes: 1: 0wxplS04ynQiI1r3ArdsiKBCEOI.roa (hash: WDNF73KtUANe5OGg5Z8hCbK6QAlz8jWNq6iQlKA1l4A=)
2: 3kVs200UA0XD3K6_x2NNTnzcuRM.crl (hash: WwP1HZ6mqBUHDzaDoFCLwSMj264CeLXbhJVJcUni4KE=)
3: JIEsiChTD9veiUWmlJ3B4QQpFuc.roa (hash: G8sz8HlJFis3zSSNKaXy4CKewTagYcW3tdUbj5SB5rw=)
4: erY5eOsE13MYDYGdz-7KiRAOTog.roa (hash: NmXI2cVM6emkr8oTXJbXMbKgJl7gRO9hnwaW3QZ2P/k=)
5: g4ZCPviGonmRGPJlO9nSng_S-lo.roa (hash: NBfLnaWFnRjJb4HXfFDgN4fD3VeUZZnkBAnPok8zBDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:b6:ee:d6:0a:c1:71:4e:9f:1b:0d:94:57:2a:de:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Validity
Not Before: Jul 30 19:02:29 2025 GMT
Not After : Jul 31 19:02:29 2025 GMT
Subject: CN=d0dc382282513b91bf76f9928ab60acd1548b895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:b7:01:ed:61:55:f3:b5:3e:8d:dd:9e:0c:
90:75:33:99:44:0e:20:ba:c3:92:73:55:49:85:72:
ba:e1:ce:41:cf:61:27:15:a7:20:24:ce:54:4b:ec:
af:3c:70:bf:e7:61:f7:88:57:0a:65:d5:50:12:eb:
6d:b5:12:26:a2:dd:9e:fa:6f:30:31:5b:41:36:0f:
98:47:6b:6f:c9:04:1e:4f:9a:cb:82:f8:c8:56:38:
69:e4:71:ab:25:a8:ae:1f:33:1b:69:fb:1b:3f:04:
64:4b:47:9c:4c:94:52:6b:e7:c6:b5:f7:a3:32:9b:
ab:4c:0e:d7:26:87:83:2f:65:cc:f6:f0:c9:01:28:
ec:f6:b9:b3:5e:5f:6a:1f:d5:27:6a:4c:05:29:f7:
a7:02:68:f6:46:e8:0b:4a:67:cb:65:25:cc:4c:95:
a2:61:ba:7d:27:d8:aa:af:60:82:7a:e6:93:a5:fd:
5b:65:42:2e:64:9a:71:b0:f8:de:95:dc:5a:e3:5c:
e9:2e:38:6f:c4:cd:81:8b:c4:ce:a7:fc:bd:18:a5:
e2:2a:94:65:de:11:b5:64:f3:fe:0f:26:cb:60:3b:
7a:fe:14:22:c5:be:58:0a:20:28:a8:ee:c7:05:00:
9a:93:02:7e:93:d6:28:59:99:d4:d1:1c:55:a7:85:
ae:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DC:38:22:82:51:3B:91:BF:76:F9:92:8A:B6:0A:CD:15:48:B8:95
X509v3 Authority Key Identifier:
keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a9:f1:36:e6:90:42:5c:af:a1:a5:a2:20:bd:3c:62:02:f9:
7f:90:cf:fc:d0:56:04:72:54:7d:e3:60:58:eb:c0:29:67:dc:
0b:5b:e2:51:33:b5:74:1d:20:c5:f5:05:8c:23:39:c5:f7:ed:
dc:45:70:6c:df:5f:54:48:a1:1e:94:e6:52:52:80:c4:87:5c:
0f:c1:8d:04:57:d5:57:68:60:21:36:6c:3e:79:a8:3f:40:6e:
d6:5d:8a:ea:0d:6f:f9:52:0a:af:53:f9:4d:36:17:95:1c:53:
d2:3d:bc:6e:5f:b0:42:2f:b0:85:1f:88:a9:d1:21:f9:30:d1:
fa:33:4b:d7:46:05:35:80:71:6e:95:1f:7e:d5:64:60:97:7b:
34:cb:e2:26:5a:01:a5:38:81:42:44:18:e1:96:67:0e:3b:2a:
8f:8d:40:9c:da:4a:41:62:76:ae:4f:7c:28:b9:fe:6a:8e:11:
f8:af:8d:27:8a:08:ed:8e:76:b2:b7:b8:86:84:c3:bb:4c:65:
51:48:83:81:e7:7b:08:1d:c0:b6:58:97:3c:66:3f:24:ba:45:
7b:fa:8d:90:f9:6f:1e:96:e6:a8:c2:53:b3:d2:02:04:ba:0d:
84:d1:50:fe:9e:20:90:c2:8d:cc:1a:b2:a4:8d:59:6f:e2:52:
cb:eb:8c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 00:01:34 2025 by rpki-client