Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
File: 3BsrDhzng-t6Ljk__dEoxqnAIjk.mft (raw, json)
Hash identifier: 4F3pPSzNcByuK+pD4EktU10/0ASxaWDX53f7P2LBe6Q=
Subject key identifier: AC:25:DB:AE:DE:C6:87:71:1D:81:D2:33:0C:89:2E:1C:9B:B6:AC:03
Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Certificate serial: 01984E54F406E7D2D2F542B7D0FBB5C1ED93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
Manifest number: 035C
Signing time: Mon 28 Jul 2025 00:00:47 +0000
Manifest this update: Mon 28 Jul 2025 00:00:47 +0000
Manifest next update: Tue 29 Jul 2025 00:00:47 +0000
Files and hashes: 1: 3BsrDhzng-t6Ljk__dEoxqnAIjk.crl (hash: i63NidgEQUZ/7A+IMbe4IaQXDlBm3kNiQxRTwORDA+g=)
2: b4tFKCMFhyngaw1LlIGrAjikYiE.roa (hash: zlYQxGhdtm2zm501rwjVL8YUyfYWJBRUvSyMolHaDtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:54:f4:06:e7:d2:d2:f5:42:b7:d0:fb:b5:c1:ed:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Validity
Not Before: Jul 28 00:00:47 2025 GMT
Not After : Jul 29 00:00:47 2025 GMT
Subject: CN=ac25dbaedec687711d81d2330c892e1c9bb6ac03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:11:20:bf:90:e4:0e:24:6a:d9:77:ba:b9:
28:63:a0:bd:b6:c8:1d:5c:81:d3:41:5a:aa:2c:f3:
ef:be:45:ba:f6:d3:42:5a:a4:6e:3a:4f:17:0d:fd:
c4:4c:e7:af:62:e5:8b:0f:86:4e:75:a5:93:b0:cc:
ea:14:ab:4c:d4:6c:53:3d:5e:98:0f:41:ec:24:bf:
a3:c7:0f:6f:1b:e1:8f:8d:c1:8a:ed:0d:47:b8:05:
17:71:f1:5f:e5:0f:b9:ed:07:f1:1a:20:14:e6:07:
31:be:2b:60:11:cc:4e:15:c5:3d:0c:4c:2b:c8:6e:
41:d7:47:b5:e2:70:83:b8:30:10:6d:42:bd:6f:1b:
34:8b:4b:5e:70:c3:29:19:98:bc:5a:0e:af:c5:27:
11:4c:db:b0:d4:69:5b:3f:c8:b8:a3:65:27:cc:e9:
8b:29:c5:cb:a2:37:d3:11:90:85:70:f4:e2:e1:4b:
81:55:b2:9c:4a:98:42:de:af:2e:82:b1:18:30:6f:
61:df:85:fa:7c:f6:9a:65:1f:ca:95:af:43:41:47:
a6:ee:2d:d6:b9:41:9d:c0:76:9d:ed:89:79:b9:c6:
e2:e2:b2:3b:1f:19:f8:cc:7f:76:bf:95:55:4e:62:
95:dd:fa:87:8f:8b:18:d0:12:52:72:1e:03:c6:0b:
90:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:25:DB:AE:DE:C6:87:71:1D:81:D2:33:0C:89:2E:1C:9B:B6:AC:03
X509v3 Authority Key Identifier:
keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:58:28:bd:e0:5e:5d:35:1e:d2:e9:f5:67:ad:5a:8b:d6:8a:
07:f7:7b:a1:93:57:42:9b:f1:59:7d:f1:71:cd:1a:ba:0f:44:
0e:a4:90:dc:f9:37:70:ac:e5:52:9f:45:f5:2b:a5:c2:ac:2f:
d0:eb:ce:82:71:a2:f2:c5:eb:98:78:db:ae:ae:db:2b:8b:a6:
50:6e:0c:4c:c7:35:67:ae:27:32:79:fd:e0:6a:d0:ab:da:be:
52:61:59:ed:95:83:01:6e:00:12:4e:83:29:66:50:df:d0:70:
59:49:2e:db:90:97:6a:8a:e4:bb:d3:74:43:c5:a1:ba:fd:1f:
37:db:33:fd:64:83:f7:dd:40:f4:ae:8d:98:1e:0b:a6:53:c2:
95:bd:3f:4d:ac:a9:38:f2:19:5b:31:ae:bd:eb:67:b3:7a:29:
4b:4c:a2:27:55:4f:46:71:da:5b:bf:62:41:e1:4c:f4:b7:44:
03:c0:be:de:fd:c6:6b:e6:92:75:d7:4a:34:a1:d9:53:8f:62:
66:ae:40:c2:b6:4a:89:08:a7:f8:c1:23:fe:e0:95:3c:2f:90:
7f:a9:ef:50:8c:3b:f9:30:ba:92:da:6a:50:b9:4c:f2:e7:9e:
cb:5d:b7:22:ef:6b:36:8b:46:85:bf:1a:57:54:01:45:f0:48:
1b:2a:84:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:44:00 2025 by rpki-client