Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
File: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft (raw, json)
Hash identifier: p98XrEeudNqxRvYeapnViFKrcEaanEfvGYad0TgqsNw=
Subject key identifier: 39:EF:2C:1F:57:64:D2:5D:DE:83:D2:BB:93:3A:67:1D:13:67:26:37
Authority key identifier: DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
Certificate issuer: /CN=df0f32e5f098b86a8794825c81122da953466284
Certificate serial: 01984A77A454FBEB2A9BE1C5FD2692F5D45A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
Manifest number: 0675
Signing time: Sun 27 Jul 2025 06:00:11 +0000
Manifest this update: Sun 27 Jul 2025 06:00:11 +0000
Manifest next update: Mon 28 Jul 2025 06:00:11 +0000
Files and hashes: 1: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl (hash: 09f23UwpRQ1mKotwRRHBP+7FaUctuvkDBVERjk1IAQY=)
2: gBjKKqKZuEY4WvRauB7caOw1S-0.roa (hash: KcvP3QvpprIZ7nrbS5q17f/tcN31DqhQB7sqPQGvSG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:a4:54:fb:eb:2a:9b:e1:c5:fd:26:92:f5:d4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0f32e5f098b86a8794825c81122da953466284
Validity
Not Before: Jul 27 06:00:11 2025 GMT
Not After : Jul 28 06:00:11 2025 GMT
Subject: CN=39ef2c1f5764d25dde83d2bb933a671d13672637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:6d:b5:e8:75:c6:59:9e:31:a1:60:7a:0e:
10:98:cc:d4:00:c2:63:3c:5a:79:7e:91:35:f7:3b:
3f:46:f8:fb:5a:6c:b5:b2:40:52:26:ac:67:a0:5b:
4f:fa:5f:7b:e9:6b:91:ca:4b:c1:33:72:24:b6:e9:
69:f9:b5:ec:df:89:69:18:bc:45:17:f8:ab:2e:7a:
97:50:36:7b:56:fb:34:cd:54:1a:3c:c3:22:e3:59:
ea:6a:d3:e0:e5:5d:f2:92:4b:9b:df:46:3b:9a:c8:
72:4e:cb:e7:8b:40:7d:fe:73:83:e7:8e:7c:5a:d9:
89:e2:b0:9e:50:9e:ca:7d:0b:7e:58:4a:66:8f:10:
13:65:e2:25:7e:f2:d6:09:0c:c0:ea:60:08:15:a8:
00:60:3e:74:c3:f5:31:6f:33:e0:27:ea:7a:08:90:
32:ba:97:3e:a0:2e:2a:16:98:64:a4:67:4d:11:f8:
ae:85:47:bd:4f:f3:c0:80:ad:c9:a2:7b:d4:e8:35:
bf:6e:a9:1b:eb:1f:ac:6f:b1:56:ba:5e:a2:5a:cc:
c6:9e:5d:5d:41:29:5e:81:5c:f3:21:e4:7f:43:dc:
06:ab:71:95:d5:b3:f2:5d:d2:b4:e3:87:9b:7c:fa:
11:81:a8:00:68:e7:97:98:1c:32:ee:97:77:05:5f:
4d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EF:2C:1F:57:64:D2:5D:DE:83:D2:BB:93:3A:67:1D:13:67:26:37
X509v3 Authority Key Identifier:
keyid:DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3f:84:6e:61:ef:53:49:2e:d6:63:dd:98:a7:3e:d9:75:89:
d9:1e:a0:4c:87:53:80:67:f0:db:4f:6a:4b:a2:13:8f:07:b3:
f3:87:f7:47:9c:cb:15:0e:cb:4b:ae:36:11:99:43:de:21:b8:
bf:68:5b:6a:be:79:8e:a4:20:d5:f1:13:f9:8d:c3:f7:68:8c:
d5:6c:7a:4a:ae:4a:d0:d6:55:35:58:30:fd:53:2f:6b:9f:9b:
0e:54:f7:9a:48:85:61:f4:1a:42:8d:0b:7a:b0:f4:4b:1a:e8:
c8:0b:f5:3b:c4:d2:b3:16:29:65:7e:58:08:fd:f4:3b:e0:88:
94:ee:11:e1:b1:6e:46:cd:0f:52:b2:90:54:91:5f:af:ef:5e:
7f:46:f1:38:85:e1:b6:a8:78:6e:d8:83:49:25:5b:72:b6:cf:
12:25:56:2e:07:9a:b9:69:fc:21:14:da:d8:ff:43:f3:dd:c6:
61:29:54:8f:59:05:e7:60:8f:54:dd:9a:04:3f:e1:2f:a0:22:
e7:a6:83:71:1d:ca:56:e5:b8:c4:ed:1d:7d:ed:50:40:4d:26:
79:a2:0c:b5:f7:13:2f:8f:9c:a4:15:c2:9a:65:cf:48:72:31:
d0:e3:13:c2:a6:c9:3d:32:99:9c:e5:7b:db:cd:57:e6:13:c3:
c8:34:92:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:08:38 2025 by rpki-client