Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: bKMh9uHBHL6R8nCXBDdbMtVD3LwGWZzuBaZB9Yv5rBo=
Subject key identifier: BC:1B:1D:F5:02:CC:BC:6A:80:DB:78:4A:5C:F1:C5:4D:41:29:6C:CC
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 01983FBD5777681E7E9EA481FB6FD45CEF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 0C90
Signing time: Fri 25 Jul 2025 04:00:29 +0000
Manifest this update: Fri 25 Jul 2025 04:00:29 +0000
Manifest next update: Sat 26 Jul 2025 04:00:29 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: dJYCbotr/dNninJjSjz8XlCyJOHJEZ9qmz3qKfXNl6s=)
2: 8miIDeBQxB0aKJY-TlsIuuJ2hww.roa (hash: mQmM8Cjnfx5WSvhPSj11m+hm6JvBiNUtIRExWbof9J8=)
3: IRGnT1eQmUBmgR6_xtusELr-83s.roa (hash: dJ3+bDwzY4UO43kbNXGDeFrUEwRtOB0R3J1TQjuxqCQ=)
4: aw3P8V17V992wZUulFnFkkVrMmo.roa (hash: O9AIELr13JUWTjKqPnJ8lbjYgl5+VRQqDU69j3HTMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:57:77:68:1e:7e:9e:a4:81:fb:6f:d4:5c:ef:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Jul 25 04:00:29 2025 GMT
Not After : Jul 26 04:00:29 2025 GMT
Subject: CN=bc1b1df502ccbc6a80db784a5cf1c54d41296ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:87:ae:9e:3d:dc:81:c4:68:67:24:ab:b4:
e5:5d:c7:42:25:c2:b2:57:d8:53:6c:ea:3c:04:04:
6c:f6:f3:69:38:f9:f2:b9:77:cc:9e:bb:f8:e1:02:
83:cc:b4:0a:18:be:87:38:78:7d:93:2f:bb:3a:8d:
13:57:3a:7b:c8:d2:8a:6b:19:e6:a0:65:21:b3:ff:
02:7b:9a:ab:9f:40:4c:b3:9b:08:98:f4:f8:af:6d:
74:2b:97:e6:86:f5:d0:32:87:37:2c:b7:31:4a:7e:
36:4f:47:8b:d9:e6:9e:39:57:78:a7:29:69:b2:5b:
d2:0c:10:ba:92:42:33:ec:5c:24:2c:c6:d9:9b:5a:
3b:23:77:c2:c3:0c:0d:94:16:74:f4:e9:9e:11:b4:
41:2d:ef:10:7b:a2:ec:28:bd:86:32:ad:7e:f4:e1:
6d:d4:93:6b:9c:b0:18:c8:25:2d:6c:c1:06:c8:2c:
84:2b:36:cc:c7:34:3c:80:d3:cb:79:d2:26:f7:be:
57:ca:2f:59:16:20:74:04:84:bf:80:9b:a1:06:27:
ed:4b:33:a2:24:7d:b9:cf:83:5d:2d:16:a9:88:c2:
6b:ee:d1:af:b4:06:b0:ea:46:39:48:34:68:f0:41:
3b:6d:1e:7a:5c:04:02:43:09:d1:55:73:68:b5:b3:
f0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1B:1D:F5:02:CC:BC:6A:80:DB:78:4A:5C:F1:C5:4D:41:29:6C:CC
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ee:8f:e8:9f:ed:a2:c8:d7:a9:c5:4e:5b:15:63:f9:53:7d:
1c:a2:a2:2c:9b:ce:e8:ca:b4:52:af:25:87:73:bd:d4:21:85:
ff:03:6a:04:9b:8e:e0:0a:30:32:1c:6c:42:3a:6a:22:d6:55:
ec:ab:79:40:20:8b:eb:0e:2d:74:75:f4:b2:a9:3f:81:2b:5c:
8a:76:fd:a8:bf:b4:ee:1c:80:9c:6a:76:b8:f4:d6:f5:8a:e1:
a8:d8:79:0e:1d:c9:93:69:94:7d:47:c4:4e:0d:2b:55:2c:e8:
e9:cd:ac:39:9b:a2:03:21:45:a3:94:aa:76:f9:c7:69:83:30:
0b:0a:e9:41:39:8a:5d:10:1c:bf:09:9d:9e:dd:55:8c:59:1d:
4c:d6:7a:33:04:95:17:18:fc:42:9d:10:f6:28:53:93:d0:1c:
0e:75:b0:b5:e2:36:96:21:88:e9:07:2a:d3:af:ad:3a:03:c6:
eb:f4:7c:24:12:8e:43:0d:3a:f4:c5:7a:24:af:63:cd:13:bc:
a4:5b:c1:36:2f:b0:12:48:8e:68:e9:39:0f:3b:75:c5:f6:fb:
cf:a8:53:14:25:9b:ba:d6:1c:2f:ce:76:fd:3d:49:8b:61:4d:
41:ef:91:fe:73:3d:cc:ab:81:35:93:08:00:d5:da:27:7f:a4:
5e:81:f5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:49:07 2025 by rpki-client