Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: xQQ9t2O84z2tNn1dpNZd3bjQiEJqW1Gg865goL4WBxk=
Subject key identifier: E7:8B:B9:B7:F7:82:1E:9E:52:CB:97:FB:55:07:10:91:8A:59:C9:60
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 0198353A0D15B0FA0601C5A5B0E463940918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 15FF
Signing time: Wed 23 Jul 2025 03:00:53 +0000
Manifest this update: Wed 23 Jul 2025 03:00:53 +0000
Manifest next update: Thu 24 Jul 2025 03:00:53 +0000
Files and hashes: 1: 1-r8ngTnAMIWnigi3kZKRlPxzAEg.roa (hash: 4upInjfh8BMDhZW1GMRFLRcUKFy4sgss61UjVbuCcN4=)
2: 3bHFI98fNrO-AI7iYMdoY6Cy4Ec.roa (hash: jNavEGcWKNfNKB84/MmKoUJXT5oHj4PAQhOkM5ErTv4=)
3: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: 2EAKXypKB/kCEcfF9b6gADT6zOomqxbQDWWQY5Ey0+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:3a:0d:15:b0:fa:06:01:c5:a5:b0:e4:63:94:09:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Jul 23 03:00:53 2025 GMT
Not After : Jul 24 03:00:53 2025 GMT
Subject: CN=e78bb9b7f7821e9e52cb97fb550710918a59c960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:a7:88:cb:6f:b5:41:d6:9c:28:bd:16:bd:
b3:db:17:e7:d6:9a:96:1f:56:1c:53:c7:62:8e:71:
91:a3:22:b9:bb:f0:47:95:52:80:47:e9:03:82:e2:
7f:76:00:b1:29:ae:f6:3a:56:e0:52:c9:4a:c6:c9:
e1:cc:80:95:7c:c1:fb:5f:e5:75:16:41:86:2b:ac:
e4:f2:b9:20:39:b9:00:10:89:8f:15:19:eb:e5:76:
0d:f6:8c:a0:40:02:3f:d3:d2:eb:c7:71:59:78:8e:
ce:a9:8b:22:25:4a:43:82:46:aa:25:44:fa:cc:41:
ae:c0:90:f8:29:ce:9c:85:31:29:dc:0c:8f:bc:b3:
21:89:2a:7e:14:bc:01:9b:8a:c9:1c:f4:61:a8:a1:
38:6b:b1:63:6a:64:8e:5f:e4:11:ff:d0:71:cf:67:
13:92:c8:84:86:91:aa:a8:6f:92:22:8e:a3:62:18:
07:84:c3:b2:47:b0:20:4b:ea:83:da:e7:ae:89:4b:
0c:c1:25:dc:a1:50:77:1e:40:c6:3f:af:85:f7:a5:
35:b3:5f:0e:d2:db:50:c4:42:18:0e:33:ec:ec:2c:
22:15:a0:19:83:8d:1f:70:f5:7c:74:7b:8c:fb:79:
61:90:02:c8:10:c7:f2:3a:cc:0c:b7:52:c1:26:8e:
ac:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8B:B9:B7:F7:82:1E:9E:52:CB:97:FB:55:07:10:91:8A:59:C9:60
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:49:07:38:8b:f5:f2:80:75:2a:97:83:97:b2:ea:6e:be:b6:
38:6d:55:18:bb:ed:a1:1e:cd:d4:27:37:83:7d:22:25:f5:8c:
26:ee:33:7a:59:14:af:d7:47:82:6b:93:ca:e2:86:17:aa:eb:
ca:bb:02:4a:24:f3:f8:0b:b3:43:ef:73:bc:7d:94:ce:d5:66:
99:d5:de:0d:83:bd:73:06:92:34:3d:65:84:7b:d0:4b:9f:06:
ee:51:90:1a:1d:2d:e9:2e:3f:84:0f:01:fd:c5:9a:9f:65:03:
b4:9f:62:36:04:3f:cb:a4:bc:97:6c:5e:1a:18:ee:43:9e:69:
8b:f8:33:85:96:0e:c3:be:d5:20:78:99:dd:5a:02:ca:a6:35:
34:46:ba:79:30:31:d0:9f:3e:d1:c1:ad:ae:5a:7e:15:c6:d7:
ab:58:ca:f5:d3:1b:a4:f4:d8:4e:43:49:a2:60:db:27:ba:3e:
42:33:0c:3d:20:46:19:99:ee:a6:d9:53:4b:52:07:4a:50:ec:
b9:ed:3a:90:a0:fe:41:c5:a0:00:d8:68:d9:2d:21:d4:2e:d6:
10:52:a0:b7:78:e8:58:43:57:a5:20:ed:10:7a:62:57:29:7e:
6a:03:37:b0:8b:33:12:01:f3:d9:ed:cb:cc:a9:a2:d1:f7:40:
65:e8:e2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:16:50 2025 by rpki-client