Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: gCm8q8MZHW9U2NHpcpcJLRsVRP4e+3QR4PRDxw4DTOQ=
Subject key identifier: DD:2D:AE:45:EB:F7:4F:A5:8F:09:6C:14:3C:3F:FE:18:A7:38:FC:81
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 01984A09DABFA99E4CB56E5D692F3135EC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 04:00:16 +0000
Manifest this update: Sun 27 Jul 2025 04:00:16 +0000
Manifest next update: Mon 28 Jul 2025 04:00:16 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: DGi2IWvDKpDj/KZNA+iH3Mx6sHx1egshMH5XoNvfupo=)
2: IXT2ShwYMDTPNqnR-lmJPCt_hM0.roa (hash: YktH9Y4fzOrvY5vhhRnBY1iI8LZ09iZ8zTmc5w1S0Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:da:bf:a9:9e:4c:b5:6e:5d:69:2f:31:35:ec:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Jul 27 04:00:16 2025 GMT
Not After : Jul 28 04:00:16 2025 GMT
Subject: CN=dd2dae45ebf74fa58f096c143c3ffe18a738fc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:94:0b:5c:cd:49:ce:01:ef:84:31:20:e0:
7a:c6:e8:8c:f8:bb:5d:72:66:e6:c0:72:8a:4b:47:
91:b9:29:fe:6d:2b:79:36:24:3c:0e:bd:89:65:4c:
8a:27:98:56:16:9a:7e:b1:86:d5:01:8b:ef:77:1c:
9d:c4:b6:00:5d:d2:1a:3e:ae:8e:61:bc:30:b9:e9:
45:56:21:7f:14:74:76:72:5f:59:d3:e0:88:88:c0:
cc:9a:37:04:4c:17:f6:d5:b0:b4:76:8f:a4:ed:81:
f1:e6:af:5f:2d:52:b9:c5:5a:aa:1b:db:65:1a:fc:
a7:74:f6:e4:cd:7f:df:41:c8:6f:31:28:5c:5d:59:
2a:02:8e:bd:50:a9:5a:b9:fd:91:3e:cf:ee:68:f8:
d5:5f:97:f7:7d:1a:a3:4d:60:c6:61:30:0b:a6:8d:
00:61:a9:99:ea:f7:2a:af:c1:cc:eb:b7:17:94:0d:
33:b1:8e:6d:db:26:fd:fb:b9:13:c4:e6:06:23:38:
fa:63:2d:db:41:b1:c1:29:dc:e9:43:1a:3e:28:2b:
a7:ef:40:8a:bb:06:99:3d:3d:5e:f6:09:cd:cf:72:
5f:e8:9c:3c:b6:a2:62:b8:a7:87:7b:8e:20:ac:db:
52:f7:56:b1:3c:37:5d:82:bd:f7:04:4b:3c:54:dd:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2D:AE:45:EB:F7:4F:A5:8F:09:6C:14:3C:3F:FE:18:A7:38:FC:81
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ee:77:c2:ce:97:f6:3c:24:53:2c:39:4f:3e:d3:55:97:09:
21:25:3f:10:0e:93:e7:9c:b4:e2:36:8f:86:d3:b6:84:3d:ec:
ac:5a:40:2f:1d:e0:4c:16:c6:54:0d:e9:76:57:13:70:0b:c3:
e9:05:31:2f:23:5b:34:04:0d:ac:31:b0:be:c8:67:2d:d3:78:
6e:8e:1a:86:55:7d:10:88:6c:fa:80:ea:08:aa:49:1c:2e:63:
d7:c2:26:87:9b:44:cc:c3:1a:64:8c:c0:b8:a1:b6:b1:fd:91:
96:dd:1d:d4:37:7d:5e:f6:26:8b:0b:71:33:4f:17:c1:6d:2a:
1f:ba:4d:db:0f:28:e9:45:1b:20:38:02:21:72:00:88:d9:65:
b0:5f:82:a6:a6:83:6d:60:68:ee:3c:6a:50:45:32:a9:d4:2f:
95:66:17:d2:7e:d6:37:85:29:80:51:26:4f:1d:eb:b8:b2:76:
20:ab:a3:30:81:68:71:02:07:fc:4d:f2:ff:b7:18:4a:65:a4:
51:65:6a:f9:bd:78:5c:f3:9b:e3:84:b1:c1:06:38:7b:70:fa:
27:b4:9a:1f:d1:3c:f2:03:72:c4:5d:ac:0b:3f:56:9c:c0:4d:
b3:1c:a2:21:b1:c9:c7:f7:fb:6f:4b:fc:6d:88:c2:d2:3a:3e:
36:f2:18:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:02 2025 by rpki-client