Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: hH8zhyB0j4U+wbLygzQmNCBSfg/fKnM8k0Edvbnhn74=
Subject key identifier: 78:39:88:27:FB:CA:2F:DF:79:24:B7:77:01:CC:0D:BA:A8:E5:62:33
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 019847090934644D0216823D6960CA0FE64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 0517
Signing time: Sat 26 Jul 2025 14:00:31 +0000
Manifest this update: Sat 26 Jul 2025 14:00:31 +0000
Manifest next update: Sun 27 Jul 2025 14:00:31 +0000
Files and hashes: 1: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: iHWALYWVKONmC9so5ctyIYn+OSkKk75WkWvrDJOLQBk=)
2: qqGYhZyQ1Jf2yBiQTxnFZklY3mQ.roa (hash: c+EtOwZcoNbafxYOwYXLqi8yAdjVCzKcxk3fMjvNuoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:09:34:64:4d:02:16:82:3d:69:60:ca:0f:e6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Jul 26 14:00:31 2025 GMT
Not After : Jul 27 14:00:31 2025 GMT
Subject: CN=78398827fbca2fdf7924b77701cc0dbaa8e56233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:a9:19:9a:04:9d:88:d6:ff:bb:ae:19:e8:
02:98:aa:ee:76:a4:2d:b5:c6:69:87:31:8f:25:13:
11:09:c4:f8:d3:3a:9e:2b:03:15:50:6a:2e:73:40:
da:24:5b:b8:34:3f:09:d5:c7:ed:52:67:4e:39:56:
a5:7a:76:81:2b:c8:b7:e8:57:46:39:6d:8d:27:e5:
fc:ca:38:8f:42:62:5c:55:ff:48:4c:2f:43:3e:03:
b9:16:9e:87:91:6a:7d:d0:33:20:cb:58:b0:b6:36:
9e:8d:61:00:e5:d6:f7:6f:aa:ad:79:67:bf:a1:d4:
be:38:88:6d:75:94:66:0e:ac:7b:e2:28:50:58:d9:
a2:24:fa:10:2d:7c:22:eb:06:3e:7f:61:46:4a:cc:
6d:d6:65:8f:5e:73:c3:6d:e0:32:85:3b:cc:df:48:
08:99:45:5c:22:00:f1:ac:6d:09:40:54:b6:9e:97:
42:53:12:79:43:8e:e9:e8:83:69:d3:8a:e1:95:fb:
16:14:9c:56:c0:04:3e:c8:d5:91:49:62:11:9e:d4:
49:11:3d:3e:39:87:95:cc:db:18:8a:d1:d6:08:3a:
78:35:6e:d0:5c:6e:f3:3b:7a:80:a3:28:39:44:bc:
a8:a2:80:69:d2:d7:71:82:a2:e9:de:1d:46:98:90:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:39:88:27:FB:CA:2F:DF:79:24:B7:77:01:CC:0D:BA:A8:E5:62:33
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1d:ce:2d:db:83:6a:3a:7b:52:ed:67:b9:34:3a:88:85:89:
60:c4:1b:99:02:a4:2a:4c:46:a8:3c:37:e6:e3:b0:52:8c:a8:
67:4d:8b:8c:9b:72:5b:83:5b:f5:1f:c5:50:e7:85:7f:6c:05:
8a:cb:4a:be:e0:39:6b:7e:e9:ea:c4:2e:30:ed:ad:5b:bf:37:
d3:1e:b1:eb:23:a2:aa:7a:a5:5c:4b:6c:71:c0:c3:82:ca:80:
ae:9b:c6:6a:0a:52:46:19:4a:cc:f4:cc:12:f3:69:07:4a:98:
d1:77:db:db:be:98:28:3e:6d:0b:08:c7:cf:f7:ab:80:41:d0:
1d:1d:47:f1:1e:54:f6:74:ee:7d:c5:a7:ce:12:6b:14:76:34:
dd:56:07:21:39:85:c4:39:67:c5:14:84:65:5a:cf:f1:48:2b:
b9:98:63:dd:fb:5a:e0:38:e1:b3:2c:66:ef:17:41:d5:c7:88:
ef:9a:32:3a:b7:57:7a:17:84:6c:8e:0f:10:7c:5f:0d:b8:ff:
7a:5e:07:ae:b4:c6:53:e2:fc:84:12:86:12:8b:94:58:0c:b1:
e1:ea:13:af:46:da:9b:c5:0a:e3:47:96:f4:6d:b4:a4:e2:0b:
9b:87:52:6c:05:f1:46:f8:ec:e7:11:53:e0:01:1f:c8:2d:5b:
ad:a2:8c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:58:30 2025 by rpki-client