Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
File: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft (raw, json)
Hash identifier: fyw1s8o7mJspasEab/7aAOffrM2Ec0OPWdxSygICPGY=
Subject key identifier: 03:CC:23:28:FE:7C:C3:5C:D3:04:D0:B3:5B:F5:36:E5:C3:F7:47:D3
Authority key identifier: 0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
Certificate issuer: /CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Certificate serial: 019853443100FB37DD5DC49BA8C8D0C2FB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 23:00:34 +0000
Manifest this update: Mon 28 Jul 2025 23:00:34 +0000
Manifest next update: Tue 29 Jul 2025 23:00:34 +0000
Files and hashes: 1: DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl (hash: E0Bli+aNbQsQdCUJAlgGA36FThsb1ZvO+a+nFBSIbzI=)
2: GQRsCJTR5eyMxFAsEzKdn1EA608.roa (hash: HAXZ0MI6t/VbluxA0NO0jceUtQ5vVV4JGD/6H3yxEPg=)
3: lqRpbscM182PANHFGsqMxFenQsU.roa (hash: KSrFDxAg8q5YynrUWiOm6jdQGqkWKL+PdBqVLGCQ1I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:31:00:fb:37:dd:5d:c4:9b:a8:c8:d0:c2:fb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3ff71151a45ed39fb1da5ffb4032ed74fa19c5
Validity
Not Before: Jul 28 23:00:34 2025 GMT
Not After : Jul 29 23:00:34 2025 GMT
Subject: CN=03cc2328fe7cc35cd304d0b35bf536e5c3f747d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:3c:d0:b3:0a:f4:70:ec:da:2c:9d:f8:3d:
87:a1:6a:0f:a2:cb:ca:7b:18:86:e5:3f:86:f7:cd:
41:42:24:1b:bd:30:b3:9a:49:69:2e:7f:73:2c:20:
21:a8:12:34:9e:00:71:94:83:86:d5:4f:54:f9:35:
6b:ad:19:19:57:20:2d:9a:e9:22:77:c7:a0:36:62:
b0:a2:b9:7d:63:dd:25:ae:86:8b:14:05:92:0e:67:
4b:b4:fd:26:90:17:b5:18:f6:57:d8:aa:84:da:68:
e1:8a:05:f4:92:01:01:4e:9d:23:af:d3:a6:fd:d5:
24:1c:b2:1d:b2:41:fd:63:19:a0:87:0e:59:4d:11:
1c:76:3a:fa:3f:09:49:15:60:f7:51:30:ff:a5:46:
6d:d8:a1:af:e0:bf:c1:de:c2:1a:d6:2b:a3:59:27:
ab:5b:27:97:e2:9d:f8:52:3a:ca:ef:2b:86:05:4f:
a5:8d:a2:95:c7:e8:50:1c:f4:5a:84:34:cd:f8:ab:
44:39:51:90:de:88:f9:d8:3a:8e:4b:8b:0d:a5:bf:
a2:d7:3b:83:f7:1c:30:a9:5d:be:86:84:f8:87:81:
3b:f1:f0:7f:c5:12:8e:1c:0e:de:53:75:2b:80:86:
a9:d5:b1:48:a1:de:ba:4f:37:34:f7:cf:a0:60:ce:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CC:23:28:FE:7C:C3:5C:D3:04:D0:B3:5B:F5:36:E5:C3:F7:47:D3
X509v3 Authority Key Identifier:
keyid:0D:3F:F7:11:51:A4:5E:D3:9F:B1:DA:5F:FB:40:32:ED:74:FA:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ea9d99-738b-4baa-b455-a6cb054ac97b/1/DT_3EVGkXtOfsdpf-0Ay7XT6GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:88:88:4a:ed:81:63:09:34:7c:3f:25:01:a1:70:41:a9:16:
47:f0:d2:89:4e:91:6d:93:a7:7c:b3:39:26:66:af:69:fa:57:
70:af:74:b7:af:54:de:87:76:48:c8:4c:2d:1a:e2:82:08:cd:
86:1b:e3:70:eb:5d:d8:6d:9c:b0:28:7c:1c:42:c3:6b:93:a1:
a5:24:57:f5:1b:5f:f2:fe:76:b9:6d:6c:43:7b:aa:da:0d:38:
58:a1:e4:95:03:01:88:00:d6:10:7e:d7:8c:17:f4:c1:f0:67:
fa:a4:7f:1b:e8:98:11:b8:d9:c8:54:e6:7a:e7:57:40:cd:60:
53:26:6d:83:be:7a:4d:9f:ae:b1:8a:e6:a1:a2:ec:c5:51:02:
61:9d:b4:17:c4:06:41:ac:33:9a:b8:be:21:81:ad:47:57:d2:
fb:33:f3:87:6c:f1:e7:da:a9:ac:ff:45:85:b6:5d:aa:0f:f9:
e6:39:af:01:23:31:e5:b7:b8:0e:66:5d:ff:b9:2f:16:df:af:
bc:6d:b2:88:94:8c:31:74:31:f0:08:11:a8:f2:86:12:87:be:
7e:75:d5:cb:1e:9e:54:8a:91:1e:5b:ae:a9:6d:46:f9:6a:eb:
4c:f1:7a:81:8e:da:4e:ac:e2:61:07:6b:c8:5f:3b:d8:3f:2c:
8b:53:2e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:04:44 2025 by rpki-client