Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
File: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json)
Hash identifier: bVApyvWeQ8O09jFQb4U2fl6QbL74L5yZIv3m5sjB7oI=
Subject key identifier: F8:99:F4:7E:B2:E7:F8:D0:5E:3D:69:83:57:0C:89:C5:2E:77:F4:86
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial: 01984A779F72CEBFF7FB8C58C6DE48125B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
Manifest number: 0C5D
Signing time: Sun 27 Jul 2025 06:00:10 +0000
Manifest this update: Sun 27 Jul 2025 06:00:10 +0000
Manifest next update: Mon 28 Jul 2025 06:00:10 +0000
Files and hashes: 1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: eJ+WkRRM8FLH3RgHJgH+T7J4GHHvxgzRCKBUoy7UVLA=)
2: bJQvsBvbQPoYZP2_LHbwvNkWsqI.roa (hash: 6bSavq+Amxtx/G0AW8vYM/flHBEJUHj3DU6R3v4xOug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:9f:72:ce:bf:f7:fb:8c:58:c6:de:48:12:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Validity
Not Before: Jul 27 06:00:10 2025 GMT
Not After : Jul 28 06:00:10 2025 GMT
Subject: CN=f899f47eb2e7f8d05e3d6983570c89c52e77f486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:66:82:ec:a3:ee:cb:9d:a7:7a:65:3a:02:
64:04:22:67:3a:7e:84:b2:44:3f:ae:3c:76:28:6c:
e8:9c:54:83:f8:65:75:52:b5:24:6c:67:58:81:3b:
8d:e6:8a:46:7d:db:58:53:13:3b:dd:78:4f:0b:66:
cd:82:49:f7:6f:23:bc:a9:40:0f:21:38:fc:6b:8f:
fb:a3:43:ae:4c:2d:23:bf:90:82:9c:9b:7e:0d:8c:
17:a6:23:df:94:8f:67:3f:17:7e:d4:ed:e7:cd:4c:
da:6a:ab:b3:c5:3f:7b:fa:4b:33:fb:bc:c1:96:80:
8a:80:21:e4:33:8e:d7:ed:12:94:df:e3:ea:17:24:
fc:df:40:e7:33:b9:38:bc:75:53:d8:cf:2f:52:88:
a8:4f:ad:18:b3:33:af:29:83:0d:76:c0:af:cf:f9:
02:be:27:6b:40:6f:e4:03:33:d0:d5:76:d5:50:21:
93:29:90:6f:35:66:4b:32:dc:2e:31:34:a4:f4:86:
e7:d3:a1:14:01:8e:2e:d2:d9:6d:18:4b:00:ac:50:
11:95:15:7c:6b:89:9b:8d:e6:20:55:0d:65:9a:4c:
fc:8a:9e:bb:3f:e5:9c:58:ac:25:05:b8:d5:7d:12:
29:c0:a9:65:d8:56:ca:aa:3c:f3:4f:4d:22:4b:d0:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:99:F4:7E:B2:E7:F8:D0:5E:3D:69:83:57:0C:89:C5:2E:77:F4:86
X509v3 Authority Key Identifier:
keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:59:99:da:f4:23:31:02:c3:47:08:b5:33:b4:51:58:0c:1e:
e8:a9:9d:3e:9d:9b:2c:7a:3c:1d:e7:5e:f5:18:91:f4:e6:04:
62:3d:41:80:4c:27:c9:cd:95:cd:33:c3:78:3b:6c:8c:f3:1d:
a6:dc:29:15:7a:91:44:d3:c9:c7:81:2d:46:09:c0:83:2d:bd:
7f:38:83:a5:3d:4f:5b:25:ff:f2:bd:ee:c2:ec:34:1b:09:7e:
d0:fe:5a:6c:5d:2f:bf:74:c2:a3:dd:05:81:dc:30:f3:68:17:
d8:13:89:bb:98:e0:a8:b1:cd:ea:e0:6b:94:8d:d0:35:af:91:
70:b3:6f:66:7e:e2:ca:d2:30:4f:17:90:67:29:fc:c9:53:2b:
d1:f2:e6:fb:62:7c:84:52:86:d5:64:20:5f:3e:5d:f6:73:08:
f9:d2:dc:ae:39:67:9c:86:19:67:10:79:2c:37:2f:61:88:df:
78:48:13:64:46:8d:38:10:34:4a:d7:44:ec:3d:3c:53:51:57:
8b:22:38:c0:90:c2:89:9f:22:f7:59:2f:2a:8f:14:bf:d1:2b:
48:0e:28:11:9f:cd:c1:86:3a:7d:e0:18:89:b4:65:31:ef:39:
c8:5b:ff:8a:5f:6b:1a:31:fd:43:60:a6:24:ff:53:7b:bd:66:
b8:de:8b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:16:17 2025 by rpki-client