Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json)
Hash identifier: GDwbyfnyHHVKG6fSOioH8oUL9LunHNia8q+c+1Ntjq4=
Subject key identifier: AF:A8:2F:03:AF:FA:DB:00:49:07:7B:8B:95:73:F8:45:6A:AB:59:78
Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Certificate serial: 01992C34326DAA9720867F12C9F7F09F1238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
Manifest number: 061F
Signing time: Tue 09 Sep 2025 02:00:42 +0000
Manifest this update: Tue 09 Sep 2025 02:00:42 +0000
Manifest next update: Wed 10 Sep 2025 02:00:42 +0000
Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: vnhOuuRgKhJ4qKprGQPy7Jfe7T+hsqsJv9dlkBeG598=)
2: Q6We2_Kzknmf_FU65X_ThS9Li9U.roa (hash: T5kdvis2FcaJDZX7ZiymCfqr46qyRqmHtR1xf7wekhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:34:32:6d:aa:97:20:86:7f:12:c9:f7:f0:9f:12:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Validity
Not Before: Sep 9 02:00:42 2025 GMT
Not After : Sep 10 02:00:42 2025 GMT
Subject: CN=afa82f03affadb0049077b8b9573f8456aab5978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:4a:48:02:ad:ef:e1:97:5c:91:2d:eb:ef:
52:cc:f6:69:d6:8f:15:be:1b:e0:fd:8f:b8:aa:16:
8a:d3:56:71:c6:c1:81:96:6d:86:2f:d3:c8:3c:94:
74:c4:00:48:9a:c7:c5:cc:b6:ba:4d:20:f4:a1:7b:
46:d2:d9:e9:79:2c:50:c0:f5:2d:19:62:cb:a4:d3:
bc:c7:20:07:f2:c6:69:ce:5f:4b:ed:84:b1:f9:90:
94:d9:1c:e7:d1:a3:59:af:da:98:e5:29:4a:1e:d7:
fc:8b:34:9f:6d:ee:50:68:91:42:95:9d:2d:f3:98:
3d:ff:da:42:3b:b8:f5:53:92:94:8f:7f:61:e5:e4:
b2:63:42:a2:5b:14:3b:fe:3b:2d:ac:c2:4a:11:9f:
38:29:cf:f5:36:d6:50:45:df:b3:6f:eb:88:ed:cc:
9d:3a:01:4b:94:ad:12:13:d5:7e:46:d9:80:11:80:
30:6a:be:84:45:fc:2a:fc:cd:6f:3c:0b:2a:78:cc:
e5:4a:bf:06:38:83:d0:72:0f:b4:91:3d:4d:86:06:
5b:11:9e:ad:37:27:42:b9:75:f5:b4:bd:99:3b:b6:
9b:f5:c8:ff:b1:fa:51:55:09:f9:37:ea:c5:cd:a0:
00:87:8d:71:00:70:f7:80:18:97:38:1d:cc:21:92:
af:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A8:2F:03:AF:FA:DB:00:49:07:7B:8B:95:73:F8:45:6A:AB:59:78
X509v3 Authority Key Identifier:
keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6f:36:cd:10:46:85:2a:ee:31:50:f2:ed:89:c8:b7:d0:96:
f7:36:8b:fe:d2:87:53:12:f0:62:46:34:f2:d9:a9:f8:33:7d:
ef:f3:75:7b:00:1d:df:2c:4f:ed:77:56:33:a8:0c:5f:92:75:
75:1d:38:af:43:d4:f4:54:cb:b7:04:6e:5a:55:17:2a:6c:33:
9e:c6:a8:4a:09:c1:7f:70:e1:e2:f6:1b:6c:c7:fc:fb:f7:17:
6c:6f:70:50:9b:05:b1:99:63:b0:22:f6:fb:29:17:e2:87:45:
7a:8b:6c:64:24:e0:a2:05:7b:bd:24:ff:cd:c2:7e:65:e3:bf:
00:fe:88:c8:96:0b:d1:93:ee:ce:93:cf:02:e2:fb:b3:a2:72:
da:84:33:5c:13:36:80:f4:54:a2:a2:c2:b5:3f:4a:9f:76:e7:
10:6e:e0:3a:60:cb:78:06:e6:62:4b:e4:ef:e6:14:98:a7:7e:
33:4d:08:da:6f:df:f1:d1:18:ef:6a:8c:0d:a5:e8:06:39:73:
d7:b9:81:e6:3a:9e:cc:f0:64:85:bb:cc:2e:02:1e:6f:b5:c4:
43:f4:bc:5b:35:bd:ad:17:a3:62:1b:97:7c:42:da:02:67:84:
3b:30:93:dc:62:49:af:33:0b:f3:97:04:6a:cb:6c:d7:cb:09:
37:34:5e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:48:58 2025 by rpki-client