Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier: /+20Yi/UFVLvy2+kWIOz8d+vjOb8YZq7LlyrO+rBD6o=
Subject key identifier: 08:26:B6:C9:16:92:C7:30:75:CB:CC:51:89:C6:12:66:D0:5E:9D:D8
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial: 019922FA6DB4797C33D702A64D06E8ABD3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number: 0780
Signing time: Sun 07 Sep 2025 07:01:01 +0000
Manifest this update: Sun 07 Sep 2025 07:01:01 +0000
Manifest next update: Mon 08 Sep 2025 07:01:01 +0000
Files and hashes: 1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: SXvVQmoHRQZgKfLM0NZXM3tGKnkfXd+UPw5CEgXrZVg=)
2: MpZzldQi5IW1vH72zsN86ALdCYo.roa (hash: hGLTyfZCRDqAerkM2L4I96QJCTHMEKoFxuiSvfkJH1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:6d:b4:79:7c:33:d7:02:a6:4d:06:e8:ab:d3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
Validity
Not Before: Sep 7 07:01:01 2025 GMT
Not After : Sep 8 07:01:01 2025 GMT
Subject: CN=0826b6c91692c73075cbcc5189c61266d05e9dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:7e:aa:f0:fc:15:d0:27:3a:1a:a6:70:76:
eb:6e:49:e0:c4:03:31:59:b8:4e:d4:cd:c2:93:19:
db:9b:4f:c7:82:7e:42:22:06:62:ba:39:be:12:51:
d5:9a:cc:4f:ad:fa:f6:2d:81:8f:63:67:c4:4c:19:
1b:86:45:36:30:25:b8:19:11:f7:45:18:c2:f1:b7:
02:fa:b9:27:09:66:c1:6a:1b:84:91:07:f1:27:2a:
df:45:7c:ea:a0:b2:48:6c:ce:a1:e1:90:a8:e5:36:
09:4f:7e:35:68:cc:d3:ca:04:3d:6f:c5:d5:27:37:
9a:45:30:db:e5:29:80:1a:1a:7c:f4:aa:94:1b:e0:
68:fa:26:8d:32:04:bd:06:cb:26:8e:8a:8e:ed:88:
ee:a8:b1:08:ed:7b:55:47:1f:55:19:c0:d0:b9:f6:
76:c2:50:bb:af:48:94:f7:4c:74:a5:d6:64:ae:25:
81:28:e9:60:3a:12:32:db:43:dc:3a:01:8e:24:a1:
3b:e0:9b:af:f7:91:4f:50:0b:3e:1a:33:df:21:a5:
3f:7d:1b:9f:f8:ca:9f:05:de:43:5c:6f:71:9e:54:
4f:84:fa:3a:f0:14:d4:c9:be:71:1f:76:f8:2f:8f:
3b:08:73:7a:dd:0a:c5:3c:1f:a2:d3:8a:69:1f:cc:
35:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:26:B6:C9:16:92:C7:30:75:CB:CC:51:89:C6:12:66:D0:5E:9D:D8
X509v3 Authority Key Identifier:
keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:56:be:a5:3e:1a:c7:2f:62:b7:17:cc:50:75:c9:b5:7c:50:
2f:84:53:b0:ac:04:48:b2:6d:60:56:c5:98:b0:a0:b7:86:be:
e9:89:a9:7f:e4:69:66:65:92:ee:39:c3:8f:f2:60:a2:b5:8c:
94:51:92:4a:e5:7c:2a:92:ce:86:7b:58:95:c5:c2:f0:f9:2f:
31:c1:c7:f1:4b:1f:fb:b6:80:f5:84:34:43:b7:4a:33:a0:c9:
ba:56:cb:ce:e2:dd:ea:d2:c2:9e:de:39:1e:0a:6c:5e:ee:2c:
95:9a:f5:b6:0e:53:af:b8:e6:19:5a:5c:ce:5c:b0:31:c8:7d:
e2:a4:53:d5:99:01:a8:c6:0c:79:65:78:3f:ba:37:c0:84:46:
cf:8e:39:b5:01:34:fa:d7:db:f6:c5:43:b2:2e:85:d2:21:00:
76:db:2b:6b:42:5e:ee:a1:00:b5:75:b7:af:12:cc:4c:03:d4:
ab:a3:59:6d:ce:d9:5b:eb:f1:81:67:1d:00:1b:fc:b3:0d:a5:
b2:2f:90:2c:a7:5b:69:18:95:f7:2c:d3:86:da:e9:a8:48:cf:
fa:ce:9c:30:ce:52:b0:c2:22:5b:4f:13:8a:77:1f:e8:df:86:
be:06:b9:99:04:ce:f4:84:a8:9c:fc:84:cd:b2:f2:22:82:9b:
f3:e0:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:34 2025 by rpki-client