Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
File: 3f2U67jLmKHb31C9zWncwpFEiJ4.mft (raw, json)
Hash identifier: qx7wh6/7PhCOKtPTJbmGVUcAwkHFPtXBzPXD7Ss6G9M=
Subject key identifier: 54:19:25:56:BD:CD:23:8F:E0:4A:FC:39:66:C4:78:A4:7A:05:D0:57
Authority key identifier: DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
Certificate issuer: /CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Certificate serial: 0199350032435472ED60DB47BBFC9F47CC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
Manifest number: 0D62
Signing time: Wed 10 Sep 2025 19:00:29 +0000
Manifest this update: Wed 10 Sep 2025 19:00:29 +0000
Manifest next update: Thu 11 Sep 2025 19:00:29 +0000
Files and hashes: 1: 3f2U67jLmKHb31C9zWncwpFEiJ4.crl (hash: qK4/0W1ZOYVmznF6eKpvaLqMYohzrfKSzb4r2rOTpjE=)
2: OMnuxUeA0haC1p_KDdRfwFA8Q2s.roa (hash: cDQVnRaiJ+Kb9nhkJ6FSjxN3vz7jN+QBdbH8z93gYFM=)
3: yOI7tiSRDXgdskD_bs5AhIY61n8.roa (hash: jCxGB8CWsOl2EvkB0hTjOgeBy34atnE5kB7r6h+CCmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:32:43:54:72:ed:60:db:47:bb:fc:9f:47:cc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Validity
Not Before: Sep 10 19:00:29 2025 GMT
Not After : Sep 11 19:00:29 2025 GMT
Subject: CN=54192556bdcd238fe04afc3966c478a47a05d057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5a:03:11:c6:1f:fa:cb:0f:3a:ec:c4:57:c1:
7e:21:a2:08:c9:97:6a:64:da:33:9e:0d:87:35:16:
0e:0e:5a:a4:be:6c:81:d2:95:97:b0:d2:72:7f:ac:
80:3b:bf:6a:fa:98:e2:72:0f:d2:34:7e:f0:a3:41:
f7:c8:37:6e:ad:45:1f:9f:ff:a7:59:ea:bf:ba:0c:
11:f8:fc:b6:73:af:b0:2c:8a:4a:ce:c4:b2:07:02:
c6:c2:3e:e1:f2:3a:25:3d:2f:26:a5:62:f1:62:70:
31:f2:ed:7e:4e:24:05:1f:ce:f0:c9:eb:33:97:6d:
41:a2:8f:c3:cb:f4:2f:23:55:b4:8e:ed:2a:37:ad:
2c:63:77:e4:13:e6:a1:b0:87:97:d1:42:69:46:84:
d3:9c:be:2f:ec:13:64:48:c4:c9:8e:ec:85:9b:8f:
21:07:8b:9b:f5:08:cd:82:aa:2e:8c:8b:9e:50:7e:
cb:05:ac:d2:69:16:9a:b8:dd:71:a8:e1:f7:db:41:
db:71:39:7d:67:a6:56:f2:92:7f:7e:88:ba:68:fb:
2a:48:1b:a6:b4:32:ac:08:6b:c2:63:76:4a:52:fc:
44:41:35:84:b3:35:1c:18:b0:dc:aa:a1:79:7c:d4:
a8:5c:bd:d6:74:fa:7b:6f:24:68:a8:4b:0b:35:21:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:19:25:56:BD:CD:23:8F:E0:4A:FC:39:66:C4:78:A4:7A:05:D0:57
X509v3 Authority Key Identifier:
keyid:DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f5:1e:a5:57:e4:33:26:98:89:7c:ea:be:21:4c:b1:a7:4e:
f0:a8:36:e9:52:a8:50:03:36:12:21:f8:14:7e:14:95:4c:16:
04:2e:d3:0b:48:32:93:7d:0e:54:85:d2:54:a1:da:2c:7e:b9:
b4:93:41:04:ca:c5:ef:fe:11:1e:7c:c9:ec:53:66:89:d6:91:
3a:c4:fe:a6:d8:24:68:f6:01:28:c4:12:96:89:a3:4f:6e:b1:
16:6e:c8:fd:4e:02:7d:89:f3:f7:09:6a:19:a8:66:c5:1b:46:
8c:3c:e3:1c:f3:4c:b6:b7:e8:0d:40:8d:57:bc:a5:4c:cd:c1:
81:47:bd:4f:90:6d:46:6f:1e:47:37:1a:70:a1:7a:99:a1:08:
e1:48:4f:b0:a1:e4:c4:e2:b8:65:11:d6:48:0e:71:9a:52:1d:
9b:9c:08:a0:7d:75:3f:15:78:5a:f4:f6:fd:e7:d5:9a:5a:f3:
a4:14:e8:5c:4c:2e:d6:47:1f:7d:fd:3f:3e:48:c9:fe:88:78:
d5:d3:c7:16:22:90:c8:b0:86:4c:9a:fe:d1:2b:1b:dd:9e:db:
3b:eb:9f:f3:3b:39:37:47:0e:98:3d:a4:db:94:da:20:51:03:
ac:77:80:c6:62:a1:f1:ec:7b:92:52:aa:e7:a1:08:f0:08:d1:
57:ce:b8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:25:03 2025 by rpki-client