Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json)
Hash identifier: gy5kWQEstCU/L+xbFZblDXOEsilzwSSc+tAuzoYqHg4=
Subject key identifier: 50:7D:FD:84:4A:A0:22:E9:5B:19:A4:1B:D7:83:86:5D:BF:80:CF:80
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial: 0199228CBC8297ECF662C259B7C144809BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 05:01:12 +0000
Manifest this update: Sun 07 Sep 2025 05:01:12 +0000
Manifest next update: Mon 08 Sep 2025 05:01:12 +0000
Files and hashes: 1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: v4fUCd4nBlJrkGl1etHvQNvXC/Yq9Ddzwcuj+Zqy500=)
2: 57HaC7393494-Kydk1JdAp5sP5I.roa (hash: MC5zLYnL7jsECqxeDtP30qM0sWScy6N43eUhfx207aw=)
3: m5gUSNnJ2hKaiWTW0ODmWqqDw-s.roa (hash: EE2S7AYIPyyJZqEsdRi77q99LaNKBqMzcLpUq4bS+A8=)
4: nX1l9uEaP3hKft0f6nr66330FaY.roa (hash: Ify3evSlWibc6XFuSTIlXp6BEPgQD/cUtILAv8sgqKU=)
5: rYOTmI6zBWy0_qXug-7vEbI5-NE.roa (hash: WCnXAEMnH2mCY9gWHiuKlZ1HO6eQUoArgriFfc+fAVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:bc:82:97:ec:f6:62:c2:59:b7:c1:44:80:9b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Validity
Not Before: Sep 7 05:01:12 2025 GMT
Not After : Sep 8 05:01:12 2025 GMT
Subject: CN=507dfd844aa022e95b19a41bd783865dbf80cf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:7c:69:6d:5d:f9:fe:ad:38:39:89:89:7b:
c2:dd:87:62:9c:e2:a9:1e:25:9e:94:72:f5:87:11:
34:3b:38:cb:79:80:0b:37:3e:8d:78:e2:7f:d3:11:
c8:35:11:74:26:65:30:d2:f8:8d:8f:9d:c1:79:e7:
98:6e:a7:84:f4:01:65:5a:31:4c:a4:c0:ba:68:ff:
af:8d:07:38:b6:ca:73:7e:bc:d0:a3:28:f3:36:09:
40:ac:7e:26:fb:98:ca:8b:16:1c:46:d0:0f:d9:a5:
d5:c3:fe:21:4e:fe:87:db:fd:9d:37:19:49:18:ee:
d9:30:09:27:ee:34:d2:6a:94:25:6e:d2:a4:d9:40:
b5:a8:6b:bd:13:a2:aa:4c:8a:be:6d:26:fa:eb:9c:
79:b1:cc:17:95:01:f7:21:11:0a:b3:f3:53:f1:42:
ea:3e:3f:33:03:79:63:3c:43:a3:dc:fd:09:68:a3:
0f:b2:33:3d:55:87:dd:a8:cc:2c:cd:12:c2:a1:74:
92:01:b5:d8:b7:8f:2d:0b:6d:9f:2e:1d:39:56:b8:
f6:65:12:4d:15:d7:cd:d0:b2:40:7f:1a:b3:a8:b0:
b4:2c:77:63:51:28:39:5d:43:55:f7:09:c6:b6:10:
c5:4a:65:10:41:1b:2d:c2:46:47:55:9d:8d:a0:5d:
7b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7D:FD:84:4A:A0:22:E9:5B:19:A4:1B:D7:83:86:5D:BF:80:CF:80
X509v3 Authority Key Identifier:
keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a6:ef:af:1d:84:0c:60:67:84:ea:d8:11:44:6e:f8:83:9a:
a5:c6:b6:24:20:2d:fa:0b:9e:9d:f5:81:c4:e2:e9:1c:d9:1f:
c1:30:28:1a:79:df:93:25:60:c1:7b:bf:64:63:6e:5f:b2:82:
1d:be:9a:9a:ac:36:b4:ea:fb:7d:c9:6e:87:82:48:c7:53:68:
04:38:53:d6:6c:1c:22:e9:98:d3:45:bc:61:af:5e:88:ab:93:
10:cb:8d:ae:b4:bd:30:7f:45:b8:d1:54:57:30:a3:7f:f4:c5:
32:23:34:1a:04:ab:62:ed:d6:d3:d9:60:bd:c4:04:3b:15:3e:
0e:2e:a3:94:ca:a0:11:c9:fb:9b:75:f5:bc:2a:68:45:56:e1:
0a:22:a6:61:63:44:08:a0:3c:45:19:e5:ff:07:30:c1:d5:ac:
53:1b:91:03:9b:2c:c5:06:5e:64:52:d5:47:c9:57:16:98:78:
95:c9:ba:7b:68:c0:fe:a5:cc:3d:c6:21:86:22:ee:47:3a:d6:
69:08:88:7b:25:a4:7b:10:45:ce:88:8d:a0:83:56:4e:4c:d5:
64:bf:36:61:d7:be:bb:40:2e:ea:21:88:dd:c4:f5:e7:b3:9f:
ce:f3:e4:75:06:a8:11:7b:cb:4b:5b:77:12:34:5d:36:4e:a3:
f1:bc:23:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:46 2025 by rpki-client