Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
File: 3SppXEEiHdjt3PxcS1zAt4nLlTs.mft (raw, json)
Hash identifier: Ps4gBEdE9/kkqQV88MzWa8birnYeQ8C1EHg5UnYwNgc=
Subject key identifier: 16:00:3B:54:2D:C8:4A:70:2B:C6:4C:7F:16:E5:4F:A8:27:5E:F5:54
Authority key identifier: DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
Certificate issuer: /CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Certificate serial: 019922C38C7FD326F734D3CD7AED2A14762A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 06:01:04 +0000
Manifest this update: Sun 07 Sep 2025 06:01:04 +0000
Manifest next update: Mon 08 Sep 2025 06:01:04 +0000
Files and hashes: 1: 3SppXEEiHdjt3PxcS1zAt4nLlTs.crl (hash: 9+3cOfbAy/dQp5rKuYlppX/0YjhLnXBT/f3AIpsAT1M=)
2: ZxKbEdzKxauu7o-Y7eoipbP5kS0.roa (hash: bVgUBiwiMttSarotQ+bYBGzvg0m/rWkM8yb5LV2CZwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:8c:7f:d3:26:f7:34:d3:cd:7a:ed:2a:14:76:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a695c41221dd8eddcfc5c4b5cc0b789cb953b
Validity
Not Before: Sep 7 06:01:04 2025 GMT
Not After : Sep 8 06:01:04 2025 GMT
Subject: CN=16003b542dc84a702bc64c7f16e54fa8275ef554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:28:83:b4:7f:d8:15:6e:e7:d5:fd:78:b9:
5a:5a:e7:e8:78:e0:19:40:2d:c9:25:5d:dd:74:3f:
7e:cc:d0:85:73:74:bc:1d:82:24:ed:53:7c:c1:45:
5d:ee:66:3f:bd:98:17:44:5d:82:ca:af:5e:17:bc:
02:6a:44:83:db:bc:30:07:69:ee:a6:79:6d:7f:1a:
48:ca:f5:e3:dc:e5:e8:00:fd:c0:96:c9:09:a5:55:
4b:06:37:9f:ce:51:7a:0b:8c:90:c4:63:93:48:e2:
b5:b2:18:9d:87:9b:68:66:c6:a4:47:1c:26:d3:8f:
6e:26:fb:bf:b4:33:e1:60:12:02:f4:ab:42:20:de:
d0:21:cf:97:20:dd:38:cd:93:a0:b6:1d:5a:05:64:
de:0d:ae:69:fe:71:a3:ce:66:ce:22:60:0f:a0:cb:
52:68:65:bd:e0:e4:8f:3e:c4:83:fb:89:9a:88:9f:
09:20:88:a8:05:87:14:36:bd:66:47:12:80:e6:e6:
ba:d0:31:b3:a1:ec:6c:4f:8d:40:50:05:de:78:d6:
13:ca:8d:f1:8a:68:47:e7:e7:a5:21:0d:8e:4b:02:
99:f7:ed:d4:79:a8:c9:b4:61:b0:ea:db:fa:41:d0:
5d:d6:5b:73:62:7f:ab:8d:89:b7:7a:e5:d1:d9:f3:
93:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:00:3B:54:2D:C8:4A:70:2B:C6:4C:7F:16:E5:4F:A8:27:5E:F5:54
X509v3 Authority Key Identifier:
keyid:DD:2A:69:5C:41:22:1D:D8:ED:DC:FC:5C:4B:5C:C0:B7:89:CB:95:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SppXEEiHdjt3PxcS1zAt4nLlTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/94ac17-f9dd-49f6-a88a-208dc068d53c/1/3SppXEEiHdjt3PxcS1zAt4nLlTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a9:04:b7:83:00:7c:70:90:c2:15:95:f7:55:58:ba:20:c1:
41:7a:94:64:fb:bc:cc:61:3a:29:7e:07:7c:26:f0:f2:2a:36:
40:91:c7:b8:12:ef:d2:45:fc:c3:fd:d9:95:5f:94:41:1d:0c:
9f:cd:91:63:e6:8c:04:19:2d:1b:06:16:ba:0d:93:d6:5a:13:
a6:b7:53:d0:8d:c3:6a:24:05:dd:74:76:2b:e7:05:9d:e5:57:
66:50:67:de:a6:01:56:c2:01:a9:37:82:d2:6c:b5:4a:5d:ee:
09:7c:e5:05:6c:43:1f:3b:23:53:b7:77:5e:b6:c0:c5:6b:e5:
5b:02:12:15:87:64:b1:03:31:d4:8e:0b:55:fe:8e:78:b6:ff:
fd:66:6b:c8:e3:05:27:b5:4c:00:56:11:02:d7:1b:99:8b:0e:
36:8b:45:17:1f:e4:8b:93:6b:cd:b6:1e:a6:df:39:e5:84:f6:
aa:e4:94:aa:d6:ce:e6:4a:32:ac:60:b2:2f:20:11:95:0c:66:
69:ac:22:fd:7f:0e:4d:a6:fa:5b:59:d0:93:56:c6:71:24:aa:
37:86:35:dc:7a:86:c6:7e:3a:42:61:c2:c2:b6:a3:1d:9f:f2:
e5:bc:f6:05:a7:13:4f:5c:60:a4:52:ae:11:61:d5:43:26:62:
82:a1:06:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:28 2025 by rpki-client