Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: gMKJK8UukyjpwmLN+XkLipYvAbFUTey7vLnKvtw0svE=
Subject key identifier: 74:3C:BE:EB:9D:A2:8C:F1:A4:36:5A:98:72:3B:EE:C7:14:BC:C3:E3
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 0199258EEE20B8B17235135DBE35A0DBDF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 19:02:27 +0000
Manifest this update: Sun 07 Sep 2025 19:02:27 +0000
Manifest next update: Mon 08 Sep 2025 19:02:27 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: IvHAssxPaUgnAdmdhUYQPeg8mIMqHNWTSoS8Ik6MW0A=)
2: O3I8fzz4GA8viyeptOfjUJ2mnRw.roa (hash: MhSpfjBUjJxXqy4aU0rHbneKVULz0h6JWSZvHTRBN24=)
3: ovS3rx1XoRtGLlvdJ72CyzvNZcw.roa (hash: lov3tLPiy71ecc5+P9JXxH2Fu9PCJbxZNtxQg4EVWM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 19:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:25:8e:ee:20:b8:b1:72:35:13:5d:be:35:a0:db:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Sep 7 19:02:27 2025 GMT
Not After : Sep 8 19:02:27 2025 GMT
Subject: CN=743cbeeb9da28cf1a4365a98723beec714bcc3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:d4:9d:dd:51:3a:4e:e6:13:6b:b0:f3:0d:
9c:45:b7:0f:e6:66:a7:e9:df:94:0a:18:94:c3:8f:
b8:a0:fd:28:6a:03:65:1c:94:63:b7:20:34:0a:82:
33:a9:c4:2a:bf:32:2c:ab:6a:41:71:c1:e1:37:f8:
cc:38:c4:b4:9e:56:f2:58:d4:31:b2:44:e5:bb:46:
1d:5b:8d:9c:e5:10:c3:f0:08:3f:72:75:38:64:f9:
8c:be:da:68:dc:a8:9e:8b:ad:4f:c6:3d:02:35:00:
60:ea:e0:1a:72:d0:56:c0:00:1b:03:f3:29:12:e6:
b3:54:47:c7:01:53:62:34:47:a3:74:3b:2b:55:1a:
a0:b9:91:10:ff:2b:0f:34:61:85:4b:c1:29:fb:4e:
1d:91:ef:ed:94:d9:aa:fe:51:66:97:22:2b:f2:d3:
82:d6:63:88:34:4d:70:a2:b3:3f:fe:6d:dc:3d:ab:
11:3c:93:cc:01:f2:2c:96:94:be:26:74:be:35:d1:
71:5e:18:a3:3d:b0:bd:8c:b0:06:17:37:06:9d:e2:
61:6d:ad:e8:86:ef:32:79:46:aa:33:92:d8:5c:5e:
ac:af:9c:de:c0:ae:86:9d:9b:b6:57:8c:64:99:90:
80:aa:b2:ba:16:b6:0e:14:5b:48:af:1b:61:28:80:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3C:BE:EB:9D:A2:8C:F1:A4:36:5A:98:72:3B:EE:C7:14:BC:C3:E3
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a5:b3:94:ef:8d:14:b7:2d:46:e7:98:fd:86:44:18:ec:67:
58:4c:37:ef:6c:f4:e8:59:d0:e4:93:72:77:72:16:aa:f2:a1:
a5:1b:0d:0b:ac:f2:4b:94:87:dc:0d:e6:9f:73:b0:cd:ab:f2:
5d:d5:7d:a0:87:28:77:07:fb:38:0d:db:e8:74:62:3d:bd:da:
dc:06:4f:1c:65:c3:0f:dc:fe:05:0e:41:43:77:db:0b:62:cd:
b4:c4:83:05:7e:a0:b3:14:dd:e8:d5:9b:23:ff:ae:9e:ec:48:
dd:2b:67:be:6e:9b:e6:5d:f5:df:a7:cc:91:72:cd:29:93:88:
23:d0:e6:a8:7f:7e:69:e8:00:5d:c7:16:83:51:48:ad:5c:72:
da:09:df:e8:d2:f1:38:c5:94:2f:88:29:72:01:31:61:49:c8:
f6:78:58:84:f3:6a:b5:97:3d:13:49:d4:3e:da:4c:61:66:b9:
ba:d4:2e:04:7f:05:8c:f5:f6:88:b8:25:ad:99:7d:da:f1:66:
70:8d:f9:c3:45:b1:c2:5a:3e:6e:18:4c:fe:0c:b7:c1:d3:f2:
a4:dc:0c:55:d0:c1:67:a6:42:4b:b3:20:69:98:23:78:47:98:
84:2c:25:af:f7:39:a1:81:5d:d3:aa:07:f0:b8:e1:9d:0b:4a:
34:19:20:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 03:32:58 2025 by rpki-client