Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json)
Hash identifier: TsDXB6JnpxYFKjoRVMyMfs31h2ekFaHy25OC0haRSeo=
Subject key identifier: 63:D8:87:97:7B:DA:1B:CF:FE:85:88:94:2C:34:25:1E:2A:D3:61:EC
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial: 0199233153981C556E510665D1E82392D825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
Manifest number: 0D80
Signing time: Sun 07 Sep 2025 08:00:59 +0000
Manifest this update: Sun 07 Sep 2025 08:00:59 +0000
Manifest next update: Mon 08 Sep 2025 08:00:59 +0000
Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: lo8y+VY/6f1pFDmfUtKpQ4+CmQB/V5WXh+zAVL4jr4Q=)
2: vmqKHuLzrPkqklGr2oHlX4A5H1s.roa (hash: HWx6FXZlLIKlHVfqDThyZuNv2Ccv+hNVkaueWiNq1XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:53:98:1c:55:6e:51:06:65:d1:e8:23:92:d8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Validity
Not Before: Sep 7 08:00:59 2025 GMT
Not After : Sep 8 08:00:59 2025 GMT
Subject: CN=63d887977bda1bcffe8588942c34251e2ad361ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:71:f3:14:7e:00:2c:40:69:1d:7e:1d:3c:
53:7c:50:d2:af:15:59:42:95:49:11:e7:9c:bd:05:
05:0d:30:b8:82:fa:8b:14:8e:39:05:51:b1:29:f0:
24:dd:56:6a:3a:85:31:40:72:47:4f:fd:a5:2d:d4:
d8:28:eb:14:8b:43:03:3b:0c:d8:7d:51:c7:12:e3:
33:94:5a:5d:b4:fc:fd:90:d9:fa:ae:58:95:bb:7b:
c4:ff:c3:dd:3a:58:10:0f:53:2d:ac:ff:ae:48:f1:
e0:56:75:f1:ba:89:a7:dd:bc:e1:b3:42:29:f0:61:
d2:10:74:e0:a5:8c:5e:fa:6a:54:21:bf:87:7d:df:
1c:0b:0a:a3:12:a8:55:da:88:86:e4:f1:7e:b6:cb:
ed:bf:5b:71:e2:52:f9:70:9c:3a:f5:cf:35:29:1b:
87:b5:27:3c:ca:73:2f:ac:4b:a6:b4:ab:0c:d4:f0:
27:af:f5:46:57:50:fb:4d:01:19:d0:ce:14:c0:82:
1e:92:81:33:9d:4e:54:1e:39:41:d8:e5:10:b7:b5:
65:96:96:42:bc:ae:f6:24:7c:61:76:68:03:ac:ce:
50:a0:29:fe:60:22:13:8e:9e:b0:a9:b2:54:e1:e8:
88:83:1f:fa:96:86:1e:70:5b:cc:4e:69:68:7b:04:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D8:87:97:7B:DA:1B:CF:FE:85:88:94:2C:34:25:1E:2A:D3:61:EC
X509v3 Authority Key Identifier:
keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2e:96:0d:08:f8:22:18:6b:bd:3c:ee:85:29:6f:68:4d:1f:
50:2a:ad:d5:c5:36:59:42:b0:69:84:83:60:10:5f:af:12:19:
50:de:c9:22:df:34:b8:88:a4:de:f3:2e:d1:75:1b:c9:61:04:
f0:6f:16:92:18:cf:11:8a:24:2e:9b:26:57:19:ae:1d:27:c2:
64:7d:1a:3f:44:d4:56:45:18:36:3b:bc:33:ca:bb:8d:23:9e:
42:4b:7e:a2:db:88:47:24:c1:6d:4c:fa:06:1b:ba:77:82:e9:
9e:4e:f4:d2:c9:99:de:8c:c0:c6:34:b9:40:6f:f9:10:c5:a6:
ea:7e:5e:0a:a0:c3:3e:43:55:f2:42:0d:70:b5:b7:61:5d:38:
25:db:b6:a8:69:64:61:ab:0d:db:dd:d8:e3:d9:58:31:a9:e2:
91:f0:c0:65:3d:a6:76:21:48:82:39:97:f0:da:73:d2:53:74:
bc:2c:40:e3:73:a6:e4:a6:24:d1:82:d2:45:2a:ee:81:31:ce:
5c:87:b6:46:0a:64:cb:cf:5c:17:eb:4c:8d:f3:a3:66:8f:94:
19:c9:fd:32:9f:97:82:98:6f:18:d5:c9:29:d9:1e:37:60:b9:
54:0b:bf:d8:90:f7:9b:ed:bc:66:75:55:fd:16:7b:ae:fd:46:
31:19:b2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:49 2025 by rpki-client