Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: NGYQQ2WW288/fXDUCKhWsLlWM9OHVSjx9Kly02lKd5k=
Subject key identifier: 8A:C5:F1:87:67:1E:56:8E:5F:7D:B9:6F:5E:E7:80:D2:AC:2C:5C:8C
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 0198CBDDA9D4ADF0268E64058019E6066567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 1650
Signing time: Thu 21 Aug 2025 09:02:38 +0000
Manifest this update: Thu 21 Aug 2025 09:02:38 +0000
Manifest next update: Fri 22 Aug 2025 09:02:38 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: rHcZ0/PQvP9vhUuQKx4ZWWGz/1VxFozVljm4nCyQSoQ=)
2: DCDhVbD3fsODPYm5sUm8pjAvYC4.roa (hash: 7lv1CrpPPfO+TV6Xk6IsNlr9S02akSFzspE/euO4HYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 09:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:dd:a9:d4:ad:f0:26:8e:64:05:80:19:e6:06:65:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Aug 21 09:02:38 2025 GMT
Not After : Aug 22 09:02:38 2025 GMT
Subject: CN=8ac5f187671e568e5f7db96f5ee780d2ac2c5c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:72:1b:16:6f:26:58:32:27:1f:75:5e:9d:
85:39:23:93:7f:d7:c1:db:a3:93:a0:7a:a9:42:19:
98:6a:05:a8:78:da:a6:89:69:29:1a:f7:a0:f8:7e:
b3:3c:c4:08:9d:b5:59:6c:ac:39:6d:a5:a2:9a:51:
18:20:f3:52:d6:c1:21:12:cc:54:01:91:a1:21:12:
42:1e:c2:b4:5e:ce:aa:b0:74:5c:4f:c2:8d:ed:38:
b6:72:98:b5:49:4c:03:3a:16:c3:44:42:bd:62:b4:
e2:ed:56:e5:02:d7:05:5e:9f:39:ed:99:85:88:ca:
9b:5b:97:73:75:6d:9c:c1:ab:ff:e4:80:ef:20:58:
08:12:79:04:ca:6a:05:1d:1b:f3:f5:c5:10:8d:2a:
7f:86:66:ad:78:03:24:5a:e3:25:be:48:8d:61:b2:
3a:a4:5a:bc:05:b9:db:1c:16:72:f3:e2:fc:dc:2d:
62:30:41:e4:df:b5:5b:31:72:9e:b8:fa:c6:47:44:
96:a5:79:da:9b:a8:72:7d:58:c8:cf:bf:fa:11:96:
fe:f1:e1:77:67:ee:01:55:fb:da:48:d3:ee:5f:dc:
a4:e0:0c:f6:d9:94:6c:c6:99:ac:d0:d5:aa:72:e3:
02:a0:9a:6d:45:04:38:ee:c5:5f:80:1e:d7:18:c6:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C5:F1:87:67:1E:56:8E:5F:7D:B9:6F:5E:E7:80:D2:AC:2C:5C:8C
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b1:fa:b1:38:ed:ac:4e:58:5b:92:4f:10:c4:8f:3a:a9:ab:
27:34:bf:01:fc:ea:99:33:8c:0f:7a:1f:cb:6e:c1:ad:35:d4:
4b:44:ef:d7:29:b7:a3:ea:50:d6:74:a0:73:c7:91:28:52:77:
ee:04:d9:6c:de:3b:da:3c:b1:a9:47:76:c8:a8:70:e3:40:1c:
be:2f:b8:5d:d6:7d:61:bb:e6:24:3b:d3:b3:56:2c:5a:6f:7c:
32:a8:69:90:7d:93:6d:5d:1d:e4:02:d2:f0:9e:fd:95:d6:5a:
21:33:1f:21:56:60:72:19:2d:6c:e0:9b:fb:aa:5b:4e:5a:e5:
dc:9f:72:fa:9f:33:3f:4b:51:1b:d7:10:8b:72:13:ff:20:06:
b0:be:fd:86:b3:d2:51:05:8c:a0:71:46:f4:28:84:66:74:e7:
86:8c:81:0e:1a:84:60:34:8f:f2:78:11:5c:74:5b:33:d3:6a:
e2:8e:82:ae:38:2c:35:2e:ec:e9:97:6c:81:49:8f:ea:38:f7:
ce:85:52:d5:d7:a8:aa:13:30:68:c9:4c:f8:b8:3c:7e:fb:f2:
50:0f:6e:a7:a0:6d:17:32:e8:08:1c:32:9e:de:59:f1:de:c6:
92:9b:67:90:43:da:d1:a3:fd:6c:16:4f:0a:43:5b:c6:50:98:
2d:ce:e1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 18:30:32 2025 by rpki-client