Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: Tkx55SQK6/1Iht+G4gDhvx/XlcS0E1/n4rZLtox2ZXA=
Subject key identifier: 72:47:34:05:2F:DC:C9:8C:79:15:2D:53:A6:8D:79:E8:51:66:94:8C
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 0199221E3A14D96E578426793BBAA4A7AE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:30 +0000
Manifest this update: Sun 07 Sep 2025 03:00:30 +0000
Manifest next update: Mon 08 Sep 2025 03:00:30 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: nubL5saDz7QEVn3TQb478j79+JIk0RY1RKUSDh5HNdo=)
2: 6GNxdzK9UE9bHySiQzQ4c2EkGfY.roa (hash: xWTUJszNKd3dbNHz1f2JomMkK2hd4V6IPZrJaK6VjKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:3a:14:d9:6e:57:84:26:79:3b:ba:a4:a7:ae:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Sep 7 03:00:30 2025 GMT
Not After : Sep 8 03:00:30 2025 GMT
Subject: CN=724734052fdcc98c79152d53a68d79e85166948c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:13:04:8a:6a:64:1a:66:1d:5a:8c:e6:40:
4a:7b:27:61:11:4f:fe:02:1e:48:95:d6:04:1b:e6:
97:5c:6e:63:86:aa:43:d8:2f:57:b9:a2:bf:28:1c:
77:b4:67:3d:e5:56:ef:d7:af:00:ff:80:b8:ec:57:
b4:5a:30:a3:f0:ce:c9:56:f5:91:4e:ae:ae:69:d1:
9a:46:5b:23:86:b7:18:2a:b9:28:ea:29:59:c4:66:
be:76:33:cd:2c:bb:54:4f:44:f6:1c:01:ff:31:dd:
8b:eb:6d:27:01:2a:0d:ae:25:07:41:cc:d2:6d:4f:
f3:d0:de:08:1b:9c:cc:4a:26:9a:f7:6d:e3:49:90:
63:3e:6a:e5:5c:89:c7:e4:4e:9d:f4:e5:35:a5:19:
36:a1:b8:11:50:ff:16:8a:fd:00:1d:4e:eb:25:9d:
06:d3:ea:a7:3f:a6:09:c6:4f:2a:d8:39:79:87:83:
bc:3d:f8:ee:d3:c4:d6:9a:c6:cf:a0:e7:c8:67:05:
0e:89:8e:64:ec:8b:d2:7e:b1:75:e0:6a:30:df:f3:
41:20:0f:0d:05:41:77:fd:35:d7:00:91:d4:a5:ab:
15:fe:dc:c7:60:c3:50:2d:be:44:b4:ef:bd:99:b3:
a1:78:ef:aa:e4:43:19:f9:b0:54:ff:34:4e:19:bb:
80:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:47:34:05:2F:DC:C9:8C:79:15:2D:53:A6:8D:79:E8:51:66:94:8C
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:dd:6d:97:00:94:01:4a:49:1c:da:aa:bb:b0:dd:82:7c:3a:
22:9e:aa:82:04:f2:26:83:6c:08:13:b0:34:f0:5d:af:7d:17:
b8:38:79:0f:19:f9:7e:26:ca:fc:b5:2f:8d:a7:dc:26:5f:2e:
0c:1b:e3:24:99:32:a3:7e:93:c6:82:a8:32:92:bd:18:91:41:
f5:36:0c:7f:f9:a9:d7:a2:81:e5:52:e0:fa:77:d0:6c:68:93:
9a:cd:85:bd:b2:00:b9:37:38:67:a8:82:1d:20:11:d0:5e:37:
03:f6:a9:33:f6:0d:85:e4:11:30:a9:1e:08:3d:7d:a8:1e:5a:
48:b5:e1:64:8a:cd:24:55:fd:b1:ad:a6:15:a2:82:fd:b2:66:
80:17:c1:f4:cc:a3:97:0b:91:78:fc:2e:ab:71:b5:1c:f2:6e:
c7:4c:89:87:97:fb:89:54:b6:ec:af:38:b2:d8:a1:92:b1:79:
3e:e7:e5:81:fb:45:be:db:b8:16:e0:3e:72:22:9a:dd:9b:a2:
c8:f5:53:61:c3:1f:97:5c:6e:39:68:25:6e:b5:a2:2d:3e:f2:
fc:11:27:e7:0a:d2:bb:01:69:45:ce:7b:43:08:40:d4:c6:73:
a8:2e:ee:f0:c7:4f:3b:27:dc:2a:11:e5:fb:a0:2c:21:31:fd:
f0:c2:2d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:09 2025 by rpki-client