Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: TSiCUsxRnuD/SkMocrV1t+0vSX3UjVqeVxSuIhtzN2Q=
Subject key identifier: 77:D1:54:6D:C7:9F:9A:45:5B:23:9F:78:27:67:B3:42:E3:8A:69:92
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 0198CBA5D9E5204CBFA94C6CA8EEF49ACD8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 0479
Signing time: Thu 21 Aug 2025 08:01:40 +0000
Manifest this update: Thu 21 Aug 2025 08:01:40 +0000
Manifest next update: Fri 22 Aug 2025 08:01:40 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: NeOSxrHJuNQxGS85RCJHyBEM5e1Vffp4uD1p5DjDkqY=)
2: R82wyiQ6WGXDZ2qmyfic2Rx16EQ.roa (hash: q3ADHp8TbEdc9vO2jFfoJST4ALm7hMCr9dPnLoGdV9o=)
3: msFkodHiiLA7yYTUvQfg1svzo58.roa (hash: 8maRWfYNuUoSqjA1l1zPbJ9FPRTfD/7OAF7wZnEEN9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:a5:d9:e5:20:4c:bf:a9:4c:6c:a8:ee:f4:9a:cd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Aug 21 08:01:40 2025 GMT
Not After : Aug 22 08:01:40 2025 GMT
Subject: CN=77d1546dc79f9a455b239f782767b342e38a6992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0e:50:5f:47:93:51:73:d6:3f:f9:05:ef:17:
03:dd:77:72:04:2c:c0:2b:fa:07:a3:38:ef:52:54:
13:4b:64:68:b5:91:3c:3b:48:17:c1:45:11:30:0d:
9f:3e:2c:33:18:7f:3b:15:ed:fc:e0:4c:d2:48:03:
b5:4f:8c:5e:8a:7f:f9:21:1a:3b:f3:dc:bc:08:ee:
6e:92:03:d3:e1:a4:af:35:d5:c5:d9:58:15:6d:b1:
fe:fa:fb:1d:eb:e4:66:ab:03:bf:8a:a3:17:f1:25:
5b:cd:4a:18:50:5e:5e:56:17:89:c5:a7:77:ff:62:
54:f6:a4:fa:0f:11:02:87:60:1e:f6:06:cd:5a:50:
22:0c:60:02:b8:e9:50:1a:2f:cf:8c:90:a9:42:dd:
b4:8d:af:f3:5d:df:51:5f:82:56:a1:bf:50:44:d5:
4b:95:2b:b4:37:14:58:79:8a:ef:ca:37:1e:db:e1:
77:59:aa:18:ff:a7:63:3c:80:41:d7:21:6b:29:23:
63:0e:f8:e1:54:91:bb:90:09:ae:1d:9e:ba:67:98:
81:ee:91:77:1e:7c:52:2a:0a:f5:7f:eb:7a:a0:11:
47:7f:4c:5c:b4:ce:6f:6f:b4:9b:0e:94:4c:a7:e0:
b5:4b:cd:8a:b8:4c:ab:3c:2d:4e:da:d4:db:a5:44:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D1:54:6D:C7:9F:9A:45:5B:23:9F:78:27:67:B3:42:E3:8A:69:92
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b2:f5:a4:46:ce:e0:1f:08:a5:81:ae:8f:5a:8e:8d:f5:74:
67:4f:29:d0:9f:5c:0b:1f:5c:c9:5d:ae:1f:85:a8:3e:27:58:
52:05:e7:0d:d4:9e:c8:56:7a:6c:30:be:87:fe:85:74:6a:dd:
a5:43:18:36:e4:98:4f:50:a2:69:50:22:ba:91:df:c6:c1:ad:
84:bf:e4:bf:e4:87:08:c0:9b:41:e9:e2:02:a2:b8:a4:81:8a:
60:f8:e2:3b:61:4a:f9:de:19:09:50:b3:46:85:7c:c7:a2:29:
15:42:94:48:45:fa:65:d2:75:2f:6e:f3:eb:2f:f6:09:b0:27:
bd:a5:f5:77:23:ae:04:d5:d5:75:2e:01:2d:d5:93:4e:9c:ca:
63:4b:54:e2:ff:b3:bc:27:cd:1e:42:f8:c6:8d:d8:3c:5c:ef:
0d:7d:b6:c0:2b:a8:ed:ea:93:a0:fc:49:ff:fb:b4:cc:b7:45:
25:e0:5e:aa:be:f5:07:8f:11:6c:bd:4b:ed:8f:2f:95:bc:e6:
46:b8:6b:54:d2:3a:58:07:32:a2:d7:07:6c:94:de:a3:67:9a:
61:6d:cd:d1:96:4b:44:33:2c:4c:57:c8:6b:6d:c1:d0:4e:c6:
54:4d:35:bf:87:59:ad:e7:ee:54:8d:94:ce:98:28:07:03:db:
05:d7:b8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 15:55:31 2025 by rpki-client