Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json)
Hash identifier: x9UXwdRYoia4Va7fnv2/mfIb9jM/UL+BhQjcx+De/aQ=
Subject key identifier: CF:1E:66:3F:9A:D4:F8:AF:E7:C9:CF:37:FC:E5:63:B7:3B:67:11:B6
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial: 019921E73F39FE57754C8D45601C78894EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
Manifest number: 02F9
Signing time: Sun 07 Sep 2025 02:00:26 +0000
Manifest this update: Sun 07 Sep 2025 02:00:26 +0000
Manifest next update: Mon 08 Sep 2025 02:00:26 +0000
Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: QTkGiFh+wGU/1ZSY7mvwu8hFdGJAdsoIjcAkU5Y0U64=)
2: wSO8Qf5_v1p-oNDifbsTI9tUaPY.roa (hash: t8VFb4R1YuauyoB16s9G5smfDaNXuP879i5idHgDRZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:3f:39:fe:57:75:4c:8d:45:60:1c:78:89:4e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Validity
Not Before: Sep 7 02:00:26 2025 GMT
Not After : Sep 8 02:00:26 2025 GMT
Subject: CN=cf1e663f9ad4f8afe7c9cf37fce563b73b6711b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:f4:02:4d:a1:c2:c3:6d:d5:23:93:12:03:
ee:31:45:ea:a0:fb:60:48:4c:63:1e:13:5d:50:b7:
31:10:21:7e:5a:8c:4a:cd:19:93:09:26:e5:fb:5c:
ec:9c:b0:79:44:97:3e:e8:86:23:b3:62:98:ab:48:
58:dd:79:78:1f:54:94:43:68:20:35:88:8e:ea:4a:
ac:19:f0:8d:fd:d4:7b:72:c5:9d:d0:e9:8a:8f:0d:
b9:49:07:06:a5:7c:51:fa:fa:10:17:32:d4:80:39:
26:9d:cd:df:e2:52:28:d3:86:5b:10:77:eb:6c:c1:
c0:1e:9b:2a:f3:93:13:d7:f9:e2:a1:36:cf:ee:19:
81:64:88:88:ee:d7:7f:e7:c8:6e:dd:9e:a7:e7:40:
5c:9b:e4:d1:b4:25:1a:aa:55:a0:5d:62:59:d3:38:
ff:b6:ca:16:94:10:44:e0:c8:f9:c0:73:95:60:7f:
6f:dd:64:21:9b:d8:8d:e9:f0:e8:17:f4:85:89:df:
37:25:d4:0a:88:ce:06:8d:81:d5:61:28:58:d3:0c:
22:d3:e6:42:8e:f8:5e:1d:40:bd:77:06:38:2f:3d:
1b:bc:6e:44:d5:50:04:59:e6:55:89:ef:a8:f1:ab:
94:41:38:a7:45:db:8f:a7:28:83:fa:53:a4:e9:e3:
1c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1E:66:3F:9A:D4:F8:AF:E7:C9:CF:37:FC:E5:63:B7:3B:67:11:B6
X509v3 Authority Key Identifier:
keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3f:22:40:39:1c:55:c4:66:d4:e8:9d:ea:3c:82:d3:6f:45:
21:30:09:f5:e1:c2:88:06:3e:c7:f6:fb:21:3d:be:8b:e2:31:
08:56:5b:dc:7d:b1:a4:b3:8f:26:3a:90:91:fb:6b:e8:14:d8:
00:08:cf:28:00:7c:15:97:7c:0b:0d:5d:a3:60:e9:5a:62:ff:
17:c8:33:3b:57:3c:b0:d0:c7:0c:92:cc:f6:93:9b:f3:ae:b1:
88:a1:3c:da:63:c7:ee:97:f9:dd:7b:aa:68:90:4d:4c:09:4d:
43:de:f7:a8:1f:26:8a:ff:d2:b9:88:d3:31:61:27:19:56:6f:
d1:90:f8:10:57:e8:aa:7c:86:6d:f8:78:4a:79:27:a0:84:94:
6b:f7:34:6a:5c:74:72:99:af:94:6b:4c:42:d2:13:3e:1d:62:
df:2e:ed:4d:d6:ef:d0:26:1f:c6:1b:0a:52:74:af:4e:c0:c6:
ef:66:9f:6a:4e:65:a0:7b:64:d4:3a:33:09:cf:66:6c:cd:be:
78:d9:5c:f5:27:39:61:61:c3:53:86:c6:c8:e2:d4:8c:b8:d3:
41:16:21:4b:ad:c1:c2:02:b4:30:c2:ab:8e:91:80:a8:09:69:
1f:f6:1a:1f:9b:50:c0:bd:db:fd:c5:86:ae:27:f4:97:29:31:
87:7a:30:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:04 2025 by rpki-client