Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: ZB82A9udw5QQdfwzCeCu/laQKpSIQ1QJiwoiP2+iNVs=
Subject key identifier: 42:33:3C:00:FC:47:65:AF:40:9D:85:B9:02:AF:49:7C:2A:CC:80:A9
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 019923317D41068964488C0F2E3CD85A8CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0BAA
Signing time: Sun 07 Sep 2025 08:01:09 +0000
Manifest this update: Sun 07 Sep 2025 08:01:09 +0000
Manifest next update: Mon 08 Sep 2025 08:01:09 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: ImR67K2dV0x0WxuoeXUg6aRwCsnwHXj/rWCokSUi4OY=)
2: 17Ijw7DnA-ky4M-qBTdOY4I7ec4.roa (hash: iu+mQ1jbZcSsyxSnbAMCeHovGJfrloyLqIxmClTwTuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:7d:41:06:89:64:48:8c:0f:2e:3c:d8:5a:8c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Sep 7 08:01:09 2025 GMT
Not After : Sep 8 08:01:09 2025 GMT
Subject: CN=42333c00fc4765af409d85b902af497c2acc80a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:bf:b4:64:29:98:bd:4d:91:ca:30:1c:cc:
90:0f:5c:60:c8:e3:05:b9:ea:a8:5b:ac:23:ec:09:
00:36:63:55:ba:b2:26:8e:0d:8c:66:ae:98:f3:8a:
f1:33:8c:25:8d:db:9b:19:c2:db:66:0f:bd:51:ed:
87:56:5d:cd:6d:3e:b1:96:1e:2a:4e:1f:66:2b:3d:
50:85:0a:0a:a7:52:e1:a4:ab:45:2f:75:2f:bd:b9:
c8:ef:ba:9b:25:49:51:62:bb:a5:75:6c:85:47:a1:
21:f4:5c:9a:63:75:31:1e:81:8e:2e:2c:a7:5f:da:
a6:52:75:11:27:b3:d0:df:a9:88:13:24:70:71:ee:
9c:1c:d0:09:50:04:99:67:12:df:1f:92:31:46:9d:
ef:f3:bc:3e:19:c4:19:a6:8a:23:5c:ae:2a:a3:4a:
35:d1:b1:6b:2c:70:cb:9a:8a:70:91:61:57:6d:32:
7e:f2:5a:42:ae:41:ed:5e:da:4d:cc:d1:94:18:62:
93:47:18:ca:f3:44:03:2b:58:18:ca:96:f4:b4:2a:
93:91:a4:87:62:fc:61:af:22:b9:72:54:10:ed:cb:
49:b3:82:aa:31:71:77:7f:20:f5:ea:c2:8d:cf:ff:
0c:3d:48:97:2f:9d:ab:a7:4b:26:6a:99:01:d1:bb:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:33:3C:00:FC:47:65:AF:40:9D:85:B9:02:AF:49:7C:2A:CC:80:A9
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c9:88:f6:b8:16:64:32:56:28:dd:5d:5e:be:af:5e:09:14:
ca:a6:d1:8d:b8:45:94:61:58:70:e7:37:1b:7c:ad:45:d3:61:
ec:fa:57:86:45:b5:16:37:28:42:2a:ac:45:78:52:de:89:0b:
d6:1c:7b:e8:aa:68:7a:b2:c1:0e:05:f7:a3:06:b2:d4:19:82:
c6:fa:62:ef:b1:38:9a:5e:32:bd:db:67:7a:ac:03:ce:dd:e1:
35:e5:17:f3:cb:f5:2f:c0:6b:16:9f:4c:dc:af:2f:27:92:a7:
31:93:74:89:95:7a:e2:d4:b2:f7:26:3b:f6:f0:92:ce:69:69:
0a:54:c0:f7:fb:00:d4:df:3e:85:60:c1:a5:8c:7f:ad:22:f7:
ab:7e:dc:c7:e2:8f:c3:cd:5a:96:a2:7d:59:21:5b:fa:c0:a4:
5c:da:a9:4c:c1:ff:d7:58:6c:96:17:3f:ff:f6:19:aa:15:b6:
74:48:68:95:f9:2d:83:b0:71:3c:d2:8f:2b:a1:ff:5d:4a:1c:
e5:a8:87:9b:64:57:58:46:c0:a9:1a:aa:e4:8a:49:5e:de:29:
51:ff:cb:f0:65:d5:43:13:62:73:ee:52:0c:62:df:3f:06:80:
34:1b:65:89:bd:fa:67:3c:39:0d:8e:ad:d1:ef:fd:67:38:93:
f7:fd:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:02:52 2025 by rpki-client