Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: 0csScLu3A6A3vQ0lOpN5FCox4kvYngw6dgWMI9HKz8M=
Subject key identifier: 2F:4F:A9:AB:60:21:4D:46:6F:FC:96:23:F5:84:D1:DF:77:A3:03:CC
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 019921E78A79014965F52038C8ACA96B5F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 02:00:46 +0000
Manifest this update: Sun 07 Sep 2025 02:00:46 +0000
Manifest next update: Mon 08 Sep 2025 02:00:46 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: EP1PEZiP9vtDCBvtjGnWoXoBopJVMzWZfmyPSnhaD04=)
2: 3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa (hash: k3QEknU5rjZnXpONxqfvLO581xpn3+pyaYB6EDwI7ck=)
3: 7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa (hash: LAvqsJ06fMyPoV983D+eGZunyZuIfO7UCXuYbTjEljc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:8a:79:01:49:65:f5:20:38:c8:ac:a9:6b:5f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Sep 7 02:00:46 2025 GMT
Not After : Sep 8 02:00:46 2025 GMT
Subject: CN=2f4fa9ab60214d466ffc9623f584d1df77a303cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:02:b9:a8:f4:a1:d3:58:e1:49:cd:bc:21:
c1:cd:b9:f5:97:59:3e:54:a0:dc:f2:74:f1:0f:3b:
6d:2b:13:c8:2a:9b:b2:98:3b:39:2c:62:df:fe:ae:
e1:56:7e:42:bc:dd:ee:7e:2c:eb:0a:b9:1a:c8:b3:
49:b0:ea:8d:5a:03:21:a8:fe:a8:91:a6:d7:c6:b6:
fe:1f:b2:05:2a:50:76:d6:c5:a6:12:79:5d:ce:5c:
af:b5:87:29:41:6b:75:54:71:36:41:c9:85:c3:af:
93:f4:26:ea:9a:19:b0:aa:ca:39:dd:0e:af:28:a4:
df:d6:30:55:bd:34:2f:46:78:e3:72:28:0f:8d:dd:
e9:cf:63:57:dd:c8:5e:f0:0c:fd:2e:eb:59:4e:ac:
35:70:d3:9b:04:c6:ea:5d:ce:6e:97:a2:dc:98:19:
c6:1b:4f:8b:fc:5b:fe:3f:29:f0:58:4c:04:d4:be:
5f:f8:c3:f1:ff:25:d4:be:93:f0:eb:79:6b:58:59:
b3:62:f7:b4:5c:5f:6e:b7:e7:20:4b:80:eb:14:b2:
92:0c:13:51:d8:7e:da:61:39:25:0d:cc:bb:dc:f3:
36:ce:48:16:59:9b:55:fb:33:a8:29:6d:97:11:60:
59:b9:52:c8:ee:a6:f4:b6:6b:7a:e5:7e:fd:cc:0a:
4f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4F:A9:AB:60:21:4D:46:6F:FC:96:23:F5:84:D1:DF:77:A3:03:CC
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:70:ae:63:cf:40:9d:d1:27:ad:f5:7e:44:43:fc:06:18:2b:
88:83:78:42:9d:68:a3:54:ff:e5:17:b1:69:af:52:02:be:5c:
4f:16:f7:73:21:99:01:76:b6:0a:c1:9e:9a:5e:14:29:6c:d1:
0c:e5:46:96:7c:0f:86:ce:1e:36:8a:bc:c8:68:11:da:af:c2:
eb:1d:b3:63:55:60:2f:f4:db:30:7d:87:51:62:f0:6f:e2:24:
8d:7e:45:8d:10:a8:7e:48:0b:89:cf:22:19:d4:35:90:e9:65:
71:a6:4e:a4:54:dd:c7:b4:74:92:0d:5c:5a:29:40:d5:0f:31:
74:84:8e:4b:2b:db:37:29:5a:98:11:e3:24:d9:8e:12:2f:4d:
dc:09:5f:57:1a:af:93:45:a2:33:b1:16:3d:5d:d3:5f:a5:af:
fd:68:1b:3f:52:df:69:d9:6f:38:12:e6:21:00:11:d4:aa:73:
03:66:6f:cf:3b:f0:74:30:7d:72:84:4c:cb:42:26:ad:cb:89:
19:55:14:ab:bb:b0:64:20:42:0e:1d:c1:4d:f4:45:ec:91:53:
61:f5:1a:3c:fe:4d:c1:95:05:9c:dc:a1:04:69:c5:dc:53:e6:
66:17:f1:ff:56:05:de:87:09:55:1f:73:01:04:75:fe:e5:d0:
32:d5:f2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:17 2025 by rpki-client