Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: DQr90O7DqWyFrT/patWL8uaeOLCLVLkm7yXbcTSE9qQ=
Subject key identifier: E1:8F:26:18:EA:56:6D:95:80:91:4D:F8:AD:83:35:8C:ED:36:E2:C1
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 019921E7E61413E9B3A5ED98F00EE4D5B45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0B97
Signing time: Sun 07 Sep 2025 02:01:09 +0000
Manifest this update: Sun 07 Sep 2025 02:01:09 +0000
Manifest next update: Mon 08 Sep 2025 02:01:09 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: k/eRLqwz4zPIvF7bmrfgLqND/k1Wvgnnjg3ad1eydx8=)
2: GTryjErQ-QvKOHELwraRwqDQoQ4.roa (hash: GN3kBbzA5jk8ZVZGy0p/hEuJ6JzyB6iMj6OE8Sf6qCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:e6:14:13:e9:b3:a5:ed:98:f0:0e:e4:d5:b4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Sep 7 02:01:09 2025 GMT
Not After : Sep 8 02:01:09 2025 GMT
Subject: CN=e18f2618ea566d9580914df8ad83358ced36e2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:43:8d:b2:ce:0b:1f:62:93:eb:fe:fe:d1:a5:
24:15:a6:97:91:22:84:6f:42:e4:0a:7e:62:c5:c1:
5e:bb:e6:0a:68:c3:26:18:41:eb:c6:5d:9e:dc:b5:
3e:52:fc:d9:ba:5c:e9:fa:0e:73:df:fc:86:27:32:
c1:73:56:5c:31:f0:6c:80:25:a5:f5:dc:1a:d4:6d:
19:80:b7:09:96:e1:55:f8:84:20:0e:94:e0:27:90:
81:d8:f3:c6:72:73:bb:ed:0c:4d:36:93:c0:c9:a6:
14:aa:7b:c0:92:c9:a0:85:f4:7b:e8:4f:05:f4:57:
e6:06:05:ac:56:32:84:d4:94:50:b4:cb:8d:d1:a6:
38:3a:40:99:b0:ed:75:e1:6f:a8:f9:2f:80:09:f6:
92:37:74:0d:38:3d:e8:59:ec:79:47:a6:31:95:7a:
96:75:98:74:70:9b:14:dc:ee:d0:c1:3a:10:ed:a9:
42:ae:d5:d7:6f:17:af:30:09:5c:85:88:6b:a8:df:
b6:b2:99:54:c5:e1:03:fc:2a:62:fb:57:c9:9d:e9:
53:60:25:6d:88:e2:86:0d:be:17:46:e7:46:4e:a9:
fa:17:df:01:b3:60:cf:9f:7d:d9:b5:04:04:f7:f8:
c5:c5:bf:89:46:44:43:8e:8c:30:09:5e:f6:51:9e:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8F:26:18:EA:56:6D:95:80:91:4D:F8:AD:83:35:8C:ED:36:E2:C1
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:68:5a:8e:c1:a5:39:a5:17:15:b1:c6:77:68:88:64:96:be:
e5:7b:2e:f2:37:c6:80:51:12:66:6a:a9:cf:77:bd:62:e9:8d:
ac:24:21:65:82:48:5c:06:37:b3:92:04:8a:55:e6:2c:47:8c:
ca:1c:4a:5e:15:8c:38:19:92:38:e7:98:9d:36:4b:5f:4e:bf:
9e:24:81:a4:c8:92:1e:0b:69:3f:10:bc:42:f1:bf:31:3a:2f:
81:eb:43:b6:bd:2d:0d:b4:5c:70:97:52:a7:6f:4a:13:44:17:
b6:eb:95:f4:6b:89:f8:d5:ad:a6:e2:31:35:f7:34:81:3a:f7:
e7:82:f5:ae:14:27:1e:90:12:95:02:02:b9:08:c4:a8:74:cd:
ee:ec:76:51:e1:5b:af:d1:ad:09:96:55:40:a5:fa:41:19:c6:
62:bd:ff:7d:a5:f8:51:42:e4:ad:80:3c:53:b0:ff:8b:2f:7b:
34:c5:4d:95:05:60:e3:d1:55:a8:42:e7:d9:8d:15:e9:db:c2:
dc:e4:1d:40:c6:19:30:88:36:5f:da:0f:0c:ab:8e:67:7d:72:
19:ce:49:ea:e6:18:2a:db:4d:b2:7f:e2:b2:53:84:6e:eb:46:
16:51:25:eb:cf:d5:cf:fa:73:51:78:2e:56:cc:d8:7c:e9:85:
d3:c2:9e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:14:57 2025 by rpki-client