Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
File: 3MIAShrwMLqZ_PRR872I78U4Rqk.mft (raw, json)
Hash identifier: /EjxrEgg3L7S6vnAS59m+53qMk/hEOnYZ4qtiuRAZrI=
Subject key identifier: 09:C4:74:8C:58:B0:72:18:FC:FC:2F:85:00:E8:C0:BA:68:3D:78:B5
Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
Certificate issuer: /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Certificate serial: 0198E1F716873628845BBE67D5DB0191C7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
Manifest number: 1650
Signing time: Mon 25 Aug 2025 16:02:03 +0000
Manifest this update: Mon 25 Aug 2025 16:02:03 +0000
Manifest next update: Tue 26 Aug 2025 16:02:03 +0000
Files and hashes: 1: 3MIAShrwMLqZ_PRR872I78U4Rqk.crl (hash: 7I28mCwujUxBsbvNEpqCoeReAkF1PQf7oZhbTP1oOUg=)
2: AL-L8asVgI-s4USXW1Jxulz_8Sg.roa (hash: UF0FyApaz9L8VccFK4e4NgnphNtboD57IyF8hP0doDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Aug 2025 14:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e1:f7:16:87:36:28:84:5b:be:67:d5:db:01:91:c7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Validity
Not Before: Aug 25 16:02:03 2025 GMT
Not After : Aug 26 16:02:03 2025 GMT
Subject: CN=09c4748c58b07218fcfc2f8500e8c0ba683d78b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:06:f0:28:a5:60:63:17:9f:61:fd:7c:e2:
d7:fa:80:fc:e8:50:ab:bb:ef:74:58:be:c9:84:1c:
f1:62:52:06:91:91:53:e3:13:f9:32:ce:9d:cd:c4:
52:ac:70:75:1e:5e:79:a7:07:03:ab:8c:e1:2b:94:
36:ca:a8:32:47:21:8b:a3:14:99:94:be:be:79:d0:
db:45:a3:01:6e:eb:e7:be:23:49:a4:f0:be:89:50:
86:52:78:36:7d:1a:9b:60:b9:78:a3:6f:08:cc:6b:
b6:cc:5f:45:6d:09:2a:32:f9:a0:da:55:12:72:d9:
19:e1:13:cf:66:0c:2d:65:49:40:79:90:1d:73:be:
2f:62:0c:e3:9f:23:c2:ec:f6:32:7f:1c:1f:36:c6:
02:81:fe:fc:a3:ea:cb:3c:f3:90:e2:c8:eb:a9:75:
db:27:7a:47:ee:2a:32:e7:ff:0f:2e:8e:3a:d6:ef:
bc:6f:01:3d:51:0f:ce:bf:ab:8e:cf:ba:0a:bd:84:
e6:3f:66:40:c6:51:a8:d5:2c:5f:ac:e9:8d:2f:9b:
9b:7c:98:83:f4:20:1a:a6:90:9a:dc:a4:6a:16:e9:
b5:61:f8:3b:16:69:45:e5:66:41:8e:c6:6a:55:e7:
78:03:4a:b8:b1:f1:ea:80:5e:20:71:b1:6e:0b:bf:
cd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C4:74:8C:58:B0:72:18:FC:FC:2F:85:00:E8:C0:BA:68:3D:78:B5
X509v3 Authority Key Identifier:
keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d6:4e:a9:82:f0:a1:83:40:97:89:85:39:66:aa:db:0b:57:
48:01:2a:40:36:09:78:c4:85:0a:34:8c:fc:ce:ce:a7:83:9e:
36:43:6f:d4:9f:f8:59:0b:88:fb:4d:1c:03:53:89:15:22:e8:
1e:c8:78:a1:6b:05:20:ab:09:95:d6:5a:f4:04:2a:08:5e:0e:
fe:ca:77:a2:f7:a6:a4:bf:9e:25:fc:8d:3b:61:15:a4:47:e7:
ed:33:41:f0:4c:8f:52:20:12:ef:b8:be:fd:9f:47:f4:12:a6:
cb:00:9e:cb:ee:b4:20:e1:6f:6d:24:9b:d5:24:8f:de:40:72:
a1:27:e1:ad:03:4f:56:b5:d7:48:14:07:9d:7f:86:00:8b:90:
cf:28:af:85:fd:19:0c:50:15:d4:e3:4e:41:49:cd:ab:69:c1:
fc:98:5b:5a:b2:61:ec:c2:a7:50:97:0f:25:46:9c:cc:bc:3d:
1c:b3:6a:e4:16:87:18:39:72:25:a5:26:31:b2:a6:44:6a:c5:
6d:6e:8f:07:29:66:a4:6e:5a:5a:fb:20:e6:8f:56:93:c2:24:
54:6d:94:ee:64:85:e9:aa:17:d3:3f:cd:1d:03:31:42:03:a6:
6d:ac:d1:9b:0f:c9:d7:55:f1:f0:9b:2d:e2:29:79:56:ed:f1:
e6:55:be:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 23:17:58 2025 by rpki-client