Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
File: 3L-wBIqNpVb9nT3xB3QC-EP11wM.mft (raw, json)
Hash identifier: x2Jss8j+Jm9lwEMsR3KLhPwZA5UXHBIL6A9b/yhri3o=
Subject key identifier: 88:92:E9:79:00:57:8B:25:34:E0:D1:68:7E:BC:EC:47:DF:CD:06:3F
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 01993191BDD2D9426A796DE9F548967CE07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 03:00:58 +0000
Manifest this update: Wed 10 Sep 2025 03:00:58 +0000
Manifest next update: Thu 11 Sep 2025 03:00:58 +0000
Files and hashes: 1: 3L-wBIqNpVb9nT3xB3QC-EP11wM.crl (hash: fsiT0Xqa53FG0p622A/hThPNHV01WyZ2zhMsg7qu7Po=)
2: Do4PLeA5o1GoY13K0QrZV2b74eA.roa (hash: B+FCeD+X05tR69YheF7VQWedc1p5umVaXn20qWaAN1Q=)
3: hbNbIVCjEN8lItMWW7GZDYik4tU.roa (hash: /QjTSPpaK1t0LSYMylHsSi3d6TtpowMr+RmtBrzOYQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:bd:d2:d9:42:6a:79:6d:e9:f5:48:96:7c:e0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Sep 10 03:00:58 2025 GMT
Not After : Sep 11 03:00:58 2025 GMT
Subject: CN=8892e97900578b2534e0d1687ebcec47dfcd063f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:b5:2a:3d:d1:23:9a:a0:73:5f:d2:3a:fd:
79:e0:d0:90:6d:ee:ce:08:c5:c7:c7:f9:7f:c7:21:
8a:fe:dd:45:38:87:27:68:6b:08:c7:20:e5:4a:f0:
9f:dd:ab:df:a1:11:cf:90:39:4e:1a:28:86:8c:dc:
12:4f:7a:ce:93:da:c6:6f:c6:45:63:1b:cb:f1:32:
dd:a7:3f:82:a1:29:b2:ee:6c:7d:80:06:cf:3a:df:
55:b0:c8:b2:54:85:fe:ed:4e:d1:11:fc:9d:27:48:
e3:ec:16:71:bd:4c:5e:f3:fe:61:b6:49:1f:61:1c:
ba:71:f7:6b:cb:da:db:a4:81:31:92:d3:06:ff:2f:
62:d3:f9:58:87:68:96:c6:0b:4e:4d:80:84:8a:4a:
8c:53:16:03:b0:6d:fb:78:7d:40:31:4a:99:36:5d:
23:b4:e4:bc:b0:f4:fe:d0:93:e7:05:e1:9b:ab:41:
e1:89:46:4b:84:03:53:d2:b9:81:3c:3a:bb:c4:c9:
ac:fd:41:e9:84:72:1e:22:74:db:b2:87:3b:e8:16:
6a:f9:6b:f9:31:fd:3d:b2:55:f3:19:5e:10:3c:06:
72:7b:eb:cf:71:d0:33:dd:04:7d:0e:de:9d:d6:b8:
c9:cc:dd:e0:6b:2d:63:20:d9:d4:78:73:f6:e7:42:
a5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:92:E9:79:00:57:8B:25:34:E0:D1:68:7E:BC:EC:47:DF:CD:06:3F
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:71:ed:10:67:a9:c8:03:bc:29:69:a2:35:ee:6e:be:f2:01:
21:ab:a3:61:11:ec:37:14:17:d9:b4:e3:b6:46:73:35:de:90:
1c:4f:0d:5b:50:11:2e:6f:75:7c:7e:90:e6:95:79:ae:97:b3:
a0:18:7d:05:dd:43:47:c4:be:0a:df:1e:0d:6b:02:0c:3b:3b:
ea:fc:a3:68:05:f2:75:3d:78:2a:ad:f2:e8:75:f2:f0:15:c8:
c7:ea:b7:32:de:32:11:19:a8:78:8e:91:7d:71:b1:44:a9:f9:
61:08:f4:fc:e4:b3:b3:bc:42:26:fd:41:7f:ae:de:b2:2d:36:
a8:23:50:6a:36:c9:aa:f4:29:41:27:d8:ba:d8:d7:b8:38:8b:
30:3d:0b:9d:65:61:20:f6:0b:d1:08:98:b8:99:bf:f7:82:44:
03:1b:3b:43:cc:19:78:d1:60:6c:37:24:4e:db:1c:b4:83:37:
ba:d1:27:8b:67:18:d5:83:2b:f0:44:d9:03:09:97:f1:67:ff:
26:b1:17:18:3c:08:09:82:62:3d:f7:bf:85:2e:91:07:e4:0f:
3a:2d:26:64:fe:fc:11:68:64:a9:f2:12:8f:13:d2:7a:c5:52:
60:2d:d1:44:fc:d2:7f:cd:3e:cc:e4:47:62:b4:a1:40:a2:7b:
e8:e6:d2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:49:24 2025 by rpki-client