Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
File: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft (raw, json)
Hash identifier: 4RNlrhIwopzUZucF7tjqA/vBxnQvruanr0/S64QWnhw=
Subject key identifier: F0:8A:39:89:7A:29:A9:CB:9A:DB:C6:99:07:31:CA:C5:78:B3:7B:72
Authority key identifier: DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
Certificate issuer: /CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Certificate serial: 0198E1F70A7AC5648B431B6A767EF8AE0A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
Manifest number: 130B
Signing time: Mon 25 Aug 2025 16:02:00 +0000
Manifest this update: Mon 25 Aug 2025 16:02:00 +0000
Manifest next update: Tue 26 Aug 2025 16:02:00 +0000
Files and hashes: 1: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl (hash: CFXmDuIX32be3MNa/fl/c5+1DNYrlu86mcVtTtbyzVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Aug 2025 14:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e1:f7:0a:7a:c5:64:8b:43:1b:6a:76:7e:f8:ae:0a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Validity
Not Before: Aug 25 16:02:00 2025 GMT
Not After : Aug 26 16:02:00 2025 GMT
Subject: CN=f08a39897a29a9cb9adbc6990731cac578b37b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:86:52:9c:08:b1:29:a1:22:f8:60:d1:49:77:
d4:ba:20:f0:e4:fc:ee:5e:bc:a4:a6:c5:a9:aa:1a:
5b:6f:3f:57:ef:31:59:3d:fd:4f:39:eb:99:89:2b:
d5:c3:04:81:0a:6d:3b:b4:7a:22:0d:c4:be:f1:6b:
a7:13:ed:b5:ea:1a:a2:a6:cf:b7:ed:99:aa:d7:a2:
98:c8:41:a3:28:c6:65:0f:42:2e:e6:e5:44:46:af:
eb:85:a1:18:13:fd:06:c4:22:88:44:91:fc:d4:28:
26:87:2a:96:89:fe:6b:03:fa:a2:9f:4d:d4:8c:eb:
77:7f:d1:03:58:29:cd:66:31:8a:24:d9:19:4f:82:
21:7f:14:1c:d4:ec:b1:43:ac:d8:7c:cf:d7:9e:6d:
a6:cf:0c:5d:c5:55:17:5e:c0:54:85:b9:fc:74:9a:
34:ec:c2:01:bc:64:8d:9d:f8:0e:27:9a:a0:ff:28:
5f:6b:cf:9a:2c:b9:64:a4:c9:55:9c:d8:50:83:66:
95:8e:88:82:14:bf:13:ce:9e:65:35:81:48:57:c4:
9b:4c:25:a3:b4:82:78:a9:46:83:f9:9f:b8:89:c1:
f9:27:d8:3e:33:82:7e:47:06:23:dd:a5:5f:07:b8:
86:15:cf:80:80:9c:c7:5f:a8:5a:b1:4a:78:44:8f:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8A:39:89:7A:29:A9:CB:9A:DB:C6:99:07:31:CA:C5:78:B3:7B:72
X509v3 Authority Key Identifier:
keyid:DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:c0:0f:99:bf:6c:01:52:75:f4:c7:e8:6f:03:d7:75:42:20:
04:a1:1c:9a:2b:40:15:34:e0:6a:e9:04:70:a6:3e:11:b3:27:
85:67:49:f4:ec:37:e5:2c:e0:45:3c:2b:67:02:23:b9:a8:72:
85:97:b4:8b:00:c3:f5:71:d7:61:23:a1:71:1f:00:23:a6:f3:
97:92:06:d8:eb:b6:d4:8a:59:db:1c:cb:d5:4b:b8:fa:e5:69:
c2:b2:fe:3a:13:5a:c9:9e:b9:4f:9a:3a:46:99:f8:80:c1:d0:
35:34:75:90:88:fa:26:d6:25:c5:92:16:8d:92:a7:66:8f:32:
14:aa:e8:bc:f1:84:f7:36:f8:87:8a:3b:69:fd:e5:47:41:de:
d5:a0:2d:90:d4:3c:86:ee:a4:4c:21:35:fe:8a:33:a2:39:a2:
83:89:ab:d8:a6:a8:ed:a2:e3:69:08:96:fb:b8:76:4b:a9:99:
25:d8:90:10:dd:61:fa:0f:76:d1:06:81:6d:9c:12:90:1d:1a:
32:b2:e0:9e:89:06:e4:e5:2b:69:de:ed:59:6f:35:ba:35:54:
d7:64:2b:0f:87:c7:4d:50:fb:c5:43:d7:4c:00:dd:5b:8a:a9:
bc:37:01:2f:11:88:73:30:41:47:b5:0d:90:fb:92:8c:ac:84:
0f:36:e4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 00:15:31 2025 by rpki-client