Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
File: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft (raw, json)
Hash identifier: VPUN+o0zLAdK5uuu3+mhHHPA5piYqkK/ITDFguBoQfY=
Subject key identifier: 49:79:29:62:08:C7:BD:0D:C2:7D:16:9D:3E:3B:43:46:DF:6F:15:75
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial: 0198C72489B924F290EB634647ED2895C03D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
Manifest number: 1468
Signing time: Wed 20 Aug 2025 11:01:57 +0000
Manifest this update: Wed 20 Aug 2025 11:01:57 +0000
Manifest next update: Thu 21 Aug 2025 11:01:57 +0000
Files and hashes: 1: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl (hash: xO3Xr9/I6r0J5Qjr4E5/l+gsvzQTwe7g7+QLx2/KUWI=)
2: 7iR9W4MA5fEoG9NRWf9E-32Ma5Q.roa (hash: osSdmDl/G/dF/W3n4ltU1jPl+UamVuVRPceUmIJCb+c=)
3: _WS_KUWo5VlHoso4BGtRKVhHyHo.roa (hash: EHMdLaq+K6Q6inb3xq+fso0i3zQ47TR+r4l4lfO+5pU=)
4: lwrL3dIIXO_mCBQdap7KZ_iDBFc.roa (hash: F6VpIkHy8PT/lwz9faa43UWmWxDgyYUpuXzG7yHnlKI=)
5: uLirnnwX72a0N3OriOBn_DEyQSk.roa (hash: 6+Yqbp1RGXrWNzgrWITGoM7VyJxkBiJJi44XDI1jM7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:24:89:b9:24:f2:90:eb:63:46:47:ed:28:95:c0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
Validity
Not Before: Aug 20 11:01:57 2025 GMT
Not After : Aug 21 11:01:57 2025 GMT
Subject: CN=4979296208c7bd0dc27d169d3e3b4346df6f1575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:31:41:72:5f:c4:bf:85:4f:d2:49:67:9f:
5c:e6:77:68:f7:7a:ab:17:cf:7f:da:f8:44:6b:da:
60:fe:87:b5:90:c2:f7:d9:99:9c:60:13:73:5b:a1:
e5:59:14:b5:1f:78:72:93:f6:04:d4:5c:6c:e9:ce:
74:fd:15:6a:fb:7e:02:3e:2c:20:6b:84:cf:c0:f8:
ec:d9:44:2f:ee:33:ab:64:0b:b5:39:21:61:76:73:
ac:89:8b:b5:bd:51:31:b7:a0:ed:4c:38:15:6a:c2:
21:c8:02:72:61:f7:0c:0c:29:fb:2c:aa:7c:dc:ba:
0b:f8:bf:43:9c:68:5b:a4:cc:7f:66:12:d5:7f:27:
b0:ed:08:29:fe:67:4b:12:85:14:4b:6b:84:c9:ec:
d7:e0:43:3d:ac:4c:d8:90:e4:80:73:e6:25:f4:15:
cc:e5:45:6d:a1:a4:e1:95:77:46:4f:2c:3d:41:ef:
b7:cf:aa:88:cd:fa:50:fa:41:c3:98:ce:7d:1e:46:
d2:ab:43:e4:66:55:70:18:e9:06:73:c6:c2:f7:15:
cb:9c:38:f8:ee:0c:f5:83:99:6d:b4:42:df:ab:b6:
fd:26:b6:6b:d8:1e:cc:05:5d:cd:7b:3c:03:a9:9a:
65:a9:d5:df:b4:f0:35:d9:80:f8:f7:55:a0:c5:2a:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:79:29:62:08:C7:BD:0D:C2:7D:16:9D:3E:3B:43:46:DF:6F:15:75
X509v3 Authority Key Identifier:
keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ef:41:67:b0:89:ca:8e:d4:2c:8a:b7:e2:95:ef:96:62:ca:
1e:e3:02:f2:d0:a5:66:57:3c:64:e9:39:c6:41:37:88:09:5a:
c1:01:a8:44:e3:17:57:79:7e:f7:62:02:fe:b9:81:e4:46:72:
71:61:9b:b6:d0:bf:35:a2:4a:ab:6e:a6:c0:9b:46:27:38:08:
b3:6b:8b:8a:49:79:ad:fd:62:16:3d:84:6d:89:e4:a3:1f:5f:
0e:0a:21:bc:48:4f:0c:4e:ef:02:fe:fe:0d:49:a7:59:bd:8d:
96:7d:11:56:66:37:05:7c:03:a2:59:8b:b9:24:d5:0f:f1:4c:
16:28:fc:33:e0:bd:f8:ac:cd:d5:7a:e2:c1:dd:58:14:66:7a:
cb:17:cf:c3:ee:33:cc:8f:c7:95:a5:ca:6d:a3:55:e1:3f:a6:
8e:fb:6b:3d:e4:a4:4c:38:ba:d1:e8:4b:bf:c8:f7:24:72:82:
ca:11:0a:c4:54:b0:7e:4a:96:da:eb:b5:3e:4c:3d:41:20:f0:
5f:22:e1:fd:21:be:b2:0e:5f:79:4c:3f:33:57:25:5f:b7:39:
21:8a:35:40:9f:08:02:45:f0:a4:ba:65:4a:9f:9d:97:52:5b:
c6:ad:d4:9d:de:d3:e7:10:50:49:cc:e3:1d:06:f0:da:f2:25:
57:cf:c1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:38:55 2025 by rpki-client