Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
File: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json)
Hash identifier: cMsYAFhIhkener0zPP4ihXgkgB6QIzIAYq1TjrKMvDY=
Subject key identifier: 9E:A3:47:95:F2:7B:DA:B8:20:FF:5D:ED:4A:E1:20:C7:FE:60:1C:C7
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 0199221E97711593B9EC6A7389ED9AC3B0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
Manifest number: 0EF8
Signing time: Sun 07 Sep 2025 03:00:53 +0000
Manifest this update: Sun 07 Sep 2025 03:00:53 +0000
Manifest next update: Mon 08 Sep 2025 03:00:53 +0000
Files and hashes: 1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: 5uOXHA0wQiK6tG3H7lUybJ3jQP/+/UsAztMGYv/7l5o=)
2: xEogw3XOMF8942N9C953fQ9p_WQ.roa (hash: gm/zrEw7lZ+SPbWVu4mrs06eSMAYkDfSw1DjLnUzlh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:97:71:15:93:b9:ec:6a:73:89:ed:9a:c3:b0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: Sep 7 03:00:53 2025 GMT
Not After : Sep 8 03:00:53 2025 GMT
Subject: CN=9ea34795f27bdab820ff5ded4ae120c7fe601cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:39:5c:cf:eb:8a:c6:60:b3:5e:94:b2:da:
ea:b4:ef:53:5f:46:ad:33:e4:e0:60:22:af:40:d1:
39:1c:77:84:40:95:53:2b:f0:a0:b5:b6:0a:05:1c:
19:7f:61:a2:ce:4a:ee:67:be:c7:b7:5d:db:16:85:
fa:4e:53:b4:5c:5c:2d:e1:1a:ab:ed:e5:72:94:6b:
c3:61:be:a2:64:4a:59:64:f9:a6:04:01:8d:d4:aa:
23:d0:20:fd:f6:82:32:fb:c8:eb:23:c8:66:14:77:
39:17:fd:72:93:b7:fb:5d:3c:e3:26:be:31:4a:01:
24:0e:44:79:a7:3d:bf:7c:cc:72:d8:ad:ed:f8:4b:
ca:14:42:e6:0e:e2:16:29:a9:25:85:74:6c:e5:a9:
4c:f4:c2:47:52:a1:20:7e:1e:65:0e:bb:4e:24:f7:
da:ee:ff:57:2f:26:6a:ca:3c:a0:f4:f6:97:3c:3e:
8f:62:9f:6e:94:2a:8b:65:1c:c0:16:3d:af:df:91:
ee:86:c3:b3:72:dc:8b:14:a4:39:f2:b3:42:06:a6:
61:3c:ad:81:8c:12:84:f8:9b:db:48:06:4d:01:84:
52:a9:46:e4:5f:b6:a3:6f:1e:50:17:c8:ec:d5:77:
99:26:45:75:53:d7:ac:64:cc:4f:78:57:7b:1a:67:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A3:47:95:F2:7B:DA:B8:20:FF:5D:ED:4A:E1:20:C7:FE:60:1C:C7
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:14:c4:56:d1:70:c6:ef:a4:38:a2:f6:2c:62:6b:4f:0b:63:
be:6d:93:1d:70:e9:39:b5:4a:ba:0e:ae:f7:a7:d9:f3:45:5f:
1f:aa:45:7f:c7:93:f8:86:0f:74:09:c1:60:e7:05:d6:26:a6:
1e:3c:6a:ac:27:dd:4c:ab:bd:c5:42:00:5e:6d:72:42:ba:c7:
b1:9d:77:57:ad:fe:11:4a:a9:a8:f1:de:c8:88:71:cf:e2:84:
ea:f6:ff:d9:1b:6d:9b:04:a0:88:9b:47:9d:a6:26:ee:33:00:
c7:f8:98:4f:2a:46:3d:49:25:8d:9f:d1:fb:3c:66:cb:70:a7:
f7:0d:22:47:5e:6f:cb:7a:04:3e:b1:18:f5:e4:5e:7a:9f:a2:
40:85:d9:e3:39:29:78:f1:bd:67:3e:39:ba:6e:80:7c:2d:a7:
d1:11:8c:bc:6e:4a:a2:5e:d3:e4:84:92:10:4c:d6:03:e3:5b:
14:93:26:d1:13:1b:c8:3c:89:1f:84:3f:dc:af:46:47:c5:a1:
2f:d5:08:94:00:d2:5e:e6:b6:5b:c0:ca:6a:ed:d8:40:9a:15:
56:48:73:8d:cc:57:49:25:13:16:52:2e:b4:92:14:73:e2:d7:
b2:e6:a3:bc:5c:b5:0e:f1:57:5b:17:04:d9:f8:a6:fd:60:4e:
ac:38:df:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:40:00 2025 by rpki-client