Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier: 5bGeEyD5f8hhbCMVwAvSYCVJCoO2tVVUQi9LMGMpJZk=
Subject key identifier: 12:0F:60:20:0D:A7:50:83:0F:E8:0E:76:49:C2:2C:A3:A0:0D:12:43
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial: 01992F3606D7642BF972489E9850B170291C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number: 0612
Signing time: Tue 09 Sep 2025 16:01:33 +0000
Manifest this update: Tue 09 Sep 2025 16:01:33 +0000
Manifest next update: Wed 10 Sep 2025 16:01:33 +0000
Files and hashes: 1: 5Glc2B08f5NNNCUv9fqw3ZiV604.roa (hash: qKV0O/uQL4URhMfYX9S0ZOufXlqcIe3xRJXIrY3RJwE=)
2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: 98BYkmyYUghlmXGArrsS2GQRnolGPS6PKvoJXjs7j+M=)
3: wzyOntPyHe2_vob8ftvNa_NHz8Q.roa (hash: jsopFRalC2C1iJbieVLkelaTdE/c46JWYuJBBa2M4iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:36:06:d7:64:2b:f9:72:48:9e:98:50:b1:70:29:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Validity
Not Before: Sep 9 16:01:33 2025 GMT
Not After : Sep 10 16:01:33 2025 GMT
Subject: CN=120f60200da750830fe80e7649c22ca3a00d1243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:dc:b8:28:fd:19:0c:cd:b1:6d:08:13:1f:
30:1f:70:41:ed:7b:2b:55:04:1b:26:12:3b:9f:42:
b8:5f:6a:55:af:94:e0:ab:fe:23:85:56:fb:89:dc:
26:e1:20:04:04:99:b5:17:85:5f:77:2e:4b:10:74:
e4:b6:24:4f:a0:7c:24:2f:c0:83:0d:6f:42:a5:45:
48:46:75:57:b9:7b:a2:1e:53:71:3c:6d:78:00:60:
e1:61:87:01:7b:c0:45:19:a4:cb:93:9d:0a:20:d9:
03:38:0f:20:60:c9:b5:cd:ae:c5:37:b6:b9:1d:68:
f5:84:02:50:30:4c:93:42:78:f4:13:63:38:11:a1:
1f:1d:52:4a:77:a3:62:0d:35:0f:bb:90:61:a3:62:
cb:d5:88:b8:e5:3a:a3:a2:4d:e8:83:c5:6d:0d:2e:
d7:62:9f:8b:18:5f:ee:6b:61:fa:90:c5:f6:6f:56:
62:4a:9d:7c:66:9a:f1:5d:7c:9f:2c:c9:a1:a7:03:
ff:67:18:e1:66:ab:40:45:db:23:ce:23:1a:fc:97:
48:d5:7e:00:b8:f2:3a:01:9c:54:2c:57:3e:02:77:
79:24:7c:11:6b:1c:2f:2a:b1:f5:8e:02:48:50:54:
2c:e0:7a:4f:2c:fb:7d:09:d3:25:f4:53:98:05:69:
7f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0F:60:20:0D:A7:50:83:0F:E8:0E:76:49:C2:2C:A3:A0:0D:12:43
X509v3 Authority Key Identifier:
keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ba:85:d1:91:e0:ea:66:f8:6a:a5:95:0c:58:06:e4:f4:7b:
46:4c:78:a0:9e:9f:2c:94:70:a5:1b:92:f6:fa:9f:f3:ba:c2:
3d:70:67:0f:6f:db:a5:95:a1:ac:2d:d2:f4:33:11:4e:f5:f7:
84:0d:29:2c:e0:a6:ad:f1:89:bd:86:10:d0:5c:df:f0:55:a8:
86:6e:17:c0:84:3d:23:65:e1:c4:5b:bf:c3:cd:be:6c:69:2e:
77:cc:19:44:da:ad:10:97:06:c6:ce:d9:1b:02:a8:f4:63:09:
3b:03:4b:cc:63:e2:62:77:1c:17:9d:92:e9:5a:41:33:0d:c1:
c3:e3:02:bc:82:07:e6:73:bc:11:ae:2a:17:50:8a:aa:6a:3a:
85:f9:0a:2b:02:6b:60:ad:5d:f3:6e:81:0e:a4:ff:e0:05:e7:
a2:14:2e:30:84:03:10:b2:7f:76:78:66:d2:ad:25:40:c6:5d:
90:51:3b:38:f5:0d:b6:4c:f6:8f:da:09:44:57:09:93:f6:69:
47:1d:d8:3d:ec:f9:aa:85:9e:74:6a:91:b2:eb:86:d0:0b:f7:
8a:59:65:4e:c0:41:ae:8c:4a:b4:39:74:e7:0c:52:2f:50:ac:
9b:1a:13:9a:15:45:23:de:74:eb:82:7b:23:71:c7:32:16:42:
09:94:9e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 01:06:01 2025 by rpki-client