Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: jniSqow1GmqGqcAyeCgndXwlkls6GDI1pnXrw83tCvE=
Subject key identifier: 7C:18:F9:AA:89:2E:4E:65:90:87:31:21:87:31:FC:87:AC:F0:8A:36
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 01990DBBD1BDBE9ABF490273726FC0FBF876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 0CFE
Signing time: Wed 03 Sep 2025 04:00:36 +0000
Manifest this update: Wed 03 Sep 2025 04:00:36 +0000
Manifest next update: Thu 04 Sep 2025 04:00:36 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: 9fS5oTgWuZ0zCRwT7Ox2632Wr/dD+TYyQWB5KAKHESE=)
2: mKsKKQCdLodyBncOeNIhWtaYAoQ.roa (hash: fizUUsz/TAb+LHuegB83yr/hnzwxKplkZhpso2ufXV4=)
3: xfMF5Mt4jBFimRoPjDOTrOYZb_c.roa (hash: GuaLpdFfqfVEq3DS5+BP2JqM2gB3tItjQlR22xolKBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Sep 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0d:bb:d1:bd:be:9a:bf:49:02:73:72:6f:c0:fb:f8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Sep 3 04:00:36 2025 GMT
Not After : Sep 4 04:00:36 2025 GMT
Subject: CN=7c18f9aa892e4e65908731218731fc87acf08a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f2:74:94:4d:c1:de:33:71:ad:1a:c4:35:e8:
49:7e:cf:f7:1f:29:ea:6c:f3:0b:85:2a:94:73:4b:
e4:15:1b:5b:4e:d2:b2:58:a4:f9:14:87:59:61:0d:
dd:a8:2d:06:b3:ce:fe:ec:ce:84:26:8d:3a:ee:de:
1d:69:6e:ce:f0:a7:0a:c5:50:46:15:a1:f0:4d:90:
8f:27:50:89:52:1e:17:57:c3:bd:0d:4e:7f:06:1f:
f9:56:ea:2a:d1:3a:a0:b9:1f:4c:1a:10:a1:b8:65:
56:87:02:24:d4:e2:10:19:71:1c:e9:b1:ee:89:88:
c3:a0:03:6e:82:07:04:70:b5:ea:d5:8b:b2:cb:13:
7f:f6:f2:06:7f:b2:cb:a2:2e:61:5c:e3:09:7b:f0:
01:70:18:e7:51:63:c8:f3:76:05:91:3f:55:53:6b:
ca:7a:0b:85:51:3d:70:85:21:73:b0:c8:25:86:76:
36:5d:f0:4f:3a:d7:04:2b:13:cf:9f:b9:64:d5:90:
a0:07:e3:88:f3:81:70:77:d9:9d:7a:e6:96:02:5b:
80:86:ca:c6:c5:08:63:b5:7b:b5:7d:54:2b:3f:97:
06:87:47:dc:32:2b:74:cb:e1:98:6d:9b:90:35:db:
7b:7c:39:2e:f0:bc:f0:58:57:ca:9b:6c:18:d8:6c:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:18:F9:AA:89:2E:4E:65:90:87:31:21:87:31:FC:87:AC:F0:8A:36
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e1:49:5f:16:4a:f3:25:93:8b:22:6d:73:e8:17:82:80:13:
2d:18:70:ef:3f:7b:69:23:eb:db:75:bb:3c:0d:0d:4a:ca:ff:
34:b0:f9:2d:44:9c:f9:82:ee:e7:2c:e9:59:20:6e:12:94:88:
dd:f4:7d:da:0f:bf:b8:fa:43:5c:e0:42:42:bc:6c:6c:25:c4:
a5:e8:ef:70:47:78:09:a2:25:f3:e0:fd:d8:23:b5:b3:0d:7e:
11:86:bd:87:cd:3a:28:6a:7b:96:0f:b2:3b:f4:69:1f:85:4b:
44:34:12:68:83:8f:7a:2e:65:27:26:ea:a0:a7:c2:b5:d7:04:
ba:2e:52:72:0a:c1:26:71:d2:a8:ad:36:8e:b1:f1:6a:ec:ba:
f9:17:4e:f5:51:85:c8:1a:39:07:a5:c3:19:c0:e3:5b:e5:81:
c6:a5:eb:42:6b:8d:fa:25:a8:54:ff:11:ac:86:56:f7:fd:68:
a1:88:3d:49:9a:12:62:34:20:b0:e7:20:7e:99:cb:15:66:90:
cb:e9:bf:69:69:d7:10:7f:f2:eb:0a:d0:d4:f5:d0:48:27:b7:
fc:02:f5:15:2a:70:09:90:76:92:7a:a9:c2:bd:e1:09:4b:20:
b6:dc:2d:88:5d:86:f1:6f:32:ea:30:64:8f:cb:a5:ee:94:48:
dc:11:91:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 06:40:14 2025 by rpki-client