Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: na/y9uoC2m6EqeH0PkqPtgUjyGyD15Qp7RwQvumiZBM=
Subject key identifier: 60:E0:E6:E1:F2:D8:AD:54:5B:0B:25:38:09:E4:5A:AB:EC:6E:08:72
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 019922C35B8B122DA5F509329A313768DF6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 06:00:52 +0000
Manifest this update: Sun 07 Sep 2025 06:00:52 +0000
Manifest next update: Mon 08 Sep 2025 06:00:52 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: eNnRvX82iCOohj33kYRcv62fFMi1ZJXg+NtbidZq0Ow=)
2: gyBGqWNKS8K0vTNBAA3GKNL77Vo.roa (hash: BXXbMCiaPDwWpKluJbMJNiQFpxOCWm/ZXx0AVN6V8Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:5b:8b:12:2d:a5:f5:09:32:9a:31:37:68:df:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Sep 7 06:00:52 2025 GMT
Not After : Sep 8 06:00:52 2025 GMT
Subject: CN=60e0e6e1f2d8ad545b0b253809e45aabec6e0872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:10:33:98:74:c1:12:52:7c:fc:be:33:43:
38:a5:52:94:5e:5c:96:3d:8e:de:4e:97:0d:a5:04:
d9:29:3d:12:19:ce:31:e8:2f:15:04:e5:f4:5f:ff:
3e:2e:52:91:3a:95:c2:4a:0d:a6:ea:ed:fc:d1:07:
4e:0f:39:60:07:41:ca:b4:bb:57:43:1f:2c:49:41:
1b:f5:1a:ef:68:bb:c3:d8:4d:e2:5e:7d:5a:b6:e3:
91:d7:f0:62:1a:98:ac:a6:8d:e3:5c:9f:69:62:cb:
98:bd:e0:f8:c4:74:3d:05:a2:f6:41:e6:f1:0d:e9:
01:06:49:28:79:02:aa:28:22:8c:71:3b:47:4d:49:
1e:be:90:1b:f2:ae:cf:5f:68:e7:7d:29:76:58:92:
49:db:99:fe:3e:68:96:fe:08:20:07:ff:89:26:1a:
f3:84:c3:5c:4c:e9:fe:85:35:8f:ed:cc:4a:02:14:
50:8a:36:65:50:34:6c:3e:25:a0:71:f6:32:85:a3:
f0:c5:4d:14:2d:53:30:a6:9e:bf:53:aa:5b:12:cb:
ff:e9:58:a3:1a:d4:81:a5:b0:a6:0d:9e:a1:58:56:
43:68:dd:ca:d9:a0:01:cb:71:98:8f:fa:34:8d:71:
b7:ed:51:52:5d:b6:f7:5d:a9:c5:9e:95:f8:5c:53:
17:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E0:E6:E1:F2:D8:AD:54:5B:0B:25:38:09:E4:5A:AB:EC:6E:08:72
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:77:ef:cb:f4:c2:ea:91:3c:a2:66:3d:b1:84:81:40:d0:74:
7d:8b:d0:78:35:de:aa:5b:7f:3e:c9:54:d6:85:e8:89:e5:df:
da:c7:cb:42:33:4e:bd:2e:35:1b:de:b8:6b:10:08:ca:40:63:
c3:92:4f:86:1c:4e:c1:e6:0b:29:07:9e:bd:ea:16:90:42:45:
45:10:21:71:57:8e:45:81:bc:65:f7:86:cf:cb:e5:75:01:8e:
d0:0d:9e:26:05:f6:05:bc:c3:61:e7:71:66:b7:3e:94:92:36:
91:b4:8f:6b:18:37:da:ba:cf:16:d0:20:6a:b3:55:11:a4:42:
13:bc:af:87:98:f9:ff:9a:5b:7e:c1:49:4d:40:41:33:5d:b0:
62:4d:0b:ed:91:1c:73:4c:3b:56:cc:a0:cf:c8:9f:47:55:70:
c3:53:63:59:6d:cd:0f:b2:0a:d4:07:9d:08:f0:c6:b0:62:19:
b1:1f:ac:60:13:24:90:ba:89:88:cb:be:48:49:52:4e:74:10:
bf:04:65:77:10:68:b2:1f:31:b6:88:2c:9b:4f:9c:41:f4:03:
95:60:31:b0:66:1a:7e:b2:85:52:49:1f:fe:b0:83:e3:82:f2:
7e:bb:53:9e:71:db:f0:f4:29:28:86:fa:d3:ad:11:39:35:b3:
99:c6:af:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:03 2025 by rpki-client