Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: 5bgUyFFaXswbFzCsdgkwfphCLuNWQE3PKtVLu5GzTK8=
Subject key identifier: DC:11:82:FF:74:B6:CA:5F:E9:68:CF:D5:F1:51:B9:0C:D7:0B:8C:6D
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 0198C9ED42CF337E285DE7DB6C9B4F08EF15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 1642
Signing time: Thu 21 Aug 2025 00:00:26 +0000
Manifest this update: Thu 21 Aug 2025 00:00:26 +0000
Manifest next update: Fri 22 Aug 2025 00:00:26 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: yZlmxmwyEdXQGnPZolyid9HjE+xGV7IYg8XMONhhscQ=)
2: 5395RGU-O7_Y-Wk8o5ckF03TEl8.roa (hash: 2x9LkbbQVmDZR4+CDqZEC8HuaScYKr9cs6YHpuOZlvY=)
3: JRT-ehjK87EWSX2wN_VxdPNgZVU.roa (hash: FFbMq3Jl0t/JwkKVVNHldSFfVrz4m+b2CW8bGskb98A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:ed:42:cf:33:7e:28:5d:e7:db:6c:9b:4f:08:ef:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Aug 21 00:00:26 2025 GMT
Not After : Aug 22 00:00:26 2025 GMT
Subject: CN=dc1182ff74b6ca5fe968cfd5f151b90cd70b8c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:ea:2c:1b:ac:49:d9:31:c8:a5:6c:b1:f7:
e3:9a:f2:a9:0c:42:79:3c:ae:98:94:a1:dd:90:ba:
5c:66:10:13:5d:6a:6c:4d:71:ae:11:5a:3c:65:96:
72:9a:2e:ef:15:84:42:b3:3e:eb:1e:4f:c3:c6:3b:
10:ac:ed:f9:04:94:cb:bc:ae:7b:81:5b:19:1a:72:
1e:a4:bc:d7:45:3e:1f:57:be:d0:d4:91:48:82:97:
ec:ba:06:9d:82:71:bf:ab:2c:54:bc:a5:60:9c:de:
bb:46:aa:20:44:a8:c2:c7:53:27:f5:98:33:1e:0a:
96:f1:ed:9c:66:b0:b1:be:82:9d:b2:5b:ed:51:d1:
ef:e9:03:85:5f:46:c0:00:fa:c3:ab:dc:a3:a3:0b:
70:19:c3:9a:d4:3c:2f:76:e6:1e:b4:49:e0:12:87:
d9:39:38:3a:83:fb:7c:a8:de:35:35:8a:57:11:b4:
d6:bb:ba:fb:7f:6a:8b:ca:16:ac:7c:c4:7a:01:6c:
ca:b2:cc:52:4f:96:a7:42:96:73:c0:ce:00:b8:1a:
06:0a:94:09:c1:08:ea:3c:b9:63:76:62:90:7d:36:
a0:5d:4a:40:10:3b:0f:96:1f:bd:f7:e3:11:3b:e0:
45:20:fa:c2:0c:fc:27:a9:23:f1:95:ec:e2:02:bc:
13:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:11:82:FF:74:B6:CA:5F:E9:68:CF:D5:F1:51:B9:0C:D7:0B:8C:6D
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1d:a5:0b:b0:d8:00:34:1f:c2:ca:8c:4d:73:65:92:19:a0:
f5:60:04:fc:93:b5:dd:c5:35:4d:c2:31:ed:a8:7a:01:19:18:
0b:a6:74:14:a7:3c:f0:e7:ba:5a:74:16:dd:ee:50:4a:e1:db:
e8:d2:66:73:ca:c2:08:7b:bc:de:48:44:67:54:57:3e:90:f4:
ae:6f:e4:0e:97:7a:3f:86:79:39:64:93:a8:34:c0:a3:c3:8d:
f8:4e:bf:97:b5:54:c6:95:8d:8f:19:a6:27:19:e6:3c:4f:cb:
f1:45:1f:1a:c3:95:01:bf:4d:20:d5:4d:ff:8e:27:01:46:94:
9c:ca:ee:68:71:86:20:e6:ff:cb:fe:77:d3:73:89:c3:a9:66:
71:7f:8e:55:26:c1:ad:81:9e:d4:6f:b1:20:da:02:b2:b6:20:
6f:fc:ff:65:15:06:62:6b:30:03:79:a9:01:65:e2:19:45:fc:
1b:d3:8f:69:b6:5f:7e:82:0b:67:d6:31:b8:5a:91:df:60:f7:
96:00:96:a2:76:9e:ea:e8:36:55:70:94:18:02:3c:4b:da:6b:
b6:bc:9c:89:32:19:f5:a3:6c:8c:93:a4:10:ba:a2:0f:43:81:
f9:aa:25:ce:d2:57:4d:58:f5:ec:ba:fc:a9:c6:6a:67:9a:55:
e7:e6:77:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:19:34 2025 by rpki-client