Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: jYD7owqOQZVComAaSRYYpq/lbTaAC3tWxe4efUNqBeI=
Subject key identifier: B6:71:9F:53:9F:B4:0D:A9:72:E8:A0:FD:57:75:A9:B5:47:3A:9E:47
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 0199221E6D36DACA6DEA45E7BD65FE2D2CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 1025
Signing time: Sun 07 Sep 2025 03:00:43 +0000
Manifest this update: Sun 07 Sep 2025 03:00:43 +0000
Manifest next update: Mon 08 Sep 2025 03:00:43 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: hIzVc90sbMae0kc3J7iVOFHW4k0+5XPZWOalAiGmdwg=)
2: c9o5omZ6L0iy-4hOihQzK8OPns4.roa (hash: 1kJZAp6d0yNMzeCujPn+gVtlVbLTFpBiKQFw2wsKEIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:6d:36:da:ca:6d:ea:45:e7:bd:65:fe:2d:2c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Sep 7 03:00:43 2025 GMT
Not After : Sep 8 03:00:43 2025 GMT
Subject: CN=b6719f539fb40da972e8a0fd5775a9b5473a9e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:99:ad:60:4c:54:59:61:19:85:9b:3c:de:82:
76:35:51:d1:cb:69:56:a4:bc:8d:aa:a7:54:ca:74:
29:3a:9e:4d:5c:34:ce:75:29:e1:f6:cc:8c:87:a4:
cb:66:f0:66:7e:92:7a:62:c9:1c:b2:49:8a:0b:3c:
df:8c:62:91:b4:7f:03:3d:00:58:5f:55:66:dc:34:
3b:98:d0:8d:47:3e:04:f0:cd:f2:e4:53:3e:d6:fb:
f3:47:d7:4f:55:76:eb:72:c7:57:4f:3d:63:f6:ad:
cf:42:01:f0:ed:c6:5b:c2:3b:47:40:93:bf:16:21:
e2:96:24:2e:cc:16:20:44:37:cb:64:ae:ac:35:1e:
2b:62:99:7b:e7:3f:c3:5d:9a:e7:43:0c:3f:5c:93:
68:1b:12:cc:81:4c:4a:69:13:c5:68:cc:cb:7b:a6:
b4:55:bd:ea:80:ec:3b:6e:26:e4:ab:93:14:6f:ca:
0f:49:e4:84:50:58:b1:27:25:5f:81:55:d6:6c:68:
f7:65:0e:81:58:32:ce:bf:e2:e5:a9:8b:1a:1b:eb:
fb:e5:53:1b:08:07:ea:b8:d7:f2:0c:4a:07:8c:f2:
ca:dd:7b:ce:23:df:f9:86:fd:57:57:50:7f:04:5d:
6d:15:e6:4c:d5:d2:1b:94:f9:aa:f3:af:ee:50:95:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:71:9F:53:9F:B4:0D:A9:72:E8:A0:FD:57:75:A9:B5:47:3A:9E:47
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9a:3e:8d:88:8c:b3:40:ca:13:84:f2:32:59:09:2b:0d:3b:
07:0c:69:ba:27:20:fe:4e:8b:da:11:29:b5:53:a7:fe:81:46:
27:7d:c3:b8:a4:23:14:ef:99:a9:2c:c1:15:30:62:5c:57:26:
18:29:38:cb:d9:fb:00:70:21:0a:c5:81:c2:ad:2d:a2:fd:50:
b6:b1:2f:49:5e:1c:28:1e:ad:72:c1:c8:f4:5a:7b:4f:0d:c5:
61:e2:a8:82:dc:ae:5f:92:fa:84:52:22:cb:cd:81:f6:aa:47:
56:3e:4e:26:1a:ad:9a:7f:dd:a1:71:2e:00:5d:fe:37:69:03:
68:05:2a:b0:be:9b:43:73:57:b7:95:09:0f:39:12:dd:6f:29:
2a:fe:e5:d6:a6:c8:86:aa:d7:60:e3:bd:5f:41:d1:43:be:0e:
16:f5:0f:2a:f2:e1:45:e2:c8:88:31:c0:09:c1:ad:11:18:30:
8d:ed:77:09:94:7f:1a:6b:79:65:96:47:5c:05:1b:31:f9:a4:
70:51:9d:97:25:a9:ca:1c:a8:e8:c6:1a:c3:38:76:79:f5:72:
0e:ee:62:d1:cf:23:13:9e:e5:31:cb:c6:2a:af:2e:aa:e4:56:
47:a5:07:c3:dc:0c:47:1a:ea:14:18:65:7a:4c:66:d4:d0:87:
25:ee:8c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:22 2025 by rpki-client