Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
File: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft (raw, json)
Hash identifier: 97uq4PpSLfWHJ2MF9bqDS4/4WlfTXWI8j2HaFwsKwJ0=
Subject key identifier: 3E:83:24:E4:A3:5F:55:74:67:B6:5D:8C:17:93:DE:57:BF:5B:46:1C
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Certificate issuer: /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial: 0198C9498D4D0E3E4CB9CF934E89C31A622A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
Manifest number: 0EC4
Signing time: Wed 20 Aug 2025 21:01:37 +0000
Manifest this update: Wed 20 Aug 2025 21:01:37 +0000
Manifest next update: Thu 21 Aug 2025 21:01:37 +0000
Files and hashes: 1: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl (hash: xy1uyowJC7SjXuxC7Uoi04G51kOEfsL+a6lG8mH2kiM=)
2: Kw550ydpOki0PWOYy-6z5BR-VIE.roa (hash: DJKKlAPQ1FQMVESwtaTdBMt71sNwkspOh/dlMgsjkTY=)
3: fcEpjbgKYOO71SWou3_dCE-kLKk.roa (hash: zROet63WRPPKV6TiwIGdua33aTn4W6zOjjUbs9hhWRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:49:8d:4d:0e:3e:4c:b9:cf:93:4e:89:c3:1a:62:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Validity
Not Before: Aug 20 21:01:37 2025 GMT
Not After : Aug 21 21:01:37 2025 GMT
Subject: CN=3e8324e4a35f557467b65d8c1793de57bf5b461c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c3:14:e8:82:76:f8:1b:5b:d4:11:1a:a9:7b:
57:c4:55:60:af:32:41:a6:ea:a0:9e:e8:bf:a2:31:
82:fb:92:6d:89:41:9c:63:c0:bd:8d:fd:d7:0c:aa:
74:8e:b5:e4:9c:6c:a4:04:01:f6:1f:89:69:72:3b:
75:04:26:67:4f:3f:8d:68:e9:da:81:f0:d3:dc:84:
84:f8:cf:ad:29:16:6d:e2:00:05:1e:51:cc:99:31:
51:4f:c9:64:5d:fc:3a:65:ce:37:9d:f7:71:c8:a1:
5b:02:62:4d:c0:08:7f:64:ba:02:a7:f3:f7:70:ab:
c8:31:13:fa:d5:70:f6:8c:f2:ed:25:ac:45:cb:cb:
d3:51:8f:64:a9:ca:dd:86:e2:41:f1:c9:4f:0e:52:
17:62:09:07:29:cb:5f:2c:85:3b:24:b2:13:37:d4:
a1:dd:b1:5c:ce:d4:bf:00:55:31:4c:08:ab:3f:bb:
7c:c1:76:8a:54:79:7a:18:11:b5:e6:68:47:0b:1c:
c1:2b:15:2f:1d:22:3f:2c:b3:c3:06:85:3d:86:2b:
e2:b5:8f:3b:22:6b:c7:bb:29:64:ca:fd:f8:25:52:
10:d0:1c:d7:86:09:e7:2b:d7:23:13:0d:cd:3a:84:
ea:c3:bf:f1:f1:4d:21:6d:23:c8:e3:d6:ef:91:e0:
48:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:83:24:E4:A3:5F:55:74:67:B6:5D:8C:17:93:DE:57:BF:5B:46:1C
X509v3 Authority Key Identifier:
keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:81:74:0a:8a:2a:c3:f1:05:75:77:5d:c4:07:ed:52:66:d5:
de:64:bf:2e:ed:6c:11:43:b9:5f:1c:97:4c:66:03:45:fa:35:
4f:15:2b:46:2d:6c:6d:24:e1:69:f7:75:9c:4f:0b:30:2f:a5:
c1:89:5b:74:5a:21:6a:bd:68:9c:61:3a:b0:79:b9:14:a2:6c:
46:97:dc:cd:af:99:fe:44:6a:c8:93:00:63:fd:c0:85:ba:63:
a2:ff:34:0a:2d:78:e1:28:06:d3:29:55:ff:3b:85:f8:4f:66:
85:57:14:a7:82:0d:1c:04:dc:e7:f7:d9:a4:9d:e1:88:8f:b5:
ad:9c:a4:c8:62:ae:3e:1e:96:a7:a3:54:05:24:bf:40:2f:ac:
a8:50:3b:35:2d:19:14:11:15:92:c6:38:84:d4:a8:e7:01:a2:
00:e2:ba:4f:98:d0:31:46:1c:74:43:4d:6f:18:31:75:53:51:
22:19:31:0c:f3:8a:9c:96:5e:26:d4:f2:d2:7a:e0:af:70:34:
d1:e0:5c:f2:9c:0f:27:6c:36:db:7a:0a:d1:ec:9e:f8:62:d6:
db:ac:67:29:7f:ae:00:29:95:22:79:f9:26:1f:ba:92:92:83:
e8:95:3e:29:fd:d9:7c:cc:de:7b:3c:86:39:c8:da:0a:8d:f7:
95:07:6e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 06:08:36 2025 by rpki-client