Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: K2wd4MpTtSZBxNj896wJ43ZgYRiee8jn7ew3dPN9PEY=
Subject key identifier: 9A:7D:4B:32:1D:56:C8:31:80:1F:EB:C9:68:89:6F:3F:DE:1B:70:DB
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 01992D47077346CC9A71458693C13E5059CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 0D0B
Signing time: Tue 09 Sep 2025 07:00:53 +0000
Manifest this update: Tue 09 Sep 2025 07:00:53 +0000
Manifest next update: Wed 10 Sep 2025 07:00:53 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: UjLQhfSAPUvw/L4oEMD+VbwnQqqytU+VS/3nP5cq2KY=)
2: 8miIDeBQxB0aKJY-TlsIuuJ2hww.roa (hash: mQmM8Cjnfx5WSvhPSj11m+hm6JvBiNUtIRExWbof9J8=)
3: IRGnT1eQmUBmgR6_xtusELr-83s.roa (hash: dJ3+bDwzY4UO43kbNXGDeFrUEwRtOB0R3J1TQjuxqCQ=)
4: aw3P8V17V992wZUulFnFkkVrMmo.roa (hash: O9AIELr13JUWTjKqPnJ8lbjYgl5+VRQqDU69j3HTMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:47:07:73:46:cc:9a:71:45:86:93:c1:3e:50:59:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Sep 9 07:00:53 2025 GMT
Not After : Sep 10 07:00:53 2025 GMT
Subject: CN=9a7d4b321d56c831801febc968896f3fde1b70db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:d7:bc:67:c3:bb:c5:ba:13:5b:6a:a3:b4:
16:c6:fa:3f:d5:21:83:b5:e7:67:9d:38:91:36:12:
02:c7:93:8d:a1:b7:12:f2:0b:35:7f:8c:a0:ff:95:
98:e6:2d:a3:71:d5:1d:38:64:d5:a4:8d:d6:ef:9e:
cc:84:8d:23:e0:77:4a:fb:fd:79:40:d3:f5:28:c4:
3c:ca:8e:81:c9:c0:95:d4:ae:71:d5:25:33:7f:4d:
59:6c:1c:0e:9b:88:c5:e0:b9:01:4d:0a:ad:9c:07:
9a:51:60:69:59:7c:a2:c7:eb:17:f6:9e:b3:84:5e:
90:d8:44:80:fd:f4:01:f1:20:d8:19:44:83:0f:19:
cb:ea:b2:f8:f4:bd:05:04:cc:44:3a:54:2d:40:32:
c0:5a:08:9f:3d:b1:5c:8c:7e:22:7e:b7:e9:d9:fe:
30:f3:0a:62:7e:f6:ff:03:8e:40:b7:77:b0:d9:64:
12:c7:d6:45:8e:1e:3e:b2:45:da:b5:90:ca:fa:47:
bc:2b:06:5d:33:1d:6e:8e:ee:3c:76:1e:7f:fa:5d:
78:d7:a9:80:13:24:58:be:1b:cc:70:8a:20:9e:ea:
10:e0:64:53:79:96:5f:4b:d3:d4:e5:7e:3d:52:ef:
79:f1:69:11:d6:55:41:e0:8a:f4:bf:46:c2:a8:fd:
1c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7D:4B:32:1D:56:C8:31:80:1F:EB:C9:68:89:6F:3F:DE:1B:70:DB
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2d:09:3a:e0:ee:c8:fb:81:3f:7c:ff:27:40:19:8d:5f:b4:
7e:e3:94:a2:de:0f:80:a2:74:2e:e6:29:e5:f5:49:05:fd:4b:
0d:01:c7:f7:8b:17:42:a5:de:da:c7:e1:90:3a:d8:f2:ce:e6:
b2:c6:b3:e8:5d:fa:f9:76:e8:70:ab:72:5b:fa:29:26:74:68:
53:bc:8f:b2:0a:d8:10:b2:7e:b9:ed:7e:02:ee:9a:c2:54:76:
66:42:1d:15:bd:18:1b:27:a1:31:5d:73:ca:56:66:5b:53:f8:
eb:22:fd:91:d1:3d:18:46:d0:ca:92:2b:8b:0f:52:cb:2c:4e:
35:1a:c1:b2:b8:4d:d6:b7:d1:fc:b1:07:03:2b:34:d5:70:ea:
bb:72:e5:c9:38:f9:ac:e7:96:2f:f1:7f:fa:31:7c:26:40:a5:
12:1c:60:d0:64:48:e5:e4:73:fe:c3:8e:0f:97:49:55:16:02:
a0:f8:fe:45:fc:bb:6d:5f:ea:71:8f:e1:94:8b:56:4e:96:eb:
38:ad:d1:19:17:c2:98:1c:96:2d:21:4a:47:55:d2:26:48:8c:
38:73:88:bb:a9:26:e9:bc:f2:3c:62:66:49:23:8a:0b:80:ed:
ec:bd:9e:c5:09:21:92:87:a8:73:08:98:0e:d6:91:3d:da:25:
bd:e1:76:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:15:43 2025 by rpki-client