Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: 0MY7jvU9PFrB8DHbLyeh/xDO3qrBEhBy0vEhYoZ30UQ=
Subject key identifier: CA:10:D7:91:FD:A0:35:5E:17:FC:72:93:20:34:CA:63:97:1A:8D:07
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 019926A064C754DF8E96154C90DFC61BBC45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 167C
Signing time: Mon 08 Sep 2025 00:01:09 +0000
Manifest this update: Mon 08 Sep 2025 00:01:09 +0000
Manifest next update: Tue 09 Sep 2025 00:01:09 +0000
Files and hashes: 1: 1-r8ngTnAMIWnigi3kZKRlPxzAEg.roa (hash: 4upInjfh8BMDhZW1GMRFLRcUKFy4sgss61UjVbuCcN4=)
2: 3bHFI98fNrO-AI7iYMdoY6Cy4Ec.roa (hash: jNavEGcWKNfNKB84/MmKoUJXT5oHj4PAQhOkM5ErTv4=)
3: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: BJ0QnonncJLLcxx/6gyoVE35fTbQvFBfZNn3+PCHNds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:a0:64:c7:54:df:8e:96:15:4c:90:df:c6:1b:bc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Sep 8 00:01:09 2025 GMT
Not After : Sep 9 00:01:09 2025 GMT
Subject: CN=ca10d791fda0355e17fc72932034ca63971a8d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:20:84:3d:4a:06:23:be:55:4b:d2:8f:9e:
d9:6b:49:dd:8e:51:c0:f3:27:b4:4d:fb:dc:c8:0a:
39:14:63:3b:d5:30:3e:d8:42:41:7b:99:44:a1:ba:
a8:33:f6:9a:e9:3b:94:d1:8d:04:b9:29:cb:46:b4:
7a:9e:5b:c7:70:1a:e4:40:dc:b5:df:3c:97:4c:96:
ed:db:49:a3:cd:8f:e8:57:23:40:ff:f9:8f:3e:fb:
64:88:95:28:39:61:ac:2d:85:d5:96:c8:2f:14:35:
8e:38:6f:dc:18:b6:0e:63:95:03:ea:75:09:80:9f:
da:6d:9f:39:42:73:56:52:d4:eb:c6:5e:76:1d:cf:
13:46:d6:c9:72:08:97:5b:05:c3:09:4b:69:66:85:
ff:9f:d8:9f:d5:2c:61:4e:b7:41:5f:80:25:2d:c7:
07:45:6f:34:d4:20:20:2c:c6:a0:c7:4f:c8:04:3c:
43:52:a8:df:d2:54:2d:e8:f8:1c:06:c9:db:c1:ad:
bc:a5:ea:b8:6f:b8:bf:d5:fb:8e:96:d7:22:2a:19:
b9:43:31:a1:34:12:31:94:04:c7:eb:23:90:49:72:
08:a9:89:c2:bd:b3:b1:d7:88:e0:56:ca:ba:d8:29:
42:1c:a3:8e:61:fb:c9:c1:7b:a9:9f:d0:a5:fd:ef:
fe:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:10:D7:91:FD:A0:35:5E:17:FC:72:93:20:34:CA:63:97:1A:8D:07
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b5:e4:8f:9f:90:19:85:e6:15:4a:56:a1:aa:2d:a6:d4:69:
ff:6d:24:d6:31:df:80:90:50:f7:a7:84:f0:45:5c:53:b0:1e:
dd:12:91:b9:cb:f1:61:b4:8d:3e:e8:67:bb:f4:a7:51:03:7c:
1e:06:b9:d2:1a:70:81:da:b4:68:d1:f7:29:78:6e:63:ed:60:
29:a1:c7:80:d0:48:71:93:73:1c:c2:cc:e9:ed:5c:78:bf:df:
67:9d:c2:50:14:75:2f:a7:bf:a8:76:12:45:d0:f4:d6:bf:1e:
1c:7f:90:a1:e6:12:37:fe:ac:62:cf:d1:ee:7c:07:2b:4d:86:
69:c2:a3:54:a0:ae:50:33:a2:ce:84:8b:e1:b0:0a:c0:94:4c:
54:58:a0:9d:ab:c6:44:43:28:e8:64:f5:1d:a2:68:67:26:d8:
2c:8c:f2:cd:18:8d:0e:ac:f3:e4:a2:e0:3b:06:4a:98:be:30:
a4:06:1e:c7:7d:65:e5:71:17:6e:06:4f:78:8e:02:99:79:23:
69:7a:1e:27:5b:ce:0c:d8:18:8e:ce:23:20:34:50:88:45:62:
7a:dd:9c:e0:21:2b:39:fe:26:aa:57:8b:73:44:28:47:3a:da:
9a:91:05:25:e3:42:72:aa:a0:c6:ec:e1:88:04:fc:9b:b0:a8:
48:16:e3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 07:28:48 2025 by rpki-client