Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: YT0DUV8bHMpayyN1M8vJZdoA4PAFJg3h59kjpyEY/dc=
Subject key identifier: AD:C4:55:90:C8:F3:14:79:30:40:81:2F:36:84:37:E5:92:E2:30:26
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 0198C5DB5F0F4FF53F71C2C5F34BCD65ECC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 0F84
Signing time: Wed 20 Aug 2025 05:02:24 +0000
Manifest this update: Wed 20 Aug 2025 05:02:24 +0000
Manifest next update: Thu 21 Aug 2025 05:02:24 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: eG9t4E9quYtFmEo+mQFjCIkS+DgTAE57ynDriTraTQU=)
2: GJgS7xgFqg_T1Brv5T3Z3VSHSQs.roa (hash: qcKfQ/V3fbXzE7gbTkc10cKeggN9uhLupcmee0zeuj8=)
3: gDn1RHCMxQyNW_pGfUDeAoFsteY.roa (hash: aOveJJ3ah1WLjPcvfI87OOrTavXERjpgS9XWi0GEgq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 05:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:db:5f:0f:4f:f5:3f:71:c2:c5:f3:4b:cd:65:ec:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Aug 20 05:02:24 2025 GMT
Not After : Aug 21 05:02:24 2025 GMT
Subject: CN=adc45590c8f314793040812f368437e592e23026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:04:ea:45:8a:a8:5d:58:20:55:da:f3:a8:5a:
48:c9:a3:3e:6d:0e:0f:45:63:fc:10:01:45:f9:d3:
26:ea:28:df:46:c9:43:3d:21:68:b1:dc:45:57:3f:
c0:e2:f1:4e:bf:43:cf:e1:47:36:4e:0c:96:56:e5:
96:e2:1a:37:01:61:db:c9:94:2f:ae:a1:f1:ad:df:
4c:8c:34:f9:c6:c5:ec:bb:c3:37:b4:0e:1b:be:69:
1f:25:19:f8:b2:19:b5:65:d4:1f:02:3e:db:6e:71:
76:04:28:13:70:d5:f5:9b:f3:cc:2c:4c:2e:43:80:
f2:ec:b9:fa:2f:92:4f:9a:25:26:08:e9:9a:4f:94:
1e:a9:32:3d:aa:5e:06:44:4d:39:b0:9b:33:a7:20:
48:58:84:c6:17:6c:f4:43:44:8c:0f:57:7b:1e:4e:
29:4e:3c:47:d8:84:ca:6c:57:40:35:12:c9:05:c2:
de:47:3e:34:04:6a:fa:c2:7b:b4:7d:57:a9:03:bc:
d2:c5:ed:4e:27:c6:37:51:b6:29:d8:26:59:e0:3e:
f5:59:aa:f3:3b:d5:5d:49:6d:86:79:40:0e:a7:9f:
6e:26:db:b8:46:33:0f:3a:94:90:ea:55:e8:52:7f:
fd:76:f6:21:5e:8f:3f:85:9a:f3:d2:9a:a8:a2:0f:
d5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C4:55:90:C8:F3:14:79:30:40:81:2F:36:84:37:E5:92:E2:30:26
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:44:14:ed:f1:0b:ce:b6:7c:ab:4e:88:de:09:b7:4f:64:ab:
f8:ae:6b:c3:80:cb:ee:75:b7:0b:5b:a6:42:42:26:b7:9a:d8:
a7:34:41:b3:46:92:36:06:2e:14:15:ad:cc:6f:9f:24:f7:f1:
a9:46:48:b4:f3:d8:cf:d7:f7:5d:6f:62:0f:ab:79:2e:30:3d:
53:9b:93:a0:82:a5:cc:aa:65:ff:1d:86:af:bd:70:af:a3:ab:
a9:2c:e4:38:b3:13:fc:fa:47:4c:96:42:54:57:e9:0d:77:79:
d6:2a:9b:77:ba:46:8c:79:7f:50:97:08:7d:a3:89:c2:2c:7d:
e0:f9:b8:bf:ae:f6:8a:35:27:6d:9c:1c:a0:5f:4b:81:ee:e1:
ca:e1:cc:09:70:71:5d:91:e7:9a:36:e2:39:a0:4b:38:43:f9:
f6:5c:01:36:73:c2:7c:7c:52:1a:f1:ef:33:89:33:fd:2e:b8:
4d:8c:36:7c:d5:6c:4b:16:86:53:3b:92:24:1f:da:16:51:f7:
36:ed:a9:17:c6:2d:22:cb:e7:28:18:c0:05:b3:de:f8:fb:07:
f1:fb:c0:53:b8:c9:37:8f:bd:fe:21:c6:9e:30:a2:9b:00:da:
68:a1:38:3e:da:c5:fc:f0:d3:bf:8e:92:40:a9:40:e3:a0:6a:
78:c6:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:40:53 2025 by rpki-client