Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
File: 3-ytVuquEjX6eI5OrTkiwpbig6U.mft (raw, json)
Hash identifier: weBq6NWJ4ZclapYr8j4IQM4Z9yOmWjFDBM+TtBNarG0=
Subject key identifier: A9:50:80:1B:2E:3E:20:93:30:69:4A:A9:E3:D8:BA:FC:EB:47:57:8F
Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
Certificate issuer: /CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Certificate serial: 019931FF8DCFFA57CFE67D43B516522F76C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
Manifest number: 01B2
Signing time: Wed 10 Sep 2025 05:00:55 +0000
Manifest this update: Wed 10 Sep 2025 05:00:55 +0000
Manifest next update: Thu 11 Sep 2025 05:00:55 +0000
Files and hashes: 1: 3-ytVuquEjX6eI5OrTkiwpbig6U.crl (hash: s5hD7K/2//NTwExdXazAPwDkEVRS6Ens9BJIG5UxwQ0=)
2: ghemx7_KeR2Mo7Zd7b3Yw7Rm5m0.roa (hash: dfuZiKRSGnfBsJSrGQVK/jOI9vvcNJZDWJg5sUNCJuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:8d:cf:fa:57:cf:e6:7d:43:b5:16:52:2f:76:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Validity
Not Before: Sep 10 05:00:55 2025 GMT
Not After : Sep 11 05:00:55 2025 GMT
Subject: CN=a950801b2e3e209330694aa9e3d8bafceb47578f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:23:55:a4:f1:15:48:dc:bc:bc:01:b2:56:
a8:98:bb:c1:64:aa:d6:4f:96:02:7f:5a:a7:ef:71:
ef:1f:5a:ee:b5:8d:8e:db:9c:e8:7e:b6:2f:f3:04:
35:fd:3b:44:f8:8b:93:93:81:b8:75:ba:0d:8f:7e:
65:a2:26:05:04:93:e3:d4:e8:f3:91:f7:6a:c2:b1:
2f:3c:54:af:5b:25:53:2f:3e:4a:f4:60:c1:30:e8:
11:66:ef:de:3f:3e:8a:3f:fd:2d:a3:a7:99:b0:ef:
30:85:55:15:a2:01:6d:de:7b:fe:6c:0a:00:0e:05:
05:dc:0d:15:ec:92:4f:e6:8a:69:13:6d:a5:ee:73:
bc:35:c0:2e:d2:f6:fa:9d:06:b4:17:cd:f8:1e:6f:
d1:a9:25:df:f5:14:8b:88:82:cc:bb:87:ce:a1:f3:
58:a8:c6:ec:25:d1:88:60:b2:4c:90:6e:c2:cd:dc:
f8:b5:8e:98:c2:d4:c7:8c:94:5a:65:bf:d8:db:39:
bb:da:af:f2:7f:05:bd:a0:26:88:dc:57:bb:66:c9:
2a:ba:f5:f0:98:a1:55:1a:b5:88:8b:69:ec:d2:9b:
cd:62:6d:3e:f7:b4:e0:f3:8d:ec:78:d0:db:57:4b:
77:81:ce:3e:cc:0e:7f:0e:a5:58:3c:cb:72:f5:67:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:50:80:1B:2E:3E:20:93:30:69:4A:A9:E3:D8:BA:FC:EB:47:57:8F
X509v3 Authority Key Identifier:
keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:19:17:9c:c0:d7:32:6d:0d:e2:a6:a2:a4:0d:ac:8e:6c:e9:
74:2a:ba:a1:a7:7b:26:ce:96:72:0a:04:9a:b9:1c:33:72:7a:
0a:d5:f2:9e:48:b8:50:63:67:31:5a:40:ef:41:c2:b1:9e:9d:
ba:d0:ed:72:59:30:ae:78:ec:b2:85:25:04:a0:ac:bb:71:c5:
b5:f2:56:bf:96:45:4a:05:70:2f:df:a5:13:56:49:69:f8:57:
72:68:5b:64:c3:a4:4d:13:df:5a:b6:7f:42:fd:cb:11:65:d9:
0d:b3:b4:91:95:46:f0:ad:04:25:51:b4:94:c7:ad:2c:b2:fb:
cd:e5:39:70:21:f3:fc:3d:04:d7:c5:65:27:b5:d5:b4:fc:69:
ac:d8:f7:10:fb:5b:a8:68:74:07:6c:bd:7c:b5:91:49:4a:bf:
a8:a5:64:f2:26:07:09:62:1f:1a:08:30:9e:d9:e6:12:af:5f:
72:7c:c2:b2:9b:5d:d4:f7:e8:b6:42:52:ca:95:a2:0f:0c:bc:
a8:18:72:b9:a3:b5:6e:c2:54:82:27:a0:0c:28:71:4f:08:bf:
69:70:61:b0:15:d5:44:fe:69:04:6f:a4:77:21:fe:75:26:26:
fd:e9:ff:93:a1:6f:f5:59:f5:14:42:88:84:cd:ea:3c:96:1b:
0b:98:c3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:35:04 2025 by rpki-client