Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
File: 3ofTW9yrEjr_wakdFzaGeWlwmiM.mft (raw, json)
Hash identifier: k71klW2Pks2srsWZIS27NHXROwMmJFjpDZ+DM1w7Y+8=
Subject key identifier: 10:41:BE:86:35:40:17:8D:0E:97:A7:7B:34:7C:13:C8:AC:DE:7E:DE
Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
Certificate issuer: /CN=de87d35bdcab123affc1a91d1736867969709a23
Certificate serial: 0199239F3382352667B5FF66971452AC4570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
Manifest number: 0DBE
Signing time: Sun 07 Sep 2025 10:00:59 +0000
Manifest this update: Sun 07 Sep 2025 10:00:59 +0000
Manifest next update: Mon 08 Sep 2025 10:00:59 +0000
Files and hashes: 1: 3ofTW9yrEjr_wakdFzaGeWlwmiM.crl (hash: aTVbMWwqbXpoMKj4w8RytvYBt+uUbUWlf8AQCPGbRaY=)
2: 6QLt8gn6308YVRHTv77skONgyv0.roa (hash: WOVtEt3WWdPmMOLnSpBdtQecprDqkDjMDowLpoTrLSs=)
3: BlrozZPONvKYEp2UEAlnW_YzHI4.roa (hash: L9GHrxzoIcunUF/HHDD1IUg78PGRjvbme0vJn+zzCvE=)
4: CyRu--zwDhYd5zhamEbAkFcQBvQ.roa (hash: sO2VoYkxgTRufknOOSGAsTFVUrBvzkN0qo3ZnwDHlpE=)
5: m2FaQjqwdirKnIXjWYvZqBXz6X8.roa (hash: T2eJCXBDxAgsoT/g2qbdU7r93yFYU14KBtRd6n9GR68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:33:82:35:26:67:b5:ff:66:97:14:52:ac:45:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23
Validity
Not Before: Sep 7 10:00:59 2025 GMT
Not After : Sep 8 10:00:59 2025 GMT
Subject: CN=1041be863540178d0e97a77b347c13c8acde7ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3b:36:ca:ef:a3:53:19:15:cd:cd:e5:b0:71:
2d:10:58:90:e4:4c:a6:d5:da:29:a0:9d:c1:d5:d1:
e6:70:a9:a2:67:20:ea:a4:3f:fc:95:03:2d:26:32:
a1:62:2a:e9:02:65:21:2e:c8:8d:bf:e0:0e:bc:48:
58:6e:f8:ce:50:e5:98:70:a4:c2:68:b5:3c:14:f5:
b6:d2:e1:35:05:13:68:58:b7:77:e1:b7:78:25:20:
3e:99:5f:8c:5d:08:aa:27:61:a0:51:20:64:49:ce:
86:71:b2:20:6b:5a:d5:ec:4b:b8:a8:e8:e3:a2:5c:
60:d3:61:f9:50:d5:da:17:8f:12:1b:57:e3:e3:90:
fa:cb:46:fb:0e:3f:bc:9a:4a:eb:53:98:c4:87:56:
5a:21:c5:e6:98:62:dd:8f:65:71:96:b8:55:4c:f5:
1e:b6:fd:bd:01:94:01:a4:b6:73:01:37:b5:cd:35:
7a:2d:96:ec:0f:98:c4:79:b1:de:f1:fa:5f:52:f6:
d4:e4:37:7e:76:7e:a8:c4:39:ee:7a:61:07:08:05:
5a:5d:5b:9a:9f:d5:e3:53:b3:cd:4f:b6:05:10:bd:
e3:b4:b4:c5:06:90:b8:ba:50:f7:21:36:90:7e:48:
e4:56:eb:56:40:e6:8a:b6:75:f8:ad:de:89:31:de:
c5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:41:BE:86:35:40:17:8D:0E:97:A7:7B:34:7C:13:C8:AC:DE:7E:DE
X509v3 Authority Key Identifier:
keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:75:0c:79:ca:ad:8d:c6:10:aa:7f:da:47:4c:51:3b:b7:f7:
32:44:49:a4:dc:f2:8e:b5:dc:6d:76:4d:a0:cd:d2:b9:48:fc:
7b:b6:ba:a4:be:3b:ac:6a:ab:0f:ac:eb:0e:b1:cb:e9:3b:29:
5e:be:b9:c6:29:32:b2:5e:fa:73:b4:ba:e6:9b:e7:31:24:65:
d0:90:bf:4e:c6:d0:3c:e5:65:14:54:59:f3:46:49:10:8b:b3:
e9:15:75:b5:54:05:8a:84:bb:30:e2:ed:7a:a7:36:24:48:48:
5c:3e:c2:47:30:2a:37:f3:59:9b:47:34:39:82:df:78:17:1f:
3c:6c:c6:09:aa:0c:5c:89:46:b7:d6:d1:32:32:25:f5:3f:25:
2c:99:2a:36:8b:4a:b4:7c:68:05:b3:2f:0b:89:fa:41:c0:80:
25:91:6d:a4:01:9f:6f:fc:ca:89:28:b4:c3:b2:47:de:91:69:
31:1b:0b:4f:34:a7:ac:e7:7e:ce:a5:0d:fa:09:c8:e0:38:fa:
8b:42:2e:cb:78:27:f9:39:1e:b0:d7:33:d1:05:11:59:b9:12:
6f:69:4e:8e:6c:1b:c3:b6:e2:62:af:47:d3:7c:48:fd:e9:a0:
28:14:b2:c7:9d:5c:c7:18:1d:8c:b4:61:f9:d1:3d:d7:68:78:
71:a5:0f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:51 2025 by rpki-client