Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: tKVt+7HsKe80d3hlAMjrx6sY2M7aY19RNwOCgbJcJSs=
Subject key identifier: C3:AE:B7:09:30:E5:B2:5A:D6:67:A2:91:F2:19:6A:B5:97:29:6E:D1
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 019922FAFA5CD7E66CA2363B677BB001FA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 09EF
Signing time: Sun 07 Sep 2025 07:01:37 +0000
Manifest this update: Sun 07 Sep 2025 07:01:37 +0000
Manifest next update: Mon 08 Sep 2025 07:01:37 +0000
Files and hashes: 1: 05EOtNo-Yw22y8nOEhjh34kR-xs.roa (hash: bx1cLzgI6GeSkKgZhlF0GUx8NZh0BLXhkqY0eigb2zc=)
2: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: Rsz9cUHhPrIPFNLH0/dKRJv0NkVrUARG1QYY/Ns4f1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:fa:5c:d7:e6:6c:a2:36:3b:67:7b:b0:01:fa:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Sep 7 07:01:37 2025 GMT
Not After : Sep 8 07:01:37 2025 GMT
Subject: CN=c3aeb70930e5b25ad667a291f2196ab597296ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:42:cd:54:2e:19:36:aa:c1:37:7c:47:07:
2f:8e:43:20:80:87:25:f4:0d:df:3b:af:1c:14:b0:
48:19:ed:e1:5e:a0:6e:37:7b:2e:c3:4c:fb:05:09:
08:ed:46:86:18:2b:6c:44:11:67:8c:df:ff:83:ea:
33:14:51:7f:7f:7e:31:c0:2f:b0:08:bd:4f:bc:bc:
b4:45:c8:ac:1a:93:e9:ca:c1:2e:af:a8:02:33:46:
5a:36:f4:f2:bc:25:dd:14:12:01:ef:a3:23:16:2e:
ed:3b:76:86:35:b6:64:4e:8e:4e:f3:c2:71:8a:6a:
fd:0a:a5:4b:be:ba:e0:6f:86:88:07:be:13:3b:64:
ff:b1:87:c4:02:d2:4f:0f:d1:24:e3:5d:61:a7:56:
97:22:74:08:0d:8f:9c:2d:c1:90:21:00:81:47:d0:
0b:aa:3f:a5:5d:91:fa:2f:dc:00:48:01:d5:c9:79:
ac:ed:21:40:d6:70:bd:7a:31:1f:d6:53:74:1a:0c:
4b:71:8a:d6:e3:51:e6:c7:b7:fe:8a:61:35:6f:e7:
d9:19:e1:4b:7f:dd:11:46:72:02:fd:35:6c:fc:77:
3d:fe:d9:db:0a:a4:07:f3:1d:3b:0f:15:cf:1e:33:
18:7c:f0:c2:07:52:66:02:13:15:e3:28:e9:ec:1d:
35:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AE:B7:09:30:E5:B2:5A:D6:67:A2:91:F2:19:6A:B5:97:29:6E:D1
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:13:ea:a0:3f:60:94:cb:0a:eb:3a:7c:00:81:85:26:b3:5c:
60:d6:9c:b8:97:6b:5b:39:01:d9:f2:03:0c:0e:9b:5a:1c:12:
7c:bb:62:65:5a:92:88:e9:ee:32:56:c7:ad:1b:f1:1c:75:5d:
f2:64:d1:f0:a0:dd:49:26:c0:0d:ee:85:09:6d:2b:c5:a1:a6:
40:da:a7:a6:44:6a:d4:cb:21:7b:52:30:7e:a8:cf:62:d0:2b:
75:65:64:59:d7:24:8a:6b:b9:83:9e:e7:67:8d:78:b5:b0:d2:
d0:19:00:28:be:59:cc:08:75:fe:62:83:55:ee:27:15:95:d8:
59:22:e3:04:b8:23:fd:93:c1:6a:35:7f:28:3e:0a:fe:fa:79:
b9:80:cf:71:ad:7f:7e:ef:cc:e8:0e:e7:f3:8e:c8:f7:37:03:
4b:40:ff:6e:e8:7c:b0:16:ed:1d:d2:a3:66:ea:da:ea:69:ef:
bf:4d:e0:2e:f2:8f:e4:a2:21:2b:49:24:7c:eb:9a:2d:41:43:
08:1b:c1:f3:8e:6d:fb:5a:c6:2f:9b:e9:f8:2a:4c:b6:c4:dd:
d4:43:12:b6:eb:2b:e6:d1:5d:e8:4a:39:c3:01:d2:25:81:93:
63:f5:45:5a:13:0c:fc:6e:c2:1c:d6:8e:4a:10:5d:57:22:7c:
4b:c8:21:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:10 2025 by rpki-client