Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: k8w0veC9VeS5tfyNYZsCzZwaRZOAlAEuyV0xdN4KG24=
Subject key identifier: 87:58:AA:2B:18:92:BC:1F:AB:A8:D5:43:02:54:BE:3C:1D:33:89:BF
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 019922C308AB421EDC3977F3A6BBCAC8C4C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 11B2
Signing time: Sun 07 Sep 2025 06:00:30 +0000
Manifest this update: Sun 07 Sep 2025 06:00:30 +0000
Manifest next update: Mon 08 Sep 2025 06:00:30 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: YeBjrpgRcxhEgSc0ZaY9N8SiN14sErj9L/PchC5/CF0=)
2: _Sn3RhfY--fiVliyrSpcw_Dpx8U.roa (hash: 0DlsX3tbgemelzimR5EC4gu2Xnu0fF/hzb1n4QMYZI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:08:ab:42:1e:dc:39:77:f3:a6:bb:ca:c8:c4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Sep 7 06:00:30 2025 GMT
Not After : Sep 8 06:00:30 2025 GMT
Subject: CN=8758aa2b1892bc1faba8d5430254be3c1d3389bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:d7:28:9b:3e:6e:5b:f1:c0:89:50:0a:53:
2a:1d:62:a7:aa:c1:f2:7c:8d:8f:b5:58:e9:65:74:
87:3a:58:11:bf:c8:fb:f0:8a:87:d3:7f:da:6e:57:
8b:37:2e:27:e1:72:11:d5:9e:3d:0b:a2:32:13:63:
29:98:d8:13:3e:c9:1b:d2:d8:c4:b6:ca:2f:a9:19:
66:34:b3:8e:c8:2f:a1:75:ba:5a:a2:79:41:7a:3c:
d2:74:81:62:a6:13:d2:e4:f5:7e:dd:27:d3:d6:d0:
27:da:d2:91:96:5e:3f:99:ff:68:fe:6a:da:30:c0:
05:93:90:7b:4c:a0:41:14:89:2c:3e:bb:79:e7:56:
1a:e4:d8:3d:00:ca:9d:4b:44:25:36:db:21:1d:f5:
1d:f2:12:c7:32:c1:08:69:51:44:e9:4f:29:b6:4a:
0d:74:82:eb:9c:62:a4:fd:71:22:72:9e:81:b7:16:
4a:aa:70:47:c4:b4:38:4f:aa:37:7d:03:1b:2f:e1:
f8:3b:cf:66:79:a7:37:38:71:98:da:79:57:ad:42:
8a:1e:c3:c0:08:87:c9:c7:7b:6f:b8:82:a7:ab:47:
3c:4f:4e:a3:98:66:66:6a:2e:2f:3f:23:ad:67:08:
20:7e:c6:42:a1:2c:a2:05:a8:09:00:d8:9d:64:c7:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:58:AA:2B:18:92:BC:1F:AB:A8:D5:43:02:54:BE:3C:1D:33:89:BF
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:86:b0:78:59:c0:1e:ce:cb:0e:1c:67:19:37:b6:fe:dd:b1:
21:74:96:2f:cb:89:a5:82:f5:4b:76:07:d0:2b:a9:de:de:63:
2f:5d:69:75:40:86:d1:71:80:ef:99:0a:6f:0f:1c:47:bc:9c:
45:4f:db:b5:85:33:df:6d:13:3b:04:88:88:2c:38:d4:07:56:
49:dd:48:04:db:73:4b:7a:63:cd:c5:96:72:16:ad:84:95:b7:
24:d4:f3:00:f6:4c:2f:f5:48:05:8f:db:da:15:97:35:35:48:
6b:0f:ae:5d:3c:e0:e2:0c:88:19:c5:99:68:7d:7b:54:a6:9e:
31:0c:f7:2f:42:76:cd:9b:0f:54:47:be:b2:f1:bd:2c:43:ff:
96:4c:ca:22:de:0e:27:c6:8b:bf:08:be:0f:db:22:33:87:b1:
b0:76:b6:8a:1f:6d:15:a8:3d:1b:bb:66:f7:65:b1:19:b4:67:
18:32:ea:61:d4:62:b5:1d:62:eb:bd:17:29:a4:62:7d:8f:a4:
d0:47:40:c3:b3:5b:6b:2f:32:1b:ef:ca:ca:86:bc:ee:00:e1:
80:81:56:36:b7:a3:a0:4b:db:02:5e:34:7b:62:b0:c4:0e:ea:
7f:7b:a2:a7:f3:f9:1d:b1:26:27:cf:db:03:2d:cb:b2:56:cc:
fc:e4:a1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:45 2025 by rpki-client