Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: uCKk0jLM8jPEC8WVm2Pa8Qyce58Ani7vIjRRDF0kqtA=
Subject key identifier: F3:97:EF:B7:73:D8:BE:BD:6E:B8:77:87:5F:2C:CB:C3:47:DE:11:28
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 0198D65F6D7EFF5DB5EA8CFBB4F2AD8C849A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 088C
Signing time: Sat 23 Aug 2025 10:00:34 +0000
Manifest this update: Sat 23 Aug 2025 10:00:34 +0000
Manifest next update: Sun 24 Aug 2025 10:00:34 +0000
Files and hashes: 1: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: k7Cvbp/WiJIlKFP2KEePqlwsK+xJIvTIeeuTFxJB9NI=)
2: W8Dpmpt_1-01qSbotVM15n3GSek.roa (hash: 8bMbdbcHjYf7KXHu+ym0lwgv0cPY/hCCrTp1Qv0O4sU=)
3: d-If6rwOnPiVqU22C8IZzGvMPvc.roa (hash: giLRuwy5wW+MIOBjFAF7Pd0PEoYtI2K0pgdHGw83fkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:6d:7e:ff:5d:b5:ea:8c:fb:b4:f2:ad:8c:84:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Aug 23 10:00:34 2025 GMT
Not After : Aug 24 10:00:34 2025 GMT
Subject: CN=f397efb773d8bebd6eb877875f2ccbc347de1128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:5a:c1:c2:e0:c7:7e:b0:e0:55:86:a4:76:
90:03:ed:1e:0c:b1:07:a1:84:5c:23:34:82:52:42:
58:8a:74:27:ec:e7:05:14:85:87:2d:4d:c5:b8:3a:
c9:65:62:fb:de:53:6e:4b:a9:30:b2:ad:87:c3:92:
17:f7:c5:1f:53:af:34:ad:07:b6:1c:c4:72:c6:4c:
b2:86:85:18:03:60:c8:6e:ed:62:f5:0d:46:58:fc:
81:fb:5b:0a:ad:6e:bc:c8:66:b0:9c:1b:7d:28:34:
a6:c9:f5:e1:4e:04:57:e1:c6:62:14:37:26:2a:79:
0f:41:51:f4:28:23:b2:18:bd:4c:b1:e8:f7:77:f8:
fa:19:4d:9a:71:43:ca:c4:ca:08:01:37:61:9a:ea:
04:1d:a8:3d:f5:47:a2:85:67:bb:9d:79:4e:40:36:
0c:56:10:8f:39:a3:79:73:4a:15:4c:73:1f:35:9d:
63:51:2f:a1:1d:43:24:fa:d6:c8:5f:df:24:51:c0:
d8:d7:c0:f3:3f:79:8a:12:00:3e:0e:81:6d:5e:cb:
d3:a6:02:06:b5:5e:7f:9a:35:d5:4a:95:7e:74:bc:
3c:3d:5a:60:52:36:ad:a8:ed:c5:59:98:e0:5c:47:
97:ed:4c:0b:1f:77:56:2b:65:ed:22:93:df:15:45:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:97:EF:B7:73:D8:BE:BD:6E:B8:77:87:5F:2C:CB:C3:47:DE:11:28
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:53:9c:25:01:46:0d:72:a4:95:97:f2:84:2d:58:02:dd:25:
92:68:f6:32:8b:7d:06:14:89:44:e6:9a:98:33:43:d9:e2:5f:
23:8c:c6:52:08:25:75:14:ce:3a:5e:25:42:3b:85:11:b7:fc:
de:d5:fe:c1:bf:a0:0b:1e:65:78:26:fa:e3:09:28:e6:4e:2e:
13:03:e8:05:ea:e6:05:1d:d2:7a:0d:cd:61:c0:9d:85:73:01:
54:b5:16:e5:70:f2:f1:f4:5c:a0:0b:86:28:d9:60:15:00:9d:
6a:dc:c1:b7:56:71:a0:70:fe:ad:b2:cf:1c:6e:bd:e9:e3:09:
23:82:75:c6:a3:2c:c0:84:01:0e:0d:13:24:22:52:39:d1:cb:
cd:4a:ff:17:6b:49:ca:56:32:c9:e5:b0:33:eb:05:85:fd:68:
91:4b:ba:34:8a:cc:c9:bd:3b:61:60:85:d4:02:7d:6b:52:1a:
07:85:39:06:8f:13:70:be:70:88:f6:99:5d:03:d0:c4:08:2b:
57:86:e2:7d:c7:18:ac:42:06:83:df:96:7b:57:7c:2e:e5:71:
ce:74:60:f7:4b:52:e5:c0:60:d6:65:3d:d5:b9:42:13:17:21:
73:51:28:cd:61:4d:29:2b:2e:06:3c:8d:9d:7f:c4:b3:b8:19:
ce:c5:4f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:02 2025 by rpki-client