Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
File: 3QEJONnvchWPyYvUXecbCxqf9yk.mft (raw, json)
Hash identifier: jNV5PkjHZmWZyHz4QL7pHJ5ChPN/hU06G1PyGc/Wqag=
Subject key identifier: 7D:66:08:3E:50:FC:F6:CD:7A:B6:0C:EB:A5:00:A1:AE:EA:BD:2A:FC
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 0197B6A22413E586FA3D6A87F49F00E709B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
Manifest number: 07F7
Signing time: Sat 28 Jun 2025 13:02:48 +0000
Manifest this update: Sat 28 Jun 2025 13:02:48 +0000
Manifest next update: Sun 29 Jun 2025 13:02:48 +0000
Files and hashes: 1: 3QEJONnvchWPyYvUXecbCxqf9yk.crl (hash: tSIMg2n8g22GWW8Qy04z/Nb9L2SuII5expiCzQsvGwI=)
2: W8Dpmpt_1-01qSbotVM15n3GSek.roa (hash: 8bMbdbcHjYf7KXHu+ym0lwgv0cPY/hCCrTp1Qv0O4sU=)
3: d-If6rwOnPiVqU22C8IZzGvMPvc.roa (hash: giLRuwy5wW+MIOBjFAF7Pd0PEoYtI2K0pgdHGw83fkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:24:13:e5:86:fa:3d:6a:87:f4:9f:00:e7:09:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Jun 28 13:02:48 2025 GMT
Not After : Jun 29 13:02:48 2025 GMT
Subject: CN=7d66083e50fcf6cd7ab60ceba500a1aeeabd2afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:6c:80:03:5b:4b:a9:92:49:d7:38:ea:5a:
b3:16:11:80:83:2a:e5:14:57:bc:aa:ae:c8:86:56:
20:0b:ef:15:7e:44:af:6b:af:58:24:a9:db:3a:f7:
7f:a3:ba:bd:eb:a0:fb:56:b8:fd:64:a8:6f:ee:b1:
5a:44:6a:f6:84:1e:7c:b9:51:af:c7:18:a7:25:54:
a7:f4:1d:da:e1:c4:64:2a:6f:bc:54:12:d9:f6:be:
87:10:ed:10:22:ab:92:7a:35:ed:d0:c0:f0:33:f3:
11:05:22:95:a1:be:b7:31:fc:f4:60:7c:04:13:f8:
38:a3:ba:95:4e:0f:ed:27:96:24:53:fe:a8:4a:76:
b3:6e:6b:b9:69:5a:24:e0:06:87:0d:89:37:2f:74:
f0:b6:48:b5:29:33:a1:53:54:fa:2b:d7:d2:76:03:
26:8b:47:52:9a:93:bc:6e:33:91:77:c7:33:46:42:
fa:b8:1f:f6:70:b1:03:81:26:d1:ae:33:ae:0c:b6:
d6:a2:79:18:b7:39:64:8b:f0:a9:d5:25:33:88:5d:
cd:53:4c:db:4f:ca:b0:1a:40:54:5d:95:7f:33:7b:
9f:58:5b:db:38:b1:c3:4c:af:46:53:74:1b:8c:38:
89:75:3f:26:57:f2:fd:2f:b5:c9:ee:3d:36:84:1a:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:66:08:3E:50:FC:F6:CD:7A:B6:0C:EB:A5:00:A1:AE:EA:BD:2A:FC
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7d:e2:16:32:bb:ff:a5:97:0a:a9:c1:ed:14:68:b3:7e:de:
f2:16:2e:f5:ad:41:fc:a7:fa:a4:33:f1:95:eb:3a:5c:d2:04:
e9:a6:b8:78:0e:8d:9f:50:02:c9:5d:bf:16:8c:df:ed:05:54:
ce:41:06:31:ac:29:03:e4:6e:5a:a2:39:26:8c:15:9c:ce:76:
46:9f:9b:55:28:50:ee:f2:40:66:90:a5:92:29:f9:94:45:4b:
d4:93:aa:39:9c:30:b6:4b:98:67:7e:0c:56:c7:83:39:17:4f:
55:2c:b8:47:3e:91:cd:5c:01:47:b1:b9:67:64:9d:63:18:2e:
84:1d:0a:26:75:ef:9e:9f:e3:17:ca:03:41:f3:f7:ef:d2:0b:
54:dd:aa:dd:99:4e:bd:54:96:eb:5a:20:5c:33:c4:ca:c0:85:
40:ac:e6:c2:13:5c:23:26:95:fd:2e:7c:5e:d8:a5:00:73:64:
1a:65:f7:b7:c5:b5:c5:a9:7d:b4:af:94:a8:bd:b6:c5:3c:72:
cd:eb:0b:cc:89:d1:d8:a8:0c:61:b6:ea:dc:c6:e2:aa:5a:f6:
c6:19:18:c3:ff:38:df:96:bc:bc:39:18:44:ab:2f:a4:7f:c9:
d2:81:3a:db:d5:a2:1d:9a:36:00:63:b5:df:0d:e3:ba:09:e4:
b2:3f:90:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:39:00 2025 by rpki-client