Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: DbCbQYT5gIeIWmV4zeGwR0PWkVOtupoSamsPyL2utGo=
Subject key identifier: DF:79:26:5A:CB:C5:A3:51:26:A8:43:DB:23:B9:80:B6:29:49:D9:8C
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 0198D5BC2AD7FE4FCDA73396142CA83ED349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:15 +0000
Manifest this update: Sat 23 Aug 2025 07:02:15 +0000
Manifest next update: Sun 24 Aug 2025 07:02:15 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: YyTp9O0ZKhX+5RDun5b9K/fQy0y/OxGFZTtz1hh4Vsw=)
2: 9euEZiQBZa0KQy87mhddaAGMyJs.roa (hash: SlkEYhw31htGhY3rwyORB+KNW056wx1mf03bV0slrXo=)
3: PbQAq4tBfBzJf67NNR29Pj0FkmA.roa (hash: 68zQoRFiAUVZyRagTzVHGcIdd/jEkcY9EEgWfXz5qFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2a:d7:fe:4f:cd:a7:33:96:14:2c:a8:3e:d3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Aug 23 07:02:15 2025 GMT
Not After : Aug 24 07:02:15 2025 GMT
Subject: CN=df79265acbc5a35126a843db23b980b62949d98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:65:68:d4:85:c5:1d:7b:85:a6:46:5a:a3:
f8:72:65:80:1f:5c:46:7e:60:c1:54:52:23:ad:3d:
60:c8:c6:48:2e:5d:79:f0:86:9f:95:69:d4:b3:32:
49:63:e4:d7:52:03:e9:71:94:3a:6b:9c:8f:ae:13:
8c:45:b7:3b:00:a6:05:22:22:db:15:bb:f4:de:d3:
c2:7d:07:26:98:4c:b6:3f:32:4c:e6:63:7a:29:99:
f9:c1:89:38:1a:a2:87:0c:46:ae:65:b6:82:f5:ea:
6f:e3:1d:19:c1:95:b2:57:eb:ba:fa:88:16:29:12:
dd:82:28:da:56:3d:32:99:61:98:d0:7d:be:9c:ad:
b5:69:af:37:a0:17:62:d6:83:ec:60:a8:eb:35:dd:
1e:79:d3:48:8e:77:70:48:89:2d:24:3b:51:9d:f7:
47:bb:af:79:71:0f:d3:29:b9:17:cc:52:d1:b5:5d:
13:cf:b5:b9:21:4e:00:b6:f4:e8:59:bf:3a:57:ed:
a0:3c:ff:cb:23:fc:2c:f6:e2:8d:d7:b9:f6:a2:25:
2a:ee:6e:77:ad:e1:05:86:be:f6:a9:0b:e7:b4:4e:
55:40:90:f1:99:2e:f0:82:70:03:44:86:b2:3c:64:
93:51:5d:96:2c:9c:76:63:e4:a4:70:b8:be:07:07:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:79:26:5A:CB:C5:A3:51:26:A8:43:DB:23:B9:80:B6:29:49:D9:8C
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8c:4a:65:b1:4c:50:ec:bc:45:36:20:17:c2:99:cf:63:45:
8d:29:d7:39:e0:91:5c:3d:cf:3e:8a:26:fb:7a:5a:0e:38:c0:
f9:45:16:f1:c9:b4:35:28:c2:bc:16:88:e7:33:1d:09:47:ba:
1a:61:c6:57:6a:15:2d:ee:05:f1:16:83:09:75:11:c3:00:e0:
49:b3:ed:31:c4:be:59:98:49:33:00:4a:20:aa:7f:ca:74:9f:
07:9c:28:d9:1d:ea:ca:67:2f:de:29:29:1c:cc:61:5b:1b:75:
5b:eb:83:0e:49:15:aa:6a:8f:6e:39:a9:c4:8b:f6:f3:0f:55:
ff:2a:65:b4:c3:3f:b1:2b:b9:3d:b4:3f:c6:27:ca:c6:70:15:
86:57:a6:e8:bd:ba:82:fe:f6:0e:66:59:82:34:3f:cd:2a:91:
de:ee:7e:7c:d5:dc:06:10:27:5f:e8:ee:04:92:14:3c:95:ac:
31:bd:e3:55:f6:7f:87:4a:1d:66:4c:07:c7:4c:c8:e3:f7:d3:
dd:f9:53:4e:ee:82:d4:92:9f:d2:48:4e:0c:02:6a:32:4c:ac:
9a:f4:b9:8b:28:83:cc:62:2d:15:af:ee:11:d2:ad:eb:91:3c:
b5:20:e0:4f:ce:81:c5:40:55:14:65:ef:e6:76:ad:0b:73:21:
fa:ef:91:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:30 2025 by rpki-client