Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: 21+Q/TUMYfndSqkaXXRv9yrBsHpNc119IEQMK7Zs76s=
Subject key identifier: 1E:3A:4F:F5:15:AE:53:E9:2A:12:9A:61:E7:A4:20:C8:93:C5:12:FE
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 0198D77376C39F74220CAE6345FE2EE6D55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 6F
Signing time: Sat 23 Aug 2025 15:02:05 +0000
Manifest this update: Sat 23 Aug 2025 15:02:05 +0000
Manifest next update: Sun 24 Aug 2025 15:02:05 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: zLg/uKJmGbDjGc1h1jQzGDNHQK+R09cvOvz8K3patq0=)
2: Q4iWZ496HCNmYZBIWBOYyxR29Uc.roa (hash: 7wrmL3IIhgsOUmrN36LQ1NncM+5WHq2SxfG9P1s/Hs8=)
3: elJZVsJM-cu186hJqa3wLJ-HvIY.roa (hash: ARy/RhAUZB3gjAcZcQ/EM7MONeLO821NzwpDjV1Ze2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:76:c3:9f:74:22:0c:ae:63:45:fe:2e:e6:d5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Aug 23 15:02:05 2025 GMT
Not After : Aug 24 15:02:05 2025 GMT
Subject: CN=1e3a4ff515ae53e92a129a61e7a420c893c512fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:30:f8:3e:58:ce:04:5f:a9:90:3b:ca:43:
99:d8:48:b5:68:b3:0d:fb:fc:c1:26:a9:9e:c1:a6:
7a:8b:32:b5:df:71:df:b0:8f:b9:c6:de:c5:20:0a:
84:8c:23:b7:05:f7:c0:95:36:05:a0:0e:5d:3e:d3:
81:ad:f8:06:d3:3d:99:6c:94:12:1a:b7:0d:14:a2:
86:39:10:8b:57:af:f9:7f:71:d3:1f:d3:6d:49:1a:
83:03:fb:42:8c:62:c6:9d:78:80:b6:68:59:af:38:
a0:5a:77:8b:7b:4f:9e:e1:e5:2c:25:3d:0b:81:4f:
90:aa:0d:ae:c3:ca:1e:1d:bd:f2:ea:59:e3:71:46:
2f:47:ff:ef:01:8e:0c:40:e6:8e:37:83:cf:1e:6f:
ce:76:13:23:d0:5a:42:a8:33:4d:40:c4:02:23:57:
82:4e:7d:db:52:fc:7f:0c:74:61:d0:29:f1:28:09:
2a:34:38:58:e7:a6:8b:15:9a:9d:f6:93:2d:b7:4c:
8a:b2:62:8f:4c:87:28:53:a9:15:aa:90:a5:19:bc:
24:f9:31:f9:39:8a:d8:09:72:fe:ce:02:58:93:91:
51:92:37:31:93:98:3a:27:d2:78:78:e7:13:a3:12:
a9:75:32:a0:9f:72:6a:c8:2f:f3:84:82:9f:4e:1b:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3A:4F:F5:15:AE:53:E9:2A:12:9A:61:E7:A4:20:C8:93:C5:12:FE
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d1:14:a8:81:26:0c:99:75:bb:41:1f:4e:cd:f9:b6:69:af:
06:4c:58:4f:c5:15:5d:1d:33:8a:37:8a:0c:63:a3:e9:3b:4c:
22:d2:09:aa:95:02:02:95:12:05:51:ec:da:4d:a6:ec:ad:32:
51:ef:04:e8:75:a7:00:8b:b3:6f:bc:af:7e:9f:7d:66:72:f1:
9d:75:6b:e5:c5:3a:19:81:ef:d8:70:ed:15:75:34:3b:00:82:
7b:2f:17:c7:b7:c4:a1:6d:82:7a:ae:e7:09:8c:da:c5:47:f0:
91:e7:61:73:08:10:1e:a8:3b:b3:64:d7:2f:a2:f3:6d:31:b7:
db:41:62:81:93:47:1d:21:ad:4c:24:12:96:a1:59:6e:9e:2e:
d2:9a:da:ad:33:00:08:ba:f3:84:47:fe:94:c1:c5:2b:8c:2b:
fc:0f:9d:94:d4:e2:2c:6d:37:ae:8f:1c:d3:95:34:67:cb:5a:
a0:24:6e:e1:ab:11:16:c3:51:10:fb:c9:4f:68:c4:56:05:e7:
cb:70:f6:b2:ef:8e:60:18:6d:ab:ef:07:13:03:73:f1:8f:a1:
33:9c:d2:4b:0f:72:60:30:a4:a3:3c:d5:99:3b:0a:f9:9b:70:
2a:32:ae:fc:58:40:4a:25:0e:5c:e3:42:6c:7c:9e:ff:7d:42:
96:d6:c3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:38:21 2025 by rpki-client