Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: lcos795yzoW4ylx6u9h6JqgAGXzL7rdlYLiwEm8w6LU=
Subject key identifier: 39:71:1D:D0:AB:CF:17:45:AE:25:AD:EE:69:76:58:FD:74:ED:0C:67
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 0198D65F1ECEA9EC37C54E5B14BB3BE21C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 1060
Signing time: Sat 23 Aug 2025 10:00:14 +0000
Manifest this update: Sat 23 Aug 2025 10:00:14 +0000
Manifest next update: Sun 24 Aug 2025 10:00:14 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: 8pWvQQTD2Wz0umr3hVYAu9+UbpRX3IAnBog+pFKw3vM=)
2: 9yOwmAU645k5B-2q5IOc7M05GTo.roa (hash: E7bgo02yf2p1Xr2S53fCsY3j/+dXZDb8jPxeB97qfpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:1e:ce:a9:ec:37:c5:4e:5b:14:bb:3b:e2:1c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Aug 23 10:00:14 2025 GMT
Not After : Aug 24 10:00:14 2025 GMT
Subject: CN=39711dd0abcf1745ae25adee697658fd74ed0c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:ca:24:2d:b5:32:cb:b6:32:1d:d3:f2:68:
67:4e:7b:a3:2f:22:3e:d4:32:d9:e7:09:7b:56:3f:
ad:67:b9:d8:84:b9:b2:63:07:6b:14:26:34:10:24:
99:76:28:ae:5a:6e:a2:bb:46:c4:7f:2f:3b:0b:cc:
5a:ef:1a:4a:83:6f:6f:24:63:c1:33:d5:68:e1:67:
e8:46:3d:34:e3:a9:c9:d4:36:b2:f7:76:b4:d6:28:
5d:ad:b1:7f:66:fa:53:8c:ea:b5:56:2c:11:aa:a2:
25:e0:50:c6:54:c4:bd:99:9e:ab:8f:4f:db:98:32:
b2:48:2b:6a:18:dd:ea:cb:61:88:4c:65:11:92:5e:
fc:3e:75:1c:64:e3:5e:3a:e7:0c:b5:25:1f:79:52:
67:74:3e:cb:fd:07:d4:44:80:c4:0b:44:2f:76:e3:
c1:52:2a:63:71:82:1e:9b:1e:5a:f5:68:37:13:29:
a9:40:b1:cc:ec:4a:80:04:88:a8:90:d0:8f:8b:20:
a0:85:54:a6:d1:33:83:e7:6d:ff:00:df:dd:dd:eb:
ea:3c:aa:ff:16:49:93:97:1a:42:af:63:da:de:cc:
06:06:32:7f:2b:e8:06:6d:71:95:95:37:6f:e9:b3:
56:da:1e:57:82:4c:eb:47:73:5a:8f:06:f4:ec:bd:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:71:1D:D0:AB:CF:17:45:AE:25:AD:EE:69:76:58:FD:74:ED:0C:67
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:49:90:14:1c:a2:44:8e:9a:21:ed:b7:91:96:ee:de:76:60:
2a:f9:6d:b1:b4:cf:69:ff:c4:10:b1:c1:47:f0:25:e7:f6:c5:
8a:a6:58:4a:22:8d:b3:22:67:52:25:19:96:b9:bf:b3:be:cc:
23:05:bc:62:6e:fb:5f:d9:ab:9a:78:89:33:63:e4:2c:13:0d:
bb:90:4c:0a:0b:2b:cc:49:2d:7b:0f:b8:ee:fb:9b:e1:59:be:
7b:63:bc:0a:44:61:da:19:33:5e:19:f5:75:72:14:3b:d0:db:
ef:51:4b:23:a0:14:6b:1f:c5:fd:35:c1:44:ac:2c:53:5a:c6:
94:8d:90:fe:5a:b3:34:14:62:33:8f:ed:96:6c:23:92:3b:79:
08:a3:f3:cb:08:c4:d6:a5:bb:c3:98:ad:ef:15:b2:7d:81:3a:
31:58:98:50:7c:a7:76:13:5b:41:6c:2a:f6:1f:da:6d:4b:22:
c1:91:7d:74:52:af:c4:0a:bc:29:02:c7:cc:3a:77:e3:05:b2:
5c:2e:d8:ee:8a:fc:53:83:b8:11:a7:5a:69:f7:59:55:7f:16:
e9:c6:81:ce:0f:d3:70:54:d3:73:c0:cf:82:9d:73:a1:02:67:
55:50:40:4d:0a:4e:97:8c:8a:2f:07:62:3d:2c:ab:53:12:4b:
62:9f:e9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:10:30 2025 by rpki-client