Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier: MrvmDHQxM1nWbGclZreCeFEiPducXHpXTcck3QT+Nzo=
Subject key identifier: 3B:D7:7A:9A:46:B6:30:D2:E2:26:31:6F:DA:6C:CA:CF:59:92:6A:56
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 0198D4E0066C83803E890B3742B7763DD847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:01:48 +0000
Manifest this update: Sat 23 Aug 2025 03:01:48 +0000
Manifest next update: Sun 24 Aug 2025 03:01:48 +0000
Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: bK1ibCoKjDmwbRsFoRh2i51ajumwsaCZa3+QaCgCq/k=)
2: Pzz9-39B29Zan_AKRyiM2W7cTbI.roa (hash: 2gaPpnMFBn7PDm+0BqVVwSzuzPaAOOzR64kAX25LHLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:06:6c:83:80:3e:89:0b:37:42:b7:76:3d:d8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: Aug 23 03:01:48 2025 GMT
Not After : Aug 24 03:01:48 2025 GMT
Subject: CN=3bd77a9a46b630d2e226316fda6ccacf59926a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:7b:21:c3:b3:44:a1:b1:c7:2c:aa:80:be:
cf:14:60:a5:33:92:88:19:77:7d:ae:c2:cb:d1:92:
d1:00:1e:72:3f:e8:09:56:ff:ab:10:5d:f0:c4:7e:
3a:18:9b:cc:36:79:3c:a8:3d:32:b8:7f:d8:0a:db:
84:ab:b9:d7:4e:e7:35:b3:1c:5a:fb:9a:98:a6:28:
f1:ec:e0:0a:7c:b8:a9:42:89:f2:97:ac:a1:d0:b0:
d7:6a:ef:4c:1d:af:3a:6f:8e:6f:52:f5:07:8d:56:
04:06:2b:96:ef:ba:bc:3b:35:8b:41:52:0c:92:52:
5b:ae:86:8e:4b:c9:74:78:b8:db:42:50:32:b6:ae:
d4:e4:05:d2:01:d4:07:37:8f:9d:a2:3e:89:83:89:
08:b1:4b:b4:97:1b:5a:67:4e:20:8e:e1:88:65:7a:
fd:ed:14:a1:dd:ae:a2:38:9f:9b:c3:54:ed:5b:25:
95:06:b5:b1:1c:8d:66:ff:d8:18:29:98:a7:2c:5a:
91:d0:a3:fb:27:26:ae:31:eb:bf:08:ca:b8:c4:14:
57:57:68:37:53:f5:3a:b8:74:c7:c8:c0:aa:4c:86:
6c:fc:cf:fc:e7:76:f8:22:cd:a6:6e:63:08:57:23:
4d:3d:12:30:fb:ff:3b:1a:e6:85:9f:45:12:69:fd:
17:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D7:7A:9A:46:B6:30:D2:E2:26:31:6F:DA:6C:CA:CF:59:92:6A:56
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fc:e6:a9:ee:bb:e9:2f:50:7d:14:b5:00:67:8b:fd:5a:56:
66:20:42:75:d0:ea:55:66:74:3c:92:3a:15:f5:73:66:fa:8b:
1d:0b:70:0d:8d:8a:93:86:07:ff:29:54:6e:44:05:8b:38:b8:
85:e2:09:0f:e2:32:cf:fe:4b:4f:f7:9d:c1:13:2c:1c:b5:a8:
2d:91:9d:dc:6b:1a:64:41:90:49:aa:e2:31:d1:5b:00:5a:c7:
d3:f6:e4:dc:43:c5:b5:08:24:9b:47:d4:93:34:8f:93:8a:49:
e2:ec:cb:30:0d:f2:f9:64:3d:b0:3c:15:ee:81:6a:d6:32:53:
6a:f3:fa:15:61:44:00:52:94:70:15:a9:66:c6:8b:4e:e3:e7:
bb:98:b5:df:65:92:24:89:9d:49:5c:37:44:68:f0:72:2e:c8:
2b:79:c8:08:17:18:b5:5d:92:b0:7b:df:f1:b4:71:56:c5:d7:
98:09:3f:ac:58:7e:90:7a:56:ae:af:cd:7a:09:30:4d:22:f4:
b6:fd:ab:41:5e:09:17:bd:55:8e:b9:a6:ba:f7:9c:58:ba:59:
64:b5:4b:1e:d1:aa:df:06:50:7b:20:7c:f6:5b:79:9a:70:84:
ed:8e:2c:86:b1:5e:ff:5a:d9:04:e8:d6:2d:c8:80:98:2c:dd:
06:25:84:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:50:47 2025 by rpki-client