Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
File: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft (raw, json)
Hash identifier: xugIoa9KvWdFRcHeF4gWEY+P/Kcs7Q7wnMuO3nKFFIw=
Subject key identifier: AE:6A:9D:D1:38:99:71:DF:77:67:AA:B1:81:AE:32:CB:6D:6E:A8:B3
Authority key identifier: DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
Certificate issuer: /CN=dead4c89f7aed8681d0202d22479d86e1462f889
Certificate serial: 0198D515B0692B2FC5DC93C48D82398457B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 04:00:25 +0000
Manifest this update: Sat 23 Aug 2025 04:00:25 +0000
Manifest next update: Sun 24 Aug 2025 04:00:25 +0000
Files and hashes: 1: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl (hash: N256gbvPziUssOo4xxqQaYw3Nc5OqREb2FJz6GqnliI=)
2: hs44kTsCSKJHF4M4m6a7yybk2BU.roa (hash: sJmLUUiHtQ2muOzZ9TuqLt9boiXoy5M0LFt8+5jZEwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:b0:69:2b:2f:c5:dc:93:c4:8d:82:39:84:57:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dead4c89f7aed8681d0202d22479d86e1462f889
Validity
Not Before: Aug 23 04:00:25 2025 GMT
Not After : Aug 24 04:00:25 2025 GMT
Subject: CN=ae6a9dd1389971df7767aab181ae32cb6d6ea8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:a9:e7:fb:a2:2e:69:18:46:22:52:7a:ea:
06:2f:b4:79:f1:78:a7:d2:63:8b:6d:ae:0c:e7:57:
d7:e5:eb:68:10:b8:bf:05:81:40:0e:4f:7c:e3:82:
b9:22:5d:eb:8f:70:a3:a9:a8:02:cf:5e:bb:17:18:
80:3c:73:39:61:8c:67:62:85:16:b1:d1:ca:ee:d3:
3e:17:bc:23:63:ba:a7:72:71:7b:4c:9f:78:fc:03:
ef:27:e4:8b:17:95:9f:d5:c6:b7:76:bc:d5:ce:07:
2f:45:17:3b:81:e6:7c:bb:53:e0:d3:b5:1c:50:07:
28:37:f1:15:a5:27:48:c5:91:a7:a7:17:f7:78:9b:
b2:5e:ce:24:db:b4:fa:e5:a8:a8:e6:91:89:4d:eb:
12:68:f1:9a:e5:6b:45:7a:a2:82:1c:b1:84:aa:14:
13:8d:69:a0:0d:e2:51:eb:15:dc:9a:7d:c5:a2:81:
54:33:e6:1b:55:d0:23:f9:cf:ab:4e:80:34:a7:be:
42:e3:70:e0:c5:62:a8:32:a9:88:c6:16:70:15:9c:
60:df:80:3c:92:4d:71:99:5f:e0:0e:eb:c3:f1:81:
52:28:ab:16:52:5f:4f:d2:27:e6:14:d4:15:57:21:
84:ba:ff:b1:f0:fc:d7:fe:dc:c8:d1:7e:99:c3:c4:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6A:9D:D1:38:99:71:DF:77:67:AA:B1:81:AE:32:CB:6D:6E:A8:B3
X509v3 Authority Key Identifier:
keyid:DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:30:93:68:77:97:85:09:7a:6a:29:17:70:46:d3:f4:5e:68:
1a:dc:ad:c5:e7:9d:ee:ca:ad:b0:6d:d2:27:e0:a3:08:c8:8f:
22:be:f9:39:2c:39:4b:4e:f0:27:6f:b9:40:e7:06:dd:81:37:
d7:29:fe:20:0b:64:a1:50:dc:e2:a5:30:c6:20:e5:64:36:a5:
fb:dc:4c:28:49:b6:02:03:b7:b8:d9:b9:f2:b9:de:05:ba:35:
d2:73:ea:43:10:32:9b:09:30:4a:e7:a9:30:04:2b:79:5c:4c:
06:6c:07:3c:09:ef:1a:a2:fc:fa:04:5b:44:a9:65:f9:d1:5c:
14:00:5f:8c:3c:f0:a4:9e:33:ad:92:7b:6d:91:90:5b:32:69:
cb:51:02:4d:ed:a6:6a:6d:ca:c0:62:f7:8b:24:e0:24:fb:d1:
bc:2a:83:7e:fb:47:08:9c:0c:dc:9f:71:e3:6c:6a:ae:e3:17:
ed:83:bb:8e:54:5c:cd:e5:82:5b:cf:68:ec:46:b0:a3:f3:26:
ef:82:94:36:3e:ff:19:46:97:27:a5:5e:22:3f:3a:5e:cf:56:
02:82:3c:14:e3:8c:d5:60:cb:4d:71:02:4d:87:12:90:31:b5:
2b:d2:4f:52:ca:df:3b:48:b0:60:57:a3:e2:31:c8:56:1c:d6:
e3:51:e7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:54 2025 by rpki-client