Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: YhUmXWpG/4wAutjbRqInW3tlm/PlTQkS+3ah+wr9xqg=
Subject key identifier: 83:04:10:52:D9:58:8D:A6:CA:6A:B6:1B:59:FC:4E:C1:A9:E3:7D:D7
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 0198D8BD92917FC789867CC492286EE7B36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 1388
Signing time: Sat 23 Aug 2025 21:02:38 +0000
Manifest this update: Sat 23 Aug 2025 21:02:38 +0000
Manifest next update: Sun 24 Aug 2025 21:02:38 +0000
Files and hashes: 1: 3HTozQB4pcsucL9eexzvUMqz-88.roa (hash: p8l9H8yiS+tCWDGhSt8TqxKK4BPlsy+wIY5igUPwFNU=)
2: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: 21Mxu6oMFI3MQ92qHQleJXIRHYNjOWMlN3fsydWT3i0=)
3: GBhjKbS-fcKacs4QagSv_dPJry4.roa (hash: z+hDh/AwHXwEXvEpHMWmz7Nj3R8e4I8tmHqYFBmRwRQ=)
4: I_q4haHSQ5-iSHbhiDxn8LO10n0.roa (hash: rR8MdnfYv9DYhofCAQL44jv965jNwY7cLv2/tA4Lg2A=)
5: cdhvQ3G9D22hzZ35uWHLO4DK-b8.roa (hash: 9/hDVeqHVKKGEQirCvU77EziyJeBYbpOSUraYbA1sQI=)
6: icjgdrZ-2bYy0vmLkXN3ZejcMO0.roa (hash: BhIg1YAcMIYOB5H79uWHhrjxoemSR0rVkY+hQV1/Imo=)
7: qNl-Q8HhmrUArxLKQehroWC5qDc.roa (hash: 9pycVyvA/LfKV0R0Bhd4fllbZltDwLcpn1H2WIOi7gw=)
8: tgoPg8gJ1wgYlvzK_ZhaNvMswpk.roa (hash: 0Yao20qxSDFfx3jAhC+HO3FsXj9rP4F8uh+mjbY+yHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:92:91:7f:c7:89:86:7c:c4:92:28:6e:e7:b3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Aug 23 21:02:38 2025 GMT
Not After : Aug 24 21:02:38 2025 GMT
Subject: CN=83041052d9588da6ca6ab61b59fc4ec1a9e37dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:16:2e:33:e4:d7:b8:d0:3f:dd:e1:eb:07:27:
b5:27:94:6c:23:10:fb:3d:0e:64:c7:6e:3c:2a:eb:
82:6a:1e:71:70:9c:52:86:d9:df:8e:99:f9:a0:7a:
d1:d2:62:b3:b3:41:ef:ee:f1:d6:d3:80:08:55:36:
19:a1:2c:66:50:8c:ca:06:76:d2:bd:24:61:93:af:
5c:0d:6f:ee:9a:f4:f2:0f:cb:e3:13:c3:63:69:c8:
9c:ea:c1:5b:90:1f:c5:7c:7a:de:d2:14:ab:e4:41:
03:e2:73:5a:79:f8:f9:ee:e9:1f:c0:bb:2c:63:6a:
bf:18:7c:c4:cd:a3:8e:47:05:c9:5a:60:53:dd:94:
fa:01:98:66:db:3b:9e:a9:d8:b7:b9:41:da:51:f7:
b9:0c:ab:42:c7:14:87:eb:31:21:fa:a2:a5:9c:88:
b3:67:c1:ee:25:d3:df:3d:db:0d:01:ec:60:97:6a:
0c:a0:8e:71:f0:03:b6:89:0b:4c:3c:eb:c0:c2:01:
5c:44:28:e2:7a:c4:30:2e:4e:36:32:3d:6d:9d:7c:
6b:c5:bf:ad:5f:56:86:78:0e:1f:fd:b7:a5:d3:30:
d3:d3:a4:5a:8b:e5:d1:91:5c:e3:f2:b3:a7:17:0b:
93:bd:14:cb:0b:b6:b8:ef:ae:8f:33:a7:ab:d4:f3:
59:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:04:10:52:D9:58:8D:A6:CA:6A:B6:1B:59:FC:4E:C1:A9:E3:7D:D7
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c4:a1:56:96:de:12:1d:65:71:ea:5b:08:cf:9c:ec:bd:fa:
6d:c9:b5:08:0c:6a:ae:51:37:28:95:fa:b5:43:ef:09:13:f0:
0f:6c:4d:3a:76:ea:bb:fe:d2:c7:ef:38:91:bb:f4:4f:ff:0e:
8b:d4:1d:b3:2e:fa:b8:69:15:c9:c2:34:a7:41:c3:01:6a:95:
76:57:9a:5f:2b:1c:0d:ae:aa:4c:32:38:03:bc:a4:57:ee:f2:
aa:a0:d3:e7:9b:a0:1b:55:85:7d:ea:28:99:ce:d2:be:34:58:
c9:e2:96:6a:c2:b0:16:55:ec:c2:51:bc:a6:f4:2c:97:a6:3e:
ab:6b:09:49:fe:54:91:10:ee:0c:10:b9:a8:59:54:39:60:48:
78:03:ac:b7:fe:09:c5:be:b3:98:6a:93:1f:26:82:f9:d0:62:
0a:95:dc:c5:ea:c6:d4:3e:61:55:d6:14:8e:7a:2f:4e:99:98:
4d:05:63:f0:df:1b:45:a9:cc:bb:aa:15:ae:24:60:fa:6f:e5:
46:a7:24:c1:8f:44:d9:99:b8:b6:01:cb:3a:12:68:a9:f1:9e:
5f:b2:f3:42:14:4a:a6:87:97:84:23:0b:ee:d4:13:48:6f:d2:
39:1a:05:4e:09:e1:ea:73:c1:47:b0:f9:fe:6d:04:12:b1:b9:
8e:54:98:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:21:28 2025 by rpki-client