Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier: fVhmRkdB2oh+O//c8GlL4aSUUSqXVgigKgMxF4pTS70=
Subject key identifier: 01:70:D1:11:43:5E:84:03:DB:07:39:3E:FE:71:D1:CF:65:1C:F0:A7
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial: 0198D7A8C992D85E76C3EAD2584F7BBE1537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number: 044F
Signing time: Sat 23 Aug 2025 16:00:19 +0000
Manifest this update: Sat 23 Aug 2025 16:00:19 +0000
Manifest next update: Sun 24 Aug 2025 16:00:19 +0000
Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: lE0/tMefpjy2wybfkKjoQcAXrr+7vwXf5ddzRYo7j1w=)
2: PT68lLdfHWq61L0p7mbOXLRwHhw.roa (hash: A4keDsv/7uOGmjAx+h6C5RlssIOEsmTqNcUP9OgH66s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:c9:92:d8:5e:76:c3:ea:d2:58:4f:7b:be:15:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Validity
Not Before: Aug 23 16:00:19 2025 GMT
Not After : Aug 24 16:00:19 2025 GMT
Subject: CN=0170d111435e8403db07393efe71d1cf651cf0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:e5:b7:47:cd:b3:e8:90:e8:66:a3:6c:c8:
e0:ff:f4:bf:89:78:1d:ea:a7:c2:64:27:fa:66:ce:
6b:64:6f:ce:a6:95:55:5f:18:d2:52:f8:a6:11:f8:
76:7a:88:bc:c9:2d:f0:ae:78:10:54:69:a7:22:8d:
43:e3:8b:99:0d:34:0a:9c:5c:63:ad:d1:93:b0:29:
6f:d5:43:92:a0:50:64:71:7a:11:55:dd:a0:c5:c5:
ce:1b:79:37:15:89:b8:25:45:28:ce:3c:ca:84:34:
df:dc:8a:7f:26:0e:85:50:3e:16:a8:6a:80:e8:d5:
40:f5:11:9a:ae:81:46:01:74:6f:40:9f:80:68:73:
33:30:0a:95:0d:87:48:56:51:44:7f:da:6e:df:66:
1f:69:07:cf:55:bc:88:df:db:7d:e5:e0:83:58:3a:
72:e5:3f:02:e2:8b:cd:3e:42:e1:22:30:9f:c3:43:
1b:8e:04:0f:12:54:82:d5:43:6f:5c:98:c7:4c:83:
d0:23:91:9a:c3:f5:87:9c:1c:4a:27:70:5f:9a:42:
7c:d5:64:4c:e8:4a:d1:ae:48:e4:cb:f2:71:6a:97:
12:6f:8f:85:b2:61:57:43:dd:84:0e:29:7a:2b:0c:
ce:2b:1a:ea:9a:08:f4:d8:85:c2:42:fe:e8:9f:f3:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:70:D1:11:43:5E:84:03:DB:07:39:3E:FE:71:D1:CF:65:1C:F0:A7
X509v3 Authority Key Identifier:
keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:73:0e:a1:64:52:6a:b6:60:59:db:41:9f:ae:3b:6d:57:1b:
7c:a2:ef:28:cb:48:16:48:9e:93:7e:f1:7b:25:e5:47:5b:cf:
9c:43:f9:3e:64:e3:43:68:30:b5:d4:d0:ae:09:96:a0:62:49:
92:80:7a:d3:5a:63:66:7f:ea:d3:82:c4:5c:97:fc:50:99:a1:
a9:99:c6:b4:44:dd:7d:6d:d9:70:9b:a1:63:ac:65:88:c0:6a:
1e:3a:e8:46:5a:56:b0:b8:68:b2:76:0c:a5:eb:7e:ba:eb:a5:
3e:03:b3:84:b8:c4:64:9b:1b:7f:68:c4:8f:56:13:04:42:33:
d0:15:c2:c7:e6:51:3b:75:70:14:be:20:14:db:4c:95:d3:ec:
52:43:df:84:2f:6b:19:df:68:dd:50:7e:14:4e:82:b6:b7:ad:
b2:f1:6e:59:45:1c:6d:f2:97:92:d6:48:5f:08:82:bd:04:8d:
ab:04:7c:b3:e0:58:c7:93:30:a1:e1:ef:43:f5:c9:29:4d:5d:
49:b5:54:4f:13:36:73:44:0f:4b:a1:a4:56:37:44:a6:a2:31:
ca:ee:51:4b:81:c9:eb:d9:01:df:57:fe:29:b7:f9:f4:30:27:
08:8d:75:bb:a8:d7:32:ac:fc:07:9c:f0:1b:37:76:20:58:5a:
ca:04:38:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:11:43 2025 by rpki-client