Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier: eWJPPse/MUuh9bHfzJ1kGjN5WL2SmMVow+7NkgDrqRQ=
Subject key identifier: 74:C2:84:FB:DF:40:71:E2:4F:F7:33:77:A4:2D:4C:BC:F5:D5:90:5D
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 0198D54DEF802C47F54B5BF094599727AA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number: 14C9
Signing time: Sat 23 Aug 2025 05:01:51 +0000
Manifest this update: Sat 23 Aug 2025 05:01:51 +0000
Manifest next update: Sun 24 Aug 2025 05:01:51 +0000
Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: Nv6hu3XVBSYzbeE5V3aAb6TcyiYLQ8SIyRsWvihdlDw=)
2: NTq0FDzH2xxPaa-1hxtnePIlEA4.roa (hash: LRFHdSsVugdN6TwKBfGKGPR3Nf4KsaI4iw69J8bmMBI=)
3: jzen_y9MjkJUaSD6dgV7vhjezg8.roa (hash: D4rABI9YVwiue3KhIMfk5XfCTjj00ChB0kZlnVkANPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ef:80:2c:47:f5:4b:5b:f0:94:59:97:27:aa:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: Aug 23 05:01:51 2025 GMT
Not After : Aug 24 05:01:51 2025 GMT
Subject: CN=74c284fbdf4071e24ff73377a42d4cbcf5d5905d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:ea:ee:16:b6:15:43:3e:fe:1e:91:c9:4c:
2e:b4:6d:e2:c2:b2:f2:0c:8b:bc:cb:4a:34:06:ea:
5b:b3:64:90:50:3e:f7:6e:3f:c4:3e:3b:9e:5d:8c:
32:29:66:a4:ec:8e:3e:12:83:b2:64:fc:6e:9c:a2:
17:4e:4f:ca:5a:6e:c1:95:ce:c8:fa:47:ff:b9:bd:
5f:80:b3:09:5b:19:c4:37:d6:04:a0:62:4d:e2:97:
1c:0b:d7:2a:93:ec:45:16:a3:dc:97:13:10:e7:88:
3d:80:75:3e:9b:55:e2:27:8d:0d:6b:fd:a7:a7:d8:
b7:68:08:6e:a1:13:c9:8a:cd:ba:02:30:e1:1e:35:
a5:d5:27:c6:b2:0e:e3:04:8e:06:4a:46:12:83:17:
95:d3:d3:1b:be:a2:78:f1:27:43:0a:d1:0f:c9:cc:
5b:b1:6a:f8:f0:96:8a:db:27:cb:49:d8:4f:51:81:
67:fe:3b:c6:d4:a0:37:c0:26:e8:50:fb:ec:e5:f2:
d9:52:2d:79:cf:5c:83:7e:bd:67:18:2a:59:2b:78:
22:89:fb:54:3b:2f:48:21:cb:59:8d:52:a1:f7:95:
4a:60:e5:94:4f:21:71:80:82:39:eb:97:89:dc:d7:
d0:42:7f:4b:80:01:ba:0e:6f:8c:07:be:5a:2c:02:
6a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C2:84:FB:DF:40:71:E2:4F:F7:33:77:A4:2D:4C:BC:F5:D5:90:5D
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4d:b8:4c:e1:14:a6:14:fd:26:3d:8f:b9:14:d8:b1:75:82:
2a:38:5d:b0:4e:12:79:ad:29:20:43:3c:8c:03:20:c8:c9:25:
ee:36:6a:fd:23:83:1e:c5:44:2a:22:03:61:08:ea:38:88:ab:
ff:cd:5e:a0:26:08:8e:cb:c2:8f:c1:59:86:79:5f:1a:bf:09:
e7:80:42:82:b4:ad:a4:f2:a5:b0:49:f4:df:be:ed:e8:9a:57:
05:9d:0c:db:4e:86:5f:f5:80:2a:32:25:41:cc:d1:29:09:83:
de:47:dc:26:1e:05:fa:53:c6:86:48:43:4c:ba:7e:46:b1:a3:
23:fc:51:4c:b2:10:ab:7f:3f:5c:7a:c9:24:2f:9f:79:01:42:
a5:ee:a1:42:2a:5a:38:32:2b:a0:4a:d9:32:d7:b5:1e:af:e3:
77:ee:57:07:a2:5f:b3:79:dd:18:fb:da:40:f8:b3:97:7d:77:
75:b3:24:20:f0:c2:f8:4d:1d:0e:5f:fd:f1:72:70:9f:11:03:
85:55:4a:98:aa:61:9c:3b:43:29:e9:38:6c:f8:1e:1a:64:9c:
8b:d7:db:cd:66:fd:c5:d2:c8:fe:b3:f1:94:8f:21:c8:09:0a:
36:50:1b:4d:4e:86:32:e9:c9:86:89:6e:61:62:57:42:58:02:
6a:1b:0b:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTe+ALEf1S1vwlFmXJ6oNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMjljMzcwNDYwYmVjNzUzMDEwZmM3ZTY4MzY1YzU3NzBi
ZjQ1ZTQwHhcNMjUwODIzMDUwMTUxWhcNMjUwODI0MDUwMTUxWjAzMTEwLwYDVQQD
Eyg3NGMyODRmYmRmNDA3MWUyNGZmNzMzNzdhNDJkNGNiY2Y1ZDU5MDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSrq7ha2FUM+/h6RyUwutG3iwrLy
DIu8y0o0Bupbs2SQUD73bj/EPjueXYwyKWak7I4+EoOyZPxunKIXTk/KWm7Blc7I
+kf/ub1fgLMJWxnEN9YEoGJN4pccC9cqk+xFFqPclxMQ54g9gHU+m1XiJ40Na/2n
p9i3aAhuoRPJis26AjDhHjWl1SfGsg7jBI4GSkYSgxeV09MbvqJ48SdDCtEPycxb
sWr48JaK2yfLSdhPUYFn/jvG1KA3wCboUPvs5fLZUi15z1yDfr1nGCpZK3giiftU
Oy9IIctZjVKh95VKYOWUTyFxgII565eJ3NfQQn9LgAG6Dm+MB75aLAJqTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTChPvfQHHiT/czd6QtTLz11ZBdMB8GA1UdIwQY
MBaAFN0pw3BGC+x1MBD8fmg2XFdwv0XkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iMzAxOWMtNjZjZi00Zjk4LWE4NTYt
MTM0YzQ3Yjk0OTEzLzEvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iMzAxOWMtNjZjZi00Zjk4LWE4NTYtMTM0YzQ3Yjk0OTEz
LzEvM1NuRGNFWUw3SFV3RVB4LWFEWmNWM0NfUmVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKU24TOEU
phT9Jj2PuRTYsXWCKjhdsE4Sea0pIEM8jAMgyMkl7jZq/SODHsVEKiIDYQjqOIir
/81eoCYIjsvCj8FZhnlfGr8J54BCgrStpPKlsEn0377t6JpXBZ0M206GX/WAKjIl
QczRKQmD3kfcJh4F+lPGhkhDTLp+RrGjI/xRTLIQq38/XHrJJC+feQFCpe6hQipa
ODIroErZMte1Hq/jd+5XB6Jfs3ndGPvaQPizl313dbMkIPDC+E0dDl/98XJwnxED
hVVKmKphnDtDKek4bPgeGmSci9fbzWb9xdLI/rPxlI8hyAkKNlAbTU6GMunJholu
YWJXQlgCahsLdQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:07 2025 by rpki-client