Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: gISXyWW8QqYXNjI5qu40qXwp7jDG6OkADRgfan5BoPE=
Subject key identifier: DC:43:09:7D:92:33:83:0C:09:EE:5A:28:FA:61:45:04:76:05:A0:F1
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 0198D66151575403F74C3F1579FA9EEED876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 1665
Signing time: Sat 23 Aug 2025 10:02:38 +0000
Manifest this update: Sat 23 Aug 2025 10:02:38 +0000
Manifest next update: Sun 24 Aug 2025 10:02:38 +0000
Files and hashes: 1: 0Qls5JO9jjLXQGK9B40PajGKbpE.roa (hash: IJ0z/46nnzhP5+ihXIdT4Fm5/4uAlVBNSZ2/pLgDmrQ=)
2: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: XmOv3OlQ/qQ5tRFtxgBNzkwcZHKRg4vy80nvQ9e0R0g=)
3: 6vn0S84Of3Am641RtQSWgEcI8LQ.roa (hash: liXU+EaS34eLz4h7mt5PwqdMf8bXjU0VdoViqn9V7yA=)
4: 8CNNYBbzQiDFPTM1tjqp5lUESM8.roa (hash: FKMYJ+6HiuRFIY6sbk4LB3mHseE0YsFT5neIU8ZSV0A=)
5: SgwPvwknub36baQ9KcDiF10XVjg.roa (hash: AqBX/OOtLCRwId7Bx3Diq3oyJG6vd4oLaGxEgTaatfA=)
6: VajIGedTAEjBNV3b8yhI3Gm_wwY.roa (hash: zWXkCVS1+asFBr2Z3nZVK8HEU5fThFspnuVO3DjbBl4=)
7: goC_YpQrwJcU48WyzOg3OlsUAbY.roa (hash: OHpeanfXRy8bamPYQwO5dLykWIe4C63dtCxwNHxZdBc=)
8: lXMs99__wPFL_tQdoxzgPhccZK0.roa (hash: OuWROGz9NUYwdhgN+POUZ2OWYBha2GAUM0PW+Sf4wFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:51:57:54:03:f7:4c:3f:15:79:fa:9e:ee:d8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Aug 23 10:02:38 2025 GMT
Not After : Aug 24 10:02:38 2025 GMT
Subject: CN=dc43097d9233830c09ee5a28fa6145047605a0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:db:40:95:88:f6:ba:b1:57:6e:28:96:e2:
09:bb:1d:e9:42:aa:04:4d:99:fb:d9:66:55:ba:ca:
07:c5:fa:42:0e:a9:40:f6:22:ef:e2:d3:2c:cd:2e:
f7:fb:90:52:90:5e:a2:2c:b9:b2:fb:cb:60:a6:09:
0e:11:45:f0:3c:f8:96:84:be:a5:1f:15:72:74:dd:
9a:0b:e7:68:a1:87:d6:23:a1:4f:dd:81:3b:f4:aa:
00:bd:81:55:0e:25:06:85:af:53:b9:68:f5:23:f7:
7e:3c:25:76:5c:f1:7f:cc:0c:7a:0b:12:a1:8e:2c:
e3:a0:f1:74:54:2f:85:34:b2:9b:ec:22:7b:01:c5:
25:53:fd:ca:4f:0e:5d:42:d7:23:80:31:61:72:6c:
23:34:3d:1b:57:4c:a7:94:a3:41:ea:f5:e6:31:85:
6b:1f:e5:41:c3:7a:74:e3:2a:1d:1d:7c:8b:fe:a6:
27:82:ee:a7:98:c3:7d:01:94:08:51:ed:b4:5d:cc:
1e:cf:be:af:7f:be:ff:39:9a:fe:27:46:b4:dc:ee:
f0:f4:9d:4c:79:4d:94:8d:fa:15:d1:34:b1:4a:7e:
54:a7:96:0b:9f:54:28:8e:d4:35:4c:ec:79:e9:cf:
cf:63:08:d6:1d:f5:54:b1:e8:55:93:48:dc:1f:7e:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:43:09:7D:92:33:83:0C:09:EE:5A:28:FA:61:45:04:76:05:A0:F1
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b4:1e:5d:51:dd:ae:61:3c:0e:be:63:83:6f:7d:d0:75:fb:
25:aa:57:c0:9e:5e:cd:74:27:79:44:30:ce:a1:eb:2d:bb:b3:
21:c0:52:13:88:49:eb:a8:de:01:46:c4:d4:15:18:66:fa:c4:
cd:ae:eb:fb:87:7b:d3:7f:25:08:ae:93:95:ef:85:fb:b1:a0:
51:64:f6:92:91:ad:98:1b:1b:d8:09:15:f8:6b:95:b5:b2:63:
06:18:70:47:76:dd:45:86:61:9e:6d:97:af:20:0a:a9:b8:26:
b3:fc:d7:d4:14:d2:8a:3a:ca:1a:16:91:c7:bb:c5:f6:ad:4b:
82:c9:92:fe:91:46:9a:b2:23:ab:61:c2:d4:f5:a4:c0:c0:e7:
a5:73:a7:2b:ac:82:e5:1a:3a:4e:f6:d2:a5:97:f9:22:cb:d0:
0d:30:3f:4a:58:b2:ba:f9:82:8f:58:4d:d8:1b:b1:90:b5:30:
a7:6b:5a:19:c4:e5:38:cf:d2:96:b7:87:57:26:d2:f3:ac:aa:
10:c1:fa:7f:ea:47:6c:4b:55:51:8e:bd:21:d8:bb:3b:bc:00:
3d:29:00:9e:da:6b:ec:35:58:0a:73:ae:a4:9e:64:7d:76:c7:
0d:c5:52:22:f9:1e:93:f0:66:f6:1d:be:03:b7:5e:88:6f:1a:
45:b8:5f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:54 2025 by rpki-client