Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: A7qjF9caNqODTPqwFyT1byez2aaWaLBpFc02j1K7tvQ=
Subject key identifier: 41:9E:41:22:DE:5C:BE:2F:97:37:2A:68:29:26:9F:7F:FD:0A:EF:92
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 01984C9D19B8D9E7A56FA87460E93D49ECB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 16:00:20 +0000
Manifest this update: Sun 27 Jul 2025 16:00:20 +0000
Manifest next update: Mon 28 Jul 2025 16:00:20 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: szFSndvMaJbGwuSjdFdXFLqEaySEdGduCc6LeDXMd5c=)
2: 9euEZiQBZa0KQy87mhddaAGMyJs.roa (hash: SlkEYhw31htGhY3rwyORB+KNW056wx1mf03bV0slrXo=)
3: PbQAq4tBfBzJf67NNR29Pj0FkmA.roa (hash: 68zQoRFiAUVZyRagTzVHGcIdd/jEkcY9EEgWfXz5qFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9d:19:b8:d9:e7:a5:6f:a8:74:60:e9:3d:49:ec:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Jul 27 16:00:20 2025 GMT
Not After : Jul 28 16:00:20 2025 GMT
Subject: CN=419e4122de5cbe2f97372a6829269f7ffd0aef92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:da:e0:3c:b7:a2:55:96:e2:d9:cc:be:b2:fd:
cc:47:f8:27:4d:ee:8c:6a:90:d7:6d:28:1d:25:d5:
c6:53:85:93:68:5d:75:a3:e4:a6:c5:10:fd:ee:9c:
d8:9c:3e:a2:b8:e8:a4:63:8c:ef:f6:15:f1:27:09:
ff:06:ea:ba:34:fd:37:c9:36:67:49:c8:5b:f7:eb:
3c:80:c7:9d:e1:29:f8:c2:5d:89:33:46:2e:02:46:
3c:9d:4d:ee:ac:36:51:df:3d:e8:d8:7d:fc:bb:68:
7f:5d:df:31:4d:9e:bf:dd:e2:e5:f6:35:6c:a7:ea:
a5:6e:33:74:86:68:dc:b5:94:92:c3:ba:d3:14:ca:
5b:dc:be:07:1c:77:e4:67:8a:c1:c6:26:47:f9:4d:
d0:f9:87:82:59:82:34:03:2b:6d:96:e8:52:f2:79:
3a:ec:07:58:33:04:0f:95:a8:c2:a3:cc:e5:cb:ba:
8c:b8:ae:d1:60:52:9f:6c:22:3f:cc:37:3c:98:46:
cc:12:ed:db:b4:73:fa:1c:dc:9c:da:65:93:b4:a9:
73:ba:1c:70:36:9b:da:17:95:81:1c:cb:f2:31:17:
e0:7b:b3:ac:a0:34:83:97:22:65:df:46:0d:ad:a2:
23:25:bc:fc:32:65:80:f2:c3:39:16:4d:f4:97:c8:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9E:41:22:DE:5C:BE:2F:97:37:2A:68:29:26:9F:7F:FD:0A:EF:92
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:51:78:ae:e9:bf:4a:3c:ab:cf:16:32:57:59:27:05:11:8a:
c4:27:72:97:ec:cc:f5:33:4e:22:f4:37:dd:ae:2c:17:3f:e3:
bb:ea:c9:14:fd:e2:f4:21:81:13:fc:2d:d0:50:be:81:84:8c:
96:5a:05:c3:7c:88:1c:d6:65:d9:74:be:c2:46:de:16:20:59:
b3:22:0b:7f:c3:2f:cc:7f:91:12:9b:5c:67:33:7a:e5:69:66:
27:91:56:b1:0e:aa:6f:df:e2:75:ba:e2:1e:0a:cd:92:9e:76:
6f:8a:46:9c:a1:83:0c:88:0b:d7:a9:1a:19:dc:c2:6d:3f:64:
e8:9e:11:32:e5:f3:b2:87:e5:95:99:99:9f:d6:d4:9c:9f:31:
9a:75:c7:94:fd:d0:e9:f9:84:1a:33:53:a8:e6:7f:04:99:bd:
4a:fe:58:b2:d5:79:70:a1:b0:df:60:31:96:c0:5b:56:65:7e:
2b:07:2f:3b:33:5f:63:a1:8c:f4:c5:21:c1:1c:6f:5a:90:9c:
25:cf:b0:e4:7c:b7:41:1f:d1:f2:d5:74:e1:80:1c:3c:42:b7:
ad:0f:e3:cf:a9:83:c3:d3:b7:36:72:47:1f:c9:60:8d:55:21:
1e:aa:3b:6d:ae:7d:e8:b4:24:4c:23:11:d8:5e:5d:98:71:47:
4a:c1:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:55:10 2025 by rpki-client