Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: ZdIwXQJXsOwpt9gZ01m53mSTOv9tTWDWEEATeNRE0lw=
Subject key identifier: 4C:E4:3D:19:56:5D:0E:01:8A:48:EA:78:FA:E9:5F:CD:7C:6B:9C:DF
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 019827B56C816F9AB810CCCBEB37ABA3A7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 14
Signing time: Sun 20 Jul 2025 12:00:57 +0000
Manifest this update: Sun 20 Jul 2025 12:00:57 +0000
Manifest next update: Mon 21 Jul 2025 12:00:57 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: HFyyIETP96SEnKb73+pRTsmma5lzaA0vMwcA99QLXlA=)
2: Q4iWZ496HCNmYZBIWBOYyxR29Uc.roa (hash: 7wrmL3IIhgsOUmrN36LQ1NncM+5WHq2SxfG9P1s/Hs8=)
3: elJZVsJM-cu186hJqa3wLJ-HvIY.roa (hash: ARy/RhAUZB3gjAcZcQ/EM7MONeLO821NzwpDjV1Ze2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:6c:81:6f:9a:b8:10:cc:cb:eb:37:ab:a3:a7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Jul 20 12:00:57 2025 GMT
Not After : Jul 21 12:00:57 2025 GMT
Subject: CN=4ce43d19565d0e018a48ea78fae95fcd7c6b9cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:d7:8a:51:f9:10:4a:45:3e:57:c5:e3:d0:
a6:cb:93:98:9f:d0:a3:4a:49:f6:3c:9b:89:17:36:
d6:be:27:cb:a6:42:2c:22:b8:6c:ef:44:8d:8c:9b:
7f:bd:6a:f5:95:df:46:a6:32:49:fe:98:56:9a:6f:
c7:83:8b:d0:6a:82:a6:2f:48:0b:7d:05:47:bf:a0:
f6:77:d0:77:d1:0b:e3:a6:2a:47:08:4d:2b:fa:e9:
10:02:29:bc:4a:46:d7:ea:58:a3:4c:1b:9a:ce:e6:
75:7d:46:9c:ce:c7:0f:e4:2e:f0:f0:86:41:95:d2:
fa:56:a3:c6:78:4f:ce:85:1f:ed:1c:5f:37:49:81:
06:fb:8f:a6:2e:db:0a:9b:e1:9e:e8:fe:e1:3e:75:
9b:00:98:e6:d1:b0:15:e8:e6:be:47:21:51:8b:bc:
f5:60:83:1c:c5:b0:49:8f:a7:4e:5a:69:0c:26:b8:
f4:04:aa:c1:5a:c0:7e:87:d1:90:68:50:c7:47:76:
52:ad:d6:46:c3:e6:11:46:77:ce:fa:71:b4:65:cf:
3e:37:63:8d:3f:a7:6b:cd:a8:00:72:02:1a:fa:04:
cc:7e:bc:fc:d1:50:ef:8b:3c:24:d1:34:9d:c2:73:
2d:0e:9c:9e:25:a3:0c:17:d0:26:6a:8d:d7:d9:14:
11:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E4:3D:19:56:5D:0E:01:8A:48:EA:78:FA:E9:5F:CD:7C:6B:9C:DF
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a7:bd:ab:13:07:4f:d2:76:9f:44:d7:6d:e2:00:87:4a:ae:
58:ec:97:ea:b8:2c:a0:91:29:74:a9:11:9a:62:45:0b:2e:16:
ee:da:17:42:78:1a:d3:00:fd:18:e4:5a:24:bf:c7:14:22:ec:
0a:86:e1:24:02:a9:36:6c:68:3c:43:e3:fd:07:00:9a:cf:3e:
b8:2f:50:d0:5b:ee:8e:63:40:50:66:9d:a9:58:72:68:f3:4b:
e9:29:50:92:17:a0:f8:01:07:a1:55:92:7e:98:3e:9f:2e:26:
33:66:75:50:b6:c4:03:75:57:52:c8:18:9c:b8:2c:d6:e7:8d:
d5:2b:98:f1:9b:7c:2c:96:33:0e:95:04:59:d2:f5:7e:f8:da:
5b:eb:47:7a:be:1a:90:8a:c0:0c:64:2b:3b:4b:5b:85:c3:ab:
50:4e:ab:2e:b9:13:8e:1d:50:d3:b9:d8:22:f0:6d:b2:a7:93:
1c:d3:bd:f5:82:27:37:2b:95:6e:5c:98:0f:07:7d:ef:b5:ec:
19:ca:f0:d6:c4:ee:4a:29:0e:74:4a:83:4d:47:97:ae:f8:8f:
51:1c:e6:a5:d7:b7:a2:32:3a:e5:92:31:43:4f:80:56:31:f5:
b7:b5:fa:da:7a:a9:db:30:6e:18:58:82:f5:8d:fa:77:66:2a:
40:6b:8a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:49:35 2025 by rpki-client