Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: vdYF2TpF8K7fXP8Jp6MMWZpUgvslRiSvbv/D54QBCyo=
Subject key identifier: 82:62:B6:7E:C8:EA:FD:78:88:36:45:7F:D3:84:20:85:05:7D:97:41
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 0198481BF9C3A88B1FC8C0C6AE19619FC453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 1016
Signing time: Sat 26 Jul 2025 19:00:49 +0000
Manifest this update: Sat 26 Jul 2025 19:00:49 +0000
Manifest next update: Sun 27 Jul 2025 19:00:49 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: mshDy4QtxrmmnQt0g0nIlaMgHSdBU+6kKSDIjcd0Bjc=)
2: a7DppR8a_zPl6np7nOEfJXryakA.roa (hash: wU3AghxluRA4zWm18LLUP4eLKYWVDAXfgoTV1mFNROs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:f9:c3:a8:8b:1f:c8:c0:c6:ae:19:61:9f:c4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Jul 26 19:00:49 2025 GMT
Not After : Jul 27 19:00:49 2025 GMT
Subject: CN=8262b67ec8eafd788836457fd3842085057d9741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:a3:cb:0f:a9:e7:7c:1c:a5:ff:b0:21:ce:
91:a7:36:cc:58:77:b8:38:0c:88:79:14:a9:21:b7:
cc:17:c0:96:53:48:fb:30:29:6e:22:21:44:ed:71:
10:ed:22:dc:b4:14:c8:ca:48:b2:55:7f:e3:db:c0:
6a:f0:54:5e:44:46:ee:cf:31:46:2b:d6:84:19:c9:
f1:9b:96:86:35:6c:d3:0d:b6:03:7f:e2:82:88:c1:
93:f7:ae:7d:7c:3c:bb:25:39:30:bb:cd:85:91:3c:
fb:7b:e7:dd:0f:bb:16:51:29:6f:00:cd:dd:cb:2d:
06:cc:e3:f4:53:00:c2:04:8e:d1:45:5e:37:c2:ab:
7e:e6:07:06:cb:68:fe:00:d6:9c:e6:55:29:29:8f:
b6:51:3c:a6:93:d1:8b:6b:a4:6d:82:70:4c:ef:1f:
d8:bc:59:13:7e:2d:f7:d6:2d:60:7e:3a:2a:d1:2b:
c0:2e:6c:d2:e0:a8:bc:ce:23:a2:6a:31:a3:fc:02:
0f:2d:ce:53:20:2a:7e:09:c1:c2:c0:70:10:05:88:
70:3d:75:e8:f2:04:18:c6:6b:4c:ad:68:ea:12:2f:
28:11:3e:ed:c1:03:be:08:d6:8d:8f:42:d9:ec:38:
c3:03:ba:3c:0f:28:4d:f2:c8:c4:52:56:6d:19:53:
af:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:62:B6:7E:C8:EA:FD:78:88:36:45:7F:D3:84:20:85:05:7D:97:41
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:01:ee:29:aa:44:57:2d:3b:03:59:fb:b0:1e:9e:bc:57:de:
f8:b0:7b:04:20:52:b5:03:78:d8:8d:e2:40:41:2e:f4:8e:c7:
a1:03:68:64:05:53:53:b8:14:26:a1:f4:7e:f2:a5:97:5a:f0:
60:92:43:d8:bf:3a:73:84:d1:dc:93:54:2d:58:d1:c6:ce:95:
04:f1:ec:a8:b3:98:70:fa:70:0b:24:aa:91:0c:d7:aa:dd:bf:
7d:d4:11:c6:fb:c5:4a:c1:3a:56:13:1f:6a:ef:bb:b3:d4:5b:
a1:30:7f:94:3e:88:c3:fa:8e:a3:1b:75:41:09:e1:69:5e:fa:
28:8b:7e:6f:bc:6a:6b:20:06:21:b8:35:77:41:b2:65:d7:50:
7d:86:41:5f:db:e6:0c:a0:5c:3d:4e:34:cb:55:e1:e4:72:2a:
8b:2a:d6:f8:3a:07:73:44:9e:32:b6:f0:6e:b6:85:7e:9c:0e:
3b:58:b6:11:47:59:f6:b3:1d:90:ac:c2:c0:4a:7d:a7:d4:0e:
fe:4e:9d:db:08:87:b3:41:87:29:27:8a:e9:0c:55:d5:91:c0:
0d:ab:86:21:73:ff:c6:19:f0:8b:08:1f:22:79:21:0a:b5:45:
c2:56:db:d3:d1:ff:0e:4a:d7:f3:e1:9f:87:7d:ed:c1:38:f4:
88:f7:db:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:55:02 2025 by rpki-client