Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier: AT0r6fdCh6rAE/vYTNIM+YraTjfINFAjBoIxE8FSGsU=
Subject key identifier: E5:A3:1F:2D:CD:66:BD:12:39:AE:E8:8E:CD:08:9F:BD:F5:17:12:A5
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 019855DFD167354CA1C05DEFE35603E8D211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 11:09:47 +0000
Manifest this update: Tue 29 Jul 2025 11:09:47 +0000
Manifest next update: Wed 30 Jul 2025 11:09:47 +0000
Files and hashes: 1: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: h9fPUoZVxysc18a0r96DQAVqyj324eowCHnzPIC8BDg=)
2: I9GqI9GxRbg5gyNw2oYeQXtgJJg.roa (hash: IdZbo1C2DnUJiJSpOjjTPKnvp3frNBJygc4FMjTeWHU=)
3: OJHrSjDn0A0xOyeisC7fOP_zy4g.roa (hash: 4mrlovUy+cBI29r4SEJkRQxz3HoEwjM6nDvfGvlxWBU=)
4: ie70DJhDrGYxNNPSAG6BpAZrtxY.roa (hash: HiOIeBO8KrrORXl70BQK8AAzSZ8zCob2hQpjThQB7t8=)
5: tr4Wz-5rQhPo47mTFs_LgvHDl8s.roa (hash: PZGVkTuh77FvBlVCnDa38AVdteMzJ1COvOQXzBoIS0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:df:d1:67:35:4c:a1:c0:5d:ef:e3:56:03:e8:d2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Jul 29 11:09:47 2025 GMT
Not After : Jul 30 11:09:47 2025 GMT
Subject: CN=e5a31f2dcd66bd1239aee88ecd089fbdf51712a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:92:c5:e7:e2:e0:e6:87:8a:25:44:d3:72:72:
35:11:e6:e5:a5:d6:42:f3:d3:21:38:66:33:69:ca:
52:4b:e9:41:35:1c:bc:5d:88:18:98:fa:50:01:dc:
3b:f2:bd:b7:79:95:55:2f:75:b8:a6:4b:56:9f:dd:
b3:8d:76:10:e9:14:34:d3:4c:ee:41:b4:8e:95:bc:
f0:eb:85:b6:18:42:34:78:8f:c8:71:d5:48:fb:9a:
b5:5c:2d:d7:b5:77:66:99:62:27:c2:cd:59:9a:4e:
46:98:9b:2e:d2:79:9a:56:d7:e5:25:47:21:6f:43:
60:40:a1:d8:21:47:0d:bc:4d:7f:5c:70:d8:97:41:
64:e5:6b:cd:7e:99:03:b9:6c:9c:03:27:f6:05:c1:
91:64:08:5f:02:9f:2f:8f:c3:75:a9:bd:e3:e6:04:
c4:bc:c7:70:d3:53:72:7c:dc:18:34:7e:35:0f:93:
eb:91:dd:35:86:0b:bd:17:94:53:4a:ec:bf:24:47:
f0:e0:d2:37:c3:b8:be:32:a3:db:09:8f:97:8e:34:
b0:3c:53:a6:1b:26:5c:cf:4e:ad:3f:e4:3a:54:df:
5a:0d:3f:1e:78:76:7b:69:6e:78:b0:f6:f2:f6:f3:
bc:ed:9e:29:5c:44:c8:f4:4b:7b:98:89:44:3d:56:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A3:1F:2D:CD:66:BD:12:39:AE:E8:8E:CD:08:9F:BD:F5:17:12:A5
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2b:ed:31:92:1c:ae:38:15:33:de:1e:9d:18:e3:07:3c:00:
b6:a3:83:05:8b:ce:59:06:95:57:52:c3:ad:68:d4:13:de:ff:
70:fb:31:33:0c:6b:7c:42:b3:52:74:af:5b:9e:ef:4a:ab:3c:
ca:61:56:eb:d2:ce:02:0a:01:ea:ca:51:26:35:b5:fe:55:02:
1b:5a:99:03:96:df:d3:c5:ea:bb:b7:44:c3:02:3d:50:9e:66:
3d:00:fe:53:72:48:87:88:c8:56:0c:ee:f7:0c:f5:5d:89:5d:
19:d7:2e:5f:35:73:a9:60:cb:2d:1f:97:33:4b:ab:c1:87:e1:
34:9a:06:8e:74:b7:1e:37:b6:2f:7c:88:e1:8d:b9:e6:e8:98:
f0:52:eb:1c:c6:f2:62:94:ee:e5:04:f0:af:55:a6:69:de:17:
0f:bf:96:0d:94:89:d7:ba:a1:7c:21:8b:06:c2:e9:70:55:ce:
1f:10:e9:e6:c5:d1:8b:d8:95:95:a9:d6:bd:53:ed:4f:40:1c:
c6:c7:c5:16:28:c1:d3:8d:a7:61:bf:a1:9c:ae:67:0c:c0:dd:
04:8b:a9:2b:7d:11:8d:7e:b1:7b:31:73:04:17:fe:32:69:c7:
82:34:89:2b:47:74:54:cb:56:dd:e1:f6:dc:0b:51:55:fb:a1:
61:4c:08:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhV39FnNUyhwF3v41YD6NIRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMGI2NjNjNDVkN2JjMjcyNGQxNjg0ODUwODc1ODFlMTQ0
NDhmYjYwHhcNMjUwNzI5MTEwOTQ3WhcNMjUwNzMwMTEwOTQ3WjAzMTEwLwYDVQQD
EyhlNWEzMWYyZGNkNjZiZDEyMzlhZWU4OGVjZDA4OWZiZGY1MTcxMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75LF5+Lg5oeKJUTTcnI1EeblpdZC
89MhOGYzacpSS+lBNRy8XYgYmPpQAdw78r23eZVVL3W4pktWn92zjXYQ6RQ000zu
QbSOlbzw64W2GEI0eI/IcdVI+5q1XC3XtXdmmWInws1Zmk5GmJsu0nmaVtflJUch
b0NgQKHYIUcNvE1/XHDYl0Fk5WvNfpkDuWycAyf2BcGRZAhfAp8vj8N1qb3j5gTE
vMdw01NyfNwYNH41D5Prkd01hgu9F5RTSuy/JEfw4NI3w7i+MqPbCY+XjjSwPFOm
GyZcz06tP+Q6VN9aDT8eeHZ7aW54sPby9vO87Z4pXETI9Et7mIlEPVbnwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWjHy3NZr0SOa7ojs0In731FxKlMB8GA1UdIwQY
MBaAFN0LZjxF17wnJNFoSFCHWB4URI+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQt
M2I5ZTNjOGEyZmNhLzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQtM2I5ZTNjOGEyZmNh
LzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCvtMZIc
rjgVM94enRjjBzwAtqODBYvOWQaVV1LDrWjUE97/cPsxMwxrfEKzUnSvW57vSqs8
ymFW69LOAgoB6spRJjW1/lUCG1qZA5bf08Xqu7dEwwI9UJ5mPQD+U3JIh4jIVgzu
9wz1XYldGdcuXzVzqWDLLR+XM0urwYfhNJoGjnS3Hje2L3yI4Y255uiY8FLrHMby
YpTu5QTwr1Wmad4XD7+WDZSJ17qhfCGLBsLpcFXOHxDp5sXRi9iVlanWvVPtT0Ac
xsfFFijB042nYb+hnK5nDMDdBIupK30RjX6xezFzBBf+MmnHgjSJK0d0VMtW3eH2
3AtRVfuhYUwIvA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:47:19 2025 by rpki-client