Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier: hA3zpknjEyJ6dBi+tAcWzQwO90nOYWMaWsQ+aKaC1Kc=
Subject key identifier: F1:4C:37:6B:AB:50:95:BC:96:D1:61:4D:C3:F8:AE:95:61:28:5C:71
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 01984BC16791FE139E97A81CC4B695F37588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 12:00:22 +0000
Manifest this update: Sun 27 Jul 2025 12:00:22 +0000
Manifest next update: Mon 28 Jul 2025 12:00:22 +0000
Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: imz/LOhOEdAaMZXaMJeFckpz2iY24E4hkQfKw/TrztU=)
2: Pzz9-39B29Zan_AKRyiM2W7cTbI.roa (hash: 2gaPpnMFBn7PDm+0BqVVwSzuzPaAOOzR64kAX25LHLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:67:91:fe:13:9e:97:a8:1c:c4:b6:95:f3:75:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: Jul 27 12:00:22 2025 GMT
Not After : Jul 28 12:00:22 2025 GMT
Subject: CN=f14c376bab5095bc96d1614dc3f8ae9561285c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:46:ba:92:41:83:2e:8b:5e:82:32:42:eb:
1e:31:0a:70:6f:38:61:04:da:8c:21:69:5a:2c:ad:
78:dc:63:0e:eb:41:40:44:0a:af:01:7a:7a:16:d0:
7a:f7:f0:ac:e3:7f:4c:12:28:1d:c4:2a:19:1a:a7:
b8:c3:9f:b8:00:1b:1c:d8:bf:ad:54:fa:f9:ff:c1:
d1:d1:bd:da:59:be:c2:97:a1:61:bc:44:3f:d9:dd:
c6:61:c7:6b:b9:fd:0f:15:c1:df:ca:6a:3d:90:a9:
56:6b:4a:f8:54:be:05:8d:d3:01:ec:62:a6:22:01:
5d:64:4f:4b:02:ad:e7:3f:95:99:86:f0:e9:2d:d3:
22:0b:87:d0:b2:08:5b:41:93:21:a0:b0:f3:a9:6c:
13:eb:a0:96:71:67:bb:b6:72:49:60:2e:09:e9:85:
73:8d:23:5a:ef:26:f1:ff:57:f9:87:23:c5:43:9e:
7f:12:f0:8d:cd:b8:79:cf:a9:36:74:25:85:34:11:
47:19:83:97:62:a2:6a:93:4b:2a:15:d9:4a:cd:58:
a0:2a:d4:c3:3b:44:16:0d:fd:6f:f7:79:cf:7e:17:
78:6e:51:50:e7:74:09:2e:87:c2:2e:8b:26:27:ed:
30:5e:37:90:49:79:14:f9:53:07:23:98:11:33:c0:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4C:37:6B:AB:50:95:BC:96:D1:61:4D:C3:F8:AE:95:61:28:5C:71
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:50:b3:41:61:c3:3b:d2:0b:a1:60:33:0c:8c:37:5b:e6:d0:
e9:61:c0:82:57:5f:54:29:6a:92:1a:ed:2c:7e:a8:35:c2:f5:
5a:b5:c8:10:ac:1f:1c:eb:15:69:52:5e:69:92:a8:b0:0d:53:
7d:df:07:f3:59:96:e5:a2:a0:bb:d7:46:f1:73:67:81:0a:ee:
4f:c3:13:2a:40:70:e7:a3:5c:55:8f:01:e4:1b:78:82:61:e5:
86:dc:8a:b6:eb:9c:ce:b8:ca:e5:dc:7a:fb:80:91:13:f5:ee:
bc:87:88:bb:de:01:47:53:69:f9:ce:2a:c9:50:28:19:03:3a:
67:f1:ac:c8:87:7e:a8:67:56:9c:19:dc:fd:4f:14:ce:96:1d:
a0:ac:bd:a0:f5:28:03:94:1d:da:78:a9:f4:2c:79:bb:3d:d7:
f4:d8:7b:f3:26:c5:a2:1d:b4:5e:c5:59:29:26:07:06:78:42:
a3:a4:b0:e6:0e:98:f7:eb:c7:0d:a0:2e:40:e8:a7:56:88:d0:
47:80:2e:1b:82:8a:07:d6:74:bc:c9:40:d4:78:4f:b8:47:8f:
72:de:d0:15:01:bf:d5:66:03:4f:6a:a5:51:b6:86:a1:58:bd:
0a:8d:1e:44:0f:1c:57:d4:27:3d:68:d3:d3:a2:6b:24:e1:98:
eb:b3:66:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:54:21 2025 by rpki-client