Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: 3vxNKcVLzRRaiTGK3WX5BENZ2DZDAZG6gVG5e3UJ5gw=
Subject key identifier: EC:8A:2F:D6:C1:70:46:43:C2:85:96:34:FA:C0:87:1C:A9:B9:99:2A
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 019849D310420298EBD08A386FB5BDE36ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 133E
Signing time: Sun 27 Jul 2025 03:00:25 +0000
Manifest this update: Sun 27 Jul 2025 03:00:25 +0000
Manifest next update: Mon 28 Jul 2025 03:00:25 +0000
Files and hashes: 1: 3HTozQB4pcsucL9eexzvUMqz-88.roa (hash: p8l9H8yiS+tCWDGhSt8TqxKK4BPlsy+wIY5igUPwFNU=)
2: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: EzElRrhZLAMLZHNJC9TImtsBVM/5MXWLfu5GP/aIxl0=)
3: GBhjKbS-fcKacs4QagSv_dPJry4.roa (hash: z+hDh/AwHXwEXvEpHMWmz7Nj3R8e4I8tmHqYFBmRwRQ=)
4: I_q4haHSQ5-iSHbhiDxn8LO10n0.roa (hash: rR8MdnfYv9DYhofCAQL44jv965jNwY7cLv2/tA4Lg2A=)
5: cdhvQ3G9D22hzZ35uWHLO4DK-b8.roa (hash: 9/hDVeqHVKKGEQirCvU77EziyJeBYbpOSUraYbA1sQI=)
6: icjgdrZ-2bYy0vmLkXN3ZejcMO0.roa (hash: BhIg1YAcMIYOB5H79uWHhrjxoemSR0rVkY+hQV1/Imo=)
7: qNl-Q8HhmrUArxLKQehroWC5qDc.roa (hash: 9pycVyvA/LfKV0R0Bhd4fllbZltDwLcpn1H2WIOi7gw=)
8: tgoPg8gJ1wgYlvzK_ZhaNvMswpk.roa (hash: 0Yao20qxSDFfx3jAhC+HO3FsXj9rP4F8uh+mjbY+yHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:10:42:02:98:eb:d0:8a:38:6f:b5:bd:e3:6a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Jul 27 03:00:25 2025 GMT
Not After : Jul 28 03:00:25 2025 GMT
Subject: CN=ec8a2fd6c1704643c2859634fac0871ca9b9992a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:3f:31:52:7b:f6:b3:b8:6c:12:d7:ce:f9:
78:43:f3:de:55:f7:ae:4a:9e:02:aa:79:2f:67:f2:
dd:f9:3b:30:47:e4:10:33:5c:39:7c:39:e6:11:07:
8a:72:42:ab:78:7c:2c:15:84:29:5c:40:ad:59:80:
a1:bd:4c:40:10:11:32:2a:25:aa:66:6e:da:09:7e:
14:38:72:06:50:7e:10:7c:84:df:ed:f9:38:9a:b9:
2d:85:62:c2:b5:cf:75:d4:63:a1:dd:54:40:dc:94:
57:51:15:57:f4:ed:ce:cd:65:79:10:a9:80:37:76:
eb:28:d8:e8:60:9e:dc:7a:90:66:b3:de:8f:5b:30:
e4:7e:df:3e:5e:49:15:db:83:75:5f:a5:f2:59:8c:
ef:f3:40:8d:67:12:44:77:f0:a6:a3:9e:29:5f:10:
5d:5a:f0:8a:36:6d:d7:6a:9e:f0:c5:0d:57:fc:05:
ef:1d:40:79:4d:ec:93:35:92:bc:cb:10:7b:ff:58:
1b:79:f9:c4:c1:e3:5f:3f:66:2c:df:8d:c5:da:34:
72:02:41:67:5c:59:8b:dc:ca:a8:1b:87:89:ca:41:
e6:1d:ef:23:c7:5f:57:e1:c6:6f:bc:09:fc:32:e9:
82:84:f4:81:76:17:db:2b:d8:c8:6b:92:a9:b0:b4:
29:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8A:2F:D6:C1:70:46:43:C2:85:96:34:FA:C0:87:1C:A9:B9:99:2A
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:09:f4:7d:ff:ce:7f:72:ed:ef:48:a9:84:50:63:fb:83:ad:
48:da:af:8f:cb:95:75:43:a7:cb:5a:c4:c3:c4:6e:6b:60:71:
be:7f:f4:32:48:f4:69:30:fd:45:d2:f7:96:9c:7f:31:f0:de:
14:14:66:c5:d6:3f:94:46:e4:1b:31:4c:c6:7d:39:33:8f:b0:
90:43:e3:fb:f7:ed:73:d9:58:a9:17:d1:90:a8:a1:85:14:c8:
e5:84:1a:ed:ca:78:49:f4:0d:10:d6:f2:da:9e:cb:a9:be:68:
cb:1d:55:97:ef:d7:34:94:da:8e:85:30:fb:7c:63:79:4a:04:
e9:5b:c1:2e:48:7c:4c:48:d2:05:70:f1:b9:db:44:4d:87:7d:
69:11:3f:27:9a:3e:e7:17:ae:19:ab:d9:58:6c:77:6e:b4:61:
90:4c:fe:b6:91:de:8b:5c:6f:5b:4a:25:6a:81:2d:35:8e:9a:
62:52:57:3e:f0:72:f2:4d:e1:b5:31:78:36:0b:a0:77:45:40:
c9:65:38:de:22:76:88:f4:c1:8f:b7:e8:c3:be:de:d2:60:00:
e0:6b:1a:8b:78:a6:0c:73:4c:7f:e1:8a:76:37:d4:64:85:70:
e4:fc:c1:dd:63:37:c0:2f:67:8f:3b:66:1e:44:3b:45:fc:98:
18:11:5a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:07:36 2025 by rpki-client