Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
File: 3Hgh4by_bgdOpIFKqlxj47qBPF8.mft (raw, json)
Hash identifier: Rqr+Jj4wAZCXyXst0kEcXZYaYilLPINB2bFopdeZn20=
Subject key identifier: 8B:B6:B2:03:0A:B1:72:23:66:6F:AD:23:A6:5C:CB:5E:2C:7B:FF:64
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 019853B1C2F2FDD5129CC4701688637156E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
Manifest number: 1614
Signing time: Tue 29 Jul 2025 01:00:15 +0000
Manifest this update: Tue 29 Jul 2025 01:00:15 +0000
Manifest next update: Wed 30 Jul 2025 01:00:15 +0000
Files and hashes: 1: 3Hgh4by_bgdOpIFKqlxj47qBPF8.crl (hash: tNHDYoNkjoT8wNuwi758J11D8z5JbNAQ0p29o5+vq7c=)
2: 4MXMdJWAndzkkiHFnmOxrlOkHIs.roa (hash: OiJ7+6r4bWAFN5vOHYBjk8U2TGkBpOBvwNxXY+Qb+To=)
3: FnxhJQ5jd2jBoCiaTZ0_b7pYcn4.roa (hash: YbjDITXwnNkMY1d8iM5sg8TPIw1q/oeZDc75wOKQiOE=)
4: KYs_VMmQL9k2rQHns_O4m4f35bc.roa (hash: 1ns98Zta2gRWyrvr5wyrj8EwmfBa9CnA+/wYUmR2SA0=)
5: ThB5ArM42WkjWUEQcQYsflTBSWo.roa (hash: bddz7FyKEk1/5lgcU0RqcQHG7LiGlbilafV868t6FT4=)
6: e8yyBy_WYk0MmiOF_-c6ZOE78e0.roa (hash: XCwVuTCuJ/Y/WAoLWIkeepq2X2E/4/mFMfojm79U0cM=)
7: uRWNqrl7lEtL4BdXY6zm3up7W9g.roa (hash: 5dZDwl/VQCf/bzBpVyR3+W+VZSdwG299LMVlDR4jvrU=)
8: w6y6tA7YYKjCRBu0w7S_pejO5kU.roa (hash: m4339RdE053FyeU5wm1JX9FNzAT+cE85Onp7E9j3YoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:c2:f2:fd:d5:12:9c:c4:70:16:88:63:71:56:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Jul 29 01:00:15 2025 GMT
Not After : Jul 30 01:00:15 2025 GMT
Subject: CN=8bb6b2030ab17223666fad23a65ccb5e2c7bff64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:7b:f5:c7:c7:6d:61:14:15:01:0e:89:da:
ca:04:6e:5b:28:78:35:72:b0:54:f8:bf:85:0a:9f:
f8:31:89:c3:79:64:00:04:93:b3:68:95:15:e2:04:
16:8a:0a:49:b0:e6:0e:23:f5:01:e7:1e:51:23:ca:
9d:d0:cd:4c:12:68:73:86:93:27:9d:94:2a:34:56:
a6:a1:34:06:fe:a0:ef:3e:ae:62:6e:6d:df:a4:44:
d7:19:65:15:7c:c0:c7:26:de:6a:23:2f:82:51:26:
e9:2b:c2:3a:53:0d:7b:97:61:e9:98:c8:ae:a1:86:
60:df:b1:ed:c5:a2:5c:e7:a8:57:a4:15:04:3e:56:
51:71:7c:e0:3f:cf:36:ce:35:7a:4e:95:77:ab:0c:
ef:8b:77:84:ef:8f:44:8b:99:df:96:7a:29:81:c5:
8f:e5:a5:da:82:da:7d:89:04:26:3c:01:a9:f1:87:
ae:ef:35:75:53:b6:2a:a7:86:41:9e:9e:1e:50:7b:
b7:68:fb:28:42:f5:9f:d3:08:91:c4:e2:3f:78:ad:
e6:69:b5:08:5d:5c:81:a3:3b:43:a4:b8:d2:f5:fa:
42:48:92:d6:63:3d:ec:62:60:b1:2d:09:e9:4b:01:
4b:51:b1:e8:0c:8c:21:63:b7:dc:66:84:4e:64:5d:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B6:B2:03:0A:B1:72:23:66:6F:AD:23:A6:5C:CB:5E:2C:7B:FF:64
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:62:70:79:e2:02:ab:4e:a5:18:35:12:83:38:81:e8:c1:d4:
c6:2e:60:cc:07:0f:3c:74:ab:5d:bd:87:0b:bc:00:ab:2c:89:
2b:d3:59:ee:06:16:48:a0:6b:db:2b:2a:f3:34:d7:16:fb:f1:
8b:4d:af:1f:33:e5:8b:59:77:d8:98:a0:3a:d4:35:eb:4d:78:
6a:95:8a:af:8d:7f:8c:2c:17:34:80:41:52:8b:73:52:9d:d7:
27:49:32:6b:cf:f6:8b:18:c1:58:f4:31:45:53:5f:3e:ca:3b:
05:94:81:70:5b:fd:0d:46:fe:0b:bf:1e:de:69:11:42:7d:b3:
38:eb:a0:63:40:f4:71:02:f1:d1:41:b0:48:99:b9:57:60:b6:
17:43:83:09:96:37:36:13:ae:57:38:14:bf:62:0e:c4:1e:50:
0b:0e:e2:02:b8:93:1d:1f:19:0d:09:cb:76:ee:d9:b9:9d:e9:
eb:87:66:b9:ec:a7:6b:40:b8:82:45:94:63:78:48:51:97:aa:
5d:5d:33:c8:7c:06:f4:e5:eb:0d:be:d5:48:db:13:a1:cd:4c:
32:c0:d3:ad:48:b0:d7:de:27:56:c4:ba:bf:ab:e5:e4:ba:17:
64:97:26:74:33:2f:96:e5:aa:be:73:2e:5e:a1:f6:44:4d:aa:
aa:e3:37:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:50:31 2025 by rpki-client