Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier: MM8qEUojhJ6FYC+A75TT5GxFnxStuFQmezU7v+k2D5s=
Subject key identifier: 9F:60:38:3E:FC:F4:71:F1:62:6C:4D:B3:59:8F:DC:71:84:A5:C0:A0
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 01984664262068395C206E88CBADF93B9B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number: 147F
Signing time: Sat 26 Jul 2025 11:00:25 +0000
Manifest this update: Sat 26 Jul 2025 11:00:25 +0000
Manifest next update: Sun 27 Jul 2025 11:00:25 +0000
Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: ZsgtzL6ck/GiX9L4KUjaHVwtt3rOTVZuxDRuDL/hVkI=)
2: NTq0FDzH2xxPaa-1hxtnePIlEA4.roa (hash: LRFHdSsVugdN6TwKBfGKGPR3Nf4KsaI4iw69J8bmMBI=)
3: jzen_y9MjkJUaSD6dgV7vhjezg8.roa (hash: D4rABI9YVwiue3KhIMfk5XfCTjj00ChB0kZlnVkANPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:26:20:68:39:5c:20:6e:88:cb:ad:f9:3b:9b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: Jul 26 11:00:25 2025 GMT
Not After : Jul 27 11:00:25 2025 GMT
Subject: CN=9f60383efcf471f1626c4db3598fdc7184a5c0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8a:6c:37:ef:bb:8a:4a:91:7e:6d:ea:55:b3:
dc:89:b4:e6:81:53:9a:68:8c:27:97:02:92:f0:82:
02:93:cf:17:85:c3:42:9e:ff:b4:ea:aa:e4:55:8b:
70:37:66:8c:be:6d:60:0d:a2:b6:6e:4c:2b:01:d3:
06:05:98:79:65:38:26:11:56:4d:bb:00:99:1a:4c:
5f:e3:24:61:43:5d:4d:a6:7e:79:b3:e1:87:dd:df:
0a:ea:87:81:41:b5:45:34:40:d7:c4:48:a3:43:ed:
50:0a:d3:d4:e4:f0:51:c7:5e:33:2a:02:12:46:24:
2b:44:1a:f5:df:60:f2:60:f6:b4:43:14:7e:3e:54:
0b:30:3b:1c:7b:84:97:e7:b6:55:ce:1a:9f:6d:a9:
25:b6:fa:45:cb:8c:c5:17:e7:58:db:5d:51:b3:be:
66:70:2e:74:1e:50:55:49:df:e5:5d:86:81:ac:e5:
1c:78:47:29:cf:06:cf:9f:cc:d4:c3:e8:74:5e:f7:
c6:4d:e5:0e:ff:c3:3a:fe:2f:b4:4a:65:44:05:20:
f1:ec:60:74:ed:bd:6c:bd:09:23:47:91:82:9c:f8:
d0:fc:d3:13:45:3d:c4:e0:cf:1a:4a:6e:51:b5:c0:
f9:71:26:34:5c:74:f4:75:a0:94:80:b9:97:03:69:
e7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:60:38:3E:FC:F4:71:F1:62:6C:4D:B3:59:8F:DC:71:84:A5:C0:A0
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:af:32:37:fd:f8:1b:e7:a5:5f:28:d3:83:84:cc:a8:14:98:
8d:9d:85:86:c9:7f:da:a0:cb:b1:39:98:9f:35:86:51:99:df:
e6:7a:d9:62:f1:c6:15:1f:30:1a:f0:df:15:24:81:19:40:8b:
55:27:5d:25:9c:dc:72:9f:cc:05:7b:40:09:f7:42:24:ad:c4:
ab:fe:c2:65:bf:c7:ad:8a:61:80:ee:2a:80:c1:a4:28:a7:89:
19:67:a9:b5:ef:f7:69:4d:5f:a8:04:5d:69:dc:4f:87:26:3f:
1e:16:1d:4b:f2:7e:91:64:6e:d0:f4:e8:32:76:19:16:5f:86:
69:b1:28:6b:e1:61:73:5a:1c:b1:3f:93:ef:96:d3:62:4e:01:
93:e7:fb:d7:d1:ab:b2:9f:71:b2:da:9d:ad:f4:2c:63:2e:c3:
db:a6:1d:af:af:b6:19:6f:3b:bc:67:90:d0:ed:91:70:70:a1:
fb:99:27:cb:88:59:0c:c8:68:de:be:cd:3c:3f:64:7f:dd:e0:
3e:1a:98:53:ba:cb:dc:60:e4:c1:71:d4:c3:d9:f3:76:ae:fc:
71:5d:c8:92:f8:b8:f7:63:d3:22:70:51:14:48:03:81:44:84:
08:86:c2:c8:1a:e8:2a:1b:a4:c4:c5:e0:9f:f6:1e:1d:44:0d:
42:4f:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:51:57 2025 by rpki-client