Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: sY9ujA7u2Xf57h4WBT3PpdJJDl9mBOJLP18cvmH0GD4=
Subject key identifier: 16:48:E2:BD:52:D0:64:75:AF:29:04:00:2B:3B:EA:39:F3:B7:9E:8D
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 01983FBDB0D0BFF63651B9F7F732534FE16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 1617
Signing time: Fri 25 Jul 2025 04:00:52 +0000
Manifest this update: Fri 25 Jul 2025 04:00:52 +0000
Manifest next update: Sat 26 Jul 2025 04:00:52 +0000
Files and hashes: 1: 0Qls5JO9jjLXQGK9B40PajGKbpE.roa (hash: IJ0z/46nnzhP5+ihXIdT4Fm5/4uAlVBNSZ2/pLgDmrQ=)
2: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: AOj1yDOTLaPxqmK6f/4dKYHzrrA4x+rn1gaa8NccLp8=)
3: 6vn0S84Of3Am641RtQSWgEcI8LQ.roa (hash: liXU+EaS34eLz4h7mt5PwqdMf8bXjU0VdoViqn9V7yA=)
4: 8CNNYBbzQiDFPTM1tjqp5lUESM8.roa (hash: FKMYJ+6HiuRFIY6sbk4LB3mHseE0YsFT5neIU8ZSV0A=)
5: SgwPvwknub36baQ9KcDiF10XVjg.roa (hash: AqBX/OOtLCRwId7Bx3Diq3oyJG6vd4oLaGxEgTaatfA=)
6: VajIGedTAEjBNV3b8yhI3Gm_wwY.roa (hash: zWXkCVS1+asFBr2Z3nZVK8HEU5fThFspnuVO3DjbBl4=)
7: goC_YpQrwJcU48WyzOg3OlsUAbY.roa (hash: OHpeanfXRy8bamPYQwO5dLykWIe4C63dtCxwNHxZdBc=)
8: lXMs99__wPFL_tQdoxzgPhccZK0.roa (hash: OuWROGz9NUYwdhgN+POUZ2OWYBha2GAUM0PW+Sf4wFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:b0:d0:bf:f6:36:51:b9:f7:f7:32:53:4f:e1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Jul 25 04:00:52 2025 GMT
Not After : Jul 26 04:00:52 2025 GMT
Subject: CN=1648e2bd52d06475af2904002b3bea39f3b79e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:f4:49:77:74:8c:c4:14:05:ad:d2:ad:34:
6e:28:70:79:46:aa:46:eb:2a:c8:ce:2a:79:09:5b:
4e:2c:70:73:b7:17:0b:29:d8:a9:e8:93:45:9f:37:
6d:64:86:e8:70:ab:77:43:77:47:18:80:53:13:89:
22:14:e5:4d:e9:d2:d4:bb:84:b6:60:15:01:cf:c7:
92:e1:26:a2:db:58:58:92:10:00:4a:ac:aa:89:a2:
54:92:a5:d0:49:7d:59:43:8d:e8:54:c7:a4:20:6e:
46:15:bc:e2:8f:fa:e9:98:55:f8:1b:45:b8:7d:d7:
e4:89:63:ed:67:5d:ae:53:eb:53:eb:ba:7e:02:82:
76:35:41:02:b0:dd:dd:d2:ee:8d:08:dc:3b:c4:9c:
38:4e:b1:61:68:d6:c3:52:9f:82:ea:6c:a0:92:98:
ad:ac:42:e4:c1:89:f2:3f:ea:e8:02:b4:ff:11:98:
9a:6a:0f:9a:96:76:0d:b5:cf:7f:8a:ee:31:a3:83:
d9:23:12:98:a9:7a:57:61:a0:45:e1:4c:4d:57:48:
07:d5:56:ba:e2:db:91:08:07:be:9f:ca:85:18:57:
d1:13:08:80:2f:76:4d:17:7e:01:14:f1:43:66:2a:
70:ac:4f:50:08:74:8f:10:b3:86:96:fa:a5:4e:aa:
5e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:48:E2:BD:52:D0:64:75:AF:29:04:00:2B:3B:EA:39:F3:B7:9E:8D
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:38:5c:1b:eb:91:90:9a:58:fa:26:5b:da:ce:2d:f2:c6:3f:
08:64:df:93:9b:93:1f:2b:b3:47:27:3c:36:50:fc:12:69:50:
43:92:66:b8:0b:6e:ea:ca:37:07:39:e4:b9:63:96:49:c1:90:
fd:96:fd:7b:5c:ed:c0:e6:42:f2:8d:4f:4f:aa:27:ee:03:ee:
79:15:a3:dc:d2:e2:e6:20:2d:d7:54:1d:e5:5b:a2:08:44:c1:
cb:2a:38:61:2c:c3:e5:60:6a:f6:7f:f1:33:84:c3:ca:de:65:
53:02:df:40:c2:67:9e:38:91:6e:ed:dc:29:f6:a5:4b:c6:8e:
63:b2:9e:6e:fe:10:fc:94:55:96:e8:6e:0f:f3:ac:a8:93:2e:
2e:3a:a7:25:54:b3:ac:c4:c8:e3:2d:d6:75:37:3e:8f:ca:c6:
0d:75:87:d5:32:88:39:3c:77:2e:b7:b8:05:83:fd:4c:9e:24:
89:40:4f:12:2b:2b:5a:0b:6f:91:a9:cc:e7:a0:08:89:ea:64:
8f:48:a3:9d:af:0a:5a:00:18:95:2e:13:26:ec:32:6f:6f:da:
2b:0c:c3:12:17:ce:ef:3c:90:ce:87:ca:92:aa:93:e2:85:af:
a8:3e:ec:21:68:71:02:f8:77:20:0f:e2:af:e3:6d:8a:f9:96:
80:6a:ef:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:07:08 2025 by rpki-client