Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: 2NBfOyCc/mpPEgdaw6Ut7qShLdeulAc/Teay3RJQuZA=
Subject key identifier: DB:D2:79:38:91:14:78:DC:09:7E:2A:19:46:F5:A3:32:E1:13:4D:37
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 01983BE0E4374EC3CE10F74E7A80FA240887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 1615
Signing time: Thu 24 Jul 2025 10:00:50 +0000
Manifest this update: Thu 24 Jul 2025 10:00:50 +0000
Manifest next update: Fri 25 Jul 2025 10:00:50 +0000
Files and hashes: 1: 0Qls5JO9jjLXQGK9B40PajGKbpE.roa (hash: IJ0z/46nnzhP5+ihXIdT4Fm5/4uAlVBNSZ2/pLgDmrQ=)
2: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: Icxs2/iyxmlrl7Bg7lNwLLKEadMt5dkYK0W5366SwIg=)
3: 6vn0S84Of3Am641RtQSWgEcI8LQ.roa (hash: liXU+EaS34eLz4h7mt5PwqdMf8bXjU0VdoViqn9V7yA=)
4: 8CNNYBbzQiDFPTM1tjqp5lUESM8.roa (hash: FKMYJ+6HiuRFIY6sbk4LB3mHseE0YsFT5neIU8ZSV0A=)
5: SgwPvwknub36baQ9KcDiF10XVjg.roa (hash: AqBX/OOtLCRwId7Bx3Diq3oyJG6vd4oLaGxEgTaatfA=)
6: VajIGedTAEjBNV3b8yhI3Gm_wwY.roa (hash: zWXkCVS1+asFBr2Z3nZVK8HEU5fThFspnuVO3DjbBl4=)
7: goC_YpQrwJcU48WyzOg3OlsUAbY.roa (hash: OHpeanfXRy8bamPYQwO5dLykWIe4C63dtCxwNHxZdBc=)
8: lXMs99__wPFL_tQdoxzgPhccZK0.roa (hash: OuWROGz9NUYwdhgN+POUZ2OWYBha2GAUM0PW+Sf4wFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:e0:e4:37:4e:c3:ce:10:f7:4e:7a:80:fa:24:08:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Jul 24 10:00:50 2025 GMT
Not After : Jul 25 10:00:50 2025 GMT
Subject: CN=dbd27938911478dc097e2a1946f5a332e1134d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:27:3e:74:a9:54:bf:b8:2a:52:74:43:4d:
2f:72:8d:70:e5:97:3e:23:0d:3f:48:1b:fa:9c:fc:
e4:fb:f7:0f:84:d5:62:ac:27:ff:92:18:db:7e:0f:
e8:76:ba:15:92:40:23:a7:aa:3c:86:43:e0:4b:6a:
a0:cc:a2:8d:15:7b:e3:d6:c5:35:a2:89:3d:47:99:
74:a8:a2:90:f0:0a:17:0d:6c:19:cb:5b:2f:c5:6a:
42:92:8f:d4:40:62:8d:9a:9c:d6:da:8f:9e:2c:c1:
25:f6:ba:0e:49:4e:c0:d2:64:7e:62:55:25:d6:c8:
f3:b6:83:e1:c2:d5:68:00:99:f1:fc:09:a5:bf:0f:
ea:6f:d3:48:ff:a7:5d:b0:d4:90:5f:0b:13:b4:ca:
69:6e:30:de:7b:eb:e3:90:e9:45:3e:c8:b4:57:2c:
2d:17:28:09:67:df:02:87:9a:20:1d:48:c5:82:d2:
56:14:c4:40:46:2a:66:9d:a2:b7:25:ea:c6:df:82:
de:28:8b:c2:c5:67:98:30:97:ff:a2:e9:5a:bf:fe:
83:4a:f8:94:87:b3:68:a2:61:09:e0:21:db:8c:2f:
fb:ab:49:7e:76:76:be:d1:ed:38:7b:2f:38:cc:41:
7c:b5:f5:12:04:01:1e:31:5d:2e:9c:49:49:86:43:
82:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D2:79:38:91:14:78:DC:09:7E:2A:19:46:F5:A3:32:E1:13:4D:37
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e1:18:a3:76:8a:55:63:10:72:2f:fa:e7:e6:c1:ae:fd:7a:
9f:0e:e7:b4:4f:1c:3c:6e:63:91:b8:cb:42:0f:39:48:e5:dd:
28:e6:1f:f4:eb:f5:7e:5d:91:b1:7d:ab:39:5b:65:ab:80:bf:
77:e9:99:d3:88:36:cc:31:90:b1:fe:98:c0:aa:a0:24:c1:a6:
4e:2c:a5:4e:96:ec:8c:be:84:b4:c8:9c:d1:95:ad:35:86:ce:
bf:4b:13:e9:1d:da:49:84:ae:21:0a:58:90:a3:60:24:47:a1:
74:21:09:c2:ea:77:1f:15:2d:3e:32:47:c8:a7:ed:13:03:f6:
5b:a1:6c:b4:ea:1e:b9:a9:31:df:ab:24:da:fc:2f:35:d2:63:
99:1a:f8:16:c3:db:bb:17:24:2f:57:19:7c:1f:68:4f:ce:ee:
9b:4d:6e:c1:d0:b1:be:ed:16:a3:8d:bf:a4:f7:4c:30:6e:1f:
26:69:cb:7b:16:24:68:66:ce:48:a5:7a:eb:81:2c:6c:e8:6a:
39:dd:b4:3e:1f:72:b1:0a:de:8a:dc:2d:b6:aa:b2:c2:c0:35:
3c:43:8e:94:a0:6d:09:12:8e:9b:d5:76:0c:88:4a:64:56:17:
49:c8:5e:54:6b:44:4d:97:5a:c4:ad:8d:7f:5d:b7:60:ef:d5:
a6:ef:47:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:49:11 2025 by rpki-client