Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: JAqtTEGJyQpX0fBHRWCezWh8QL8wCjmLAYct4by9WYE=
Subject key identifier: 17:4A:AC:CE:BF:0E:B6:05:91:16:8D:65:E4:BF:2A:88:EB:D9:EA:3D
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 01983427EE348B417E1F3A5A38210ED71318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 1611
Signing time: Tue 22 Jul 2025 22:01:28 +0000
Manifest this update: Tue 22 Jul 2025 22:01:28 +0000
Manifest next update: Wed 23 Jul 2025 22:01:28 +0000
Files and hashes: 1: 0Qls5JO9jjLXQGK9B40PajGKbpE.roa (hash: IJ0z/46nnzhP5+ihXIdT4Fm5/4uAlVBNSZ2/pLgDmrQ=)
2: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: EGZ3RgkSYF30sUvptTiiHFV/jKe6dVV7qVAvYMowmz4=)
3: 6vn0S84Of3Am641RtQSWgEcI8LQ.roa (hash: liXU+EaS34eLz4h7mt5PwqdMf8bXjU0VdoViqn9V7yA=)
4: 8CNNYBbzQiDFPTM1tjqp5lUESM8.roa (hash: FKMYJ+6HiuRFIY6sbk4LB3mHseE0YsFT5neIU8ZSV0A=)
5: SgwPvwknub36baQ9KcDiF10XVjg.roa (hash: AqBX/OOtLCRwId7Bx3Diq3oyJG6vd4oLaGxEgTaatfA=)
6: VajIGedTAEjBNV3b8yhI3Gm_wwY.roa (hash: zWXkCVS1+asFBr2Z3nZVK8HEU5fThFspnuVO3DjbBl4=)
7: goC_YpQrwJcU48WyzOg3OlsUAbY.roa (hash: OHpeanfXRy8bamPYQwO5dLykWIe4C63dtCxwNHxZdBc=)
8: lXMs99__wPFL_tQdoxzgPhccZK0.roa (hash: OuWROGz9NUYwdhgN+POUZ2OWYBha2GAUM0PW+Sf4wFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:27:ee:34:8b:41:7e:1f:3a:5a:38:21:0e:d7:13:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Jul 22 22:01:28 2025 GMT
Not After : Jul 23 22:01:28 2025 GMT
Subject: CN=174aaccebf0eb60591168d65e4bf2a88ebd9ea3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:b0:60:80:c4:75:b4:35:7d:44:b6:66:7b:
68:da:24:6e:a2:0c:d2:f4:ee:26:46:a9:62:21:ec:
b7:ce:22:47:f9:d2:f0:ed:bc:39:95:37:ea:d4:f1:
db:59:b1:60:c0:43:a2:15:47:e9:4d:5f:79:f8:a7:
37:26:8d:41:3c:0a:7a:e6:28:fc:bb:52:e1:70:c3:
d5:b1:b3:26:28:2b:08:a4:3d:94:97:05:b6:0e:80:
f0:10:5b:32:21:04:01:e4:60:51:e2:2a:1d:b4:bd:
f1:c4:fd:8f:c0:3e:89:c3:9a:ec:7f:11:1d:24:e9:
c4:88:c5:4b:54:e3:74:84:d6:aa:37:a1:24:b5:2b:
83:77:3c:6a:e3:38:86:d7:7c:d0:4d:44:d1:c7:53:
c1:f6:a1:01:8b:36:fa:76:af:a6:7b:66:a5:b3:39:
68:6e:a7:90:84:e7:90:57:1c:0f:3c:0e:97:f4:3d:
fc:38:6a:df:ba:c5:e2:b2:f2:12:11:42:c5:fb:e9:
b3:99:00:8e:5d:98:44:74:83:da:35:a7:5e:d1:ac:
3a:7b:d0:c6:40:0d:c9:5a:f0:20:a4:12:59:92:1b:
a7:cd:1c:14:4c:78:12:34:32:be:0e:ea:51:ec:ef:
00:a7:77:67:03:89:ba:dd:9c:5b:7b:09:03:14:80:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4A:AC:CE:BF:0E:B6:05:91:16:8D:65:E4:BF:2A:88:EB:D9:EA:3D
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:94:15:4a:ae:0a:4b:a7:17:6b:ae:0c:52:7a:e6:9e:92:64:
b4:99:2e:3c:f1:11:ff:a4:d3:cc:48:3a:b6:c9:37:8a:22:6f:
54:b4:21:76:86:a2:61:d7:8d:b9:55:22:9b:4b:3e:bd:d6:7d:
47:78:e4:a3:38:31:2b:95:7b:8a:99:e8:e0:54:1d:c0:70:de:
b7:7d:32:b8:b9:81:7c:14:cf:90:b3:9b:fe:48:2f:43:6e:1d:
9f:62:d4:dc:2c:69:4b:d9:1a:53:39:e8:93:04:6e:b6:c6:61:
6a:92:2a:03:58:0f:2f:c5:91:cb:8a:97:13:35:51:c1:f9:88:
15:05:4b:dc:22:e7:4c:fe:15:8f:99:15:93:8e:e7:87:99:72:
b4:d5:38:3e:10:88:fc:1f:e3:f8:51:1f:66:12:16:3c:07:2b:
0c:45:ec:2d:f2:29:a6:b1:92:f8:46:93:80:79:8a:4f:17:1b:
ce:f0:71:79:6c:de:24:02:36:8d:bb:53:58:f2:d3:57:1c:27:
8b:39:a8:0c:bf:db:2e:32:53:2e:54:dd:d7:87:89:c5:e8:d3:
1b:24:84:d5:85:54:90:dc:01:ab:dd:d5:52:f0:c0:9a:50:60:
d3:d0:a6:a2:15:13:27:1f:7d:4f:46:9f:57:43:28:be:e4:61:
34:34:c9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:23:02 2025 by rpki-client