Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: nB/GaYWI3S5OQwpNUgGsPuqiPxIu7TtaSvQKQJEvwVc=
Subject key identifier: 36:55:E5:F3:6C:05:E8:42:C0:C7:DD:43:DB:7F:F2:8C:8F:76:5C:2F
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 019921B26074B21483786E8B1AA0C81A4397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 01:02:42 +0000
Manifest this update: Sun 07 Sep 2025 01:02:42 +0000
Manifest next update: Mon 08 Sep 2025 01:02:42 +0000
Files and hashes: 1: 2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa (hash: HuLQbolqCGZmiUhvPO/wiFvtWi3Okwmgccu/aBpptuc=)
2: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: yR73O0gSIr+/sdQ3Y5E1ePZTAOSDycqBM8sniVhaIIU=)
3: S87qjShx0Cde64tPkPpF-gZYMZE.roa (hash: KfR58Ep5CQd0S3bEgqtjtqAMWmdjTVJqVmZhBaCwNRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:60:74:b2:14:83:78:6e:8b:1a:a0:c8:1a:43:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Sep 7 01:02:42 2025 GMT
Not After : Sep 8 01:02:42 2025 GMT
Subject: CN=3655e5f36c05e842c0c7dd43db7ff28c8f765c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:0f:f8:3b:80:08:ba:0f:14:4a:6a:e5:2e:
61:9f:a6:ec:01:a8:56:0a:a4:a2:a6:8d:1c:95:16:
5f:05:32:40:78:b2:c3:4a:90:8c:a2:ca:c1:96:56:
cc:c4:c7:39:4e:d5:1a:28:9b:7f:76:1c:74:a7:a0:
e5:81:7e:d0:c8:79:9b:d1:76:a7:40:69:e1:61:0c:
75:a8:b3:a4:ce:b7:05:08:dd:ce:8d:8f:4c:06:08:
e5:e2:0c:7a:64:c4:4f:c4:99:ed:ea:a7:87:24:82:
42:fb:79:98:5e:ff:33:e7:e8:c3:11:65:e2:0b:5b:
03:8a:de:31:14:2d:69:fe:f3:6b:64:c5:90:09:9a:
3d:95:ca:7f:db:77:c8:4b:5e:71:32:f1:1d:ef:a6:
03:02:93:8a:b7:fc:66:ac:aa:61:81:46:39:c3:59:
b5:4a:cd:95:2b:b9:d7:7b:35:1e:b5:97:d2:63:55:
73:dc:ad:9d:7d:29:2c:34:05:f0:3d:fd:cd:98:a6:
b0:b3:58:d4:18:76:f5:ee:81:86:ec:fa:56:e4:7a:
57:e2:58:63:92:78:4f:18:b7:97:f0:05:34:10:88:
1c:13:04:de:50:84:7e:92:a4:1d:d5:42:91:95:c7:
93:b1:85:ee:c5:93:aa:b8:e7:5d:c6:d1:19:f4:df:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:55:E5:F3:6C:05:E8:42:C0:C7:DD:43:DB:7F:F2:8C:8F:76:5C:2F
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:52:6a:85:a8:06:2d:ea:19:f9:2a:95:37:2c:00:74:3b:67:
ab:71:57:1f:ff:9c:09:c8:e1:5d:46:33:bf:80:74:af:b2:67:
2e:17:d4:dd:14:d7:e1:31:fd:75:9b:8a:af:ca:8f:d1:ae:20:
05:d5:6c:f3:1d:48:e4:d3:93:1a:13:0f:a0:13:0c:de:06:e8:
82:53:8a:e0:88:c1:db:39:2d:c1:fa:eb:9f:a1:ce:e0:dc:e1:
cb:1f:54:86:14:4e:ef:6e:eb:a0:09:fe:cf:5c:f0:68:b3:46:
9a:b6:2f:16:41:27:8e:3b:87:d0:14:f8:8f:b6:bc:56:23:38:
98:79:d5:4b:5f:4f:4a:e1:2f:d1:12:19:d1:ba:2d:90:67:b1:
76:be:a7:fc:08:d5:7f:7d:b0:31:a4:96:4c:4a:98:fe:5a:e7:
2b:f0:54:89:12:c0:91:c4:a5:13:09:57:c9:b1:5c:d2:07:bd:
39:95:ef:0f:7a:9b:54:f2:fc:2e:04:ac:b3:1a:3d:6d:c9:d1:
2e:8e:53:fe:6f:38:60:40:91:97:25:ab:2f:9a:02:1a:97:50:
c4:ec:1a:db:0c:3c:6b:4c:de:f8:15:32:73:ff:15:88:d2:94:
30:7b:2b:68:31:0f:d9:d6:a5:aa:c1:0e:47:16:88:dc:81:67:
03:a7:61:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:17 2025 by rpki-client