Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: P20Lm1yLHT10GLdTU7CgM/65gIt/p0B4066VYtuin0w=
Subject key identifier: 3E:0E:E7:BF:BF:DA:08:3A:CB:05:A2:EB:D3:C4:1C:61:41:83:DE:AC
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0199529E622FC2641FFEB0688ECED4895566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1253
Signing time: Tue 16 Sep 2025 13:02:15 +0000
Manifest this update: Tue 16 Sep 2025 13:02:15 +0000
Manifest next update: Wed 17 Sep 2025 13:02:15 +0000
Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: Nlh6J8rOOKKli2C8LWSLogUbctT2qbA0mfUDJN9G7AY=)
3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=)
4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=)
5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=)
6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=)
7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=)
8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:9e:62:2f:c2:64:1f:fe:b0:68:8e:ce:d4:89:55:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 16 13:02:15 2025 GMT
Not After : Sep 17 13:02:15 2025 GMT
Subject: CN=3e0ee7bfbfda083acb05a2ebd3c41c614183deac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:61:2d:01:47:1d:94:6d:a8:e1:ed:b1:31:08:
30:d7:70:c7:5e:08:b5:5e:60:a6:25:7d:bf:93:ac:
38:89:1c:56:30:42:8a:09:5f:8a:4d:9d:eb:68:ef:
14:b8:39:9d:22:d2:e4:2c:75:82:7e:e6:b3:19:95:
01:7f:12:68:ca:01:96:83:a4:f6:e8:9d:ff:b8:38:
58:fd:24:16:47:41:0f:ef:98:39:6c:40:f1:18:14:
1f:61:f1:8e:24:4a:cd:1a:66:e4:0d:77:9a:2a:2d:
06:14:d4:70:cf:8e:cb:69:2b:69:37:da:42:36:b8:
84:e8:74:8b:f0:61:88:8f:bf:39:7c:6c:5a:8a:eb:
01:3f:ea:83:d4:e1:c1:95:d4:92:97:b6:4d:2d:c0:
7e:1d:41:d0:cf:1d:8b:37:d3:bb:93:32:3f:55:40:
8f:06:3b:36:bc:a2:28:7e:a6:67:19:45:7f:b4:71:
03:f4:b9:e1:93:01:09:51:69:ab:63:d0:49:e9:18:
9c:c8:6e:54:39:27:0a:48:70:db:96:d7:0d:d8:ba:
5f:cb:e7:0b:cd:ca:a2:4f:47:f0:85:a2:23:e6:5f:
d8:72:4d:9d:cb:76:92:41:37:62:82:c5:62:5b:29:
26:b9:b2:39:f6:95:dc:2b:29:e7:89:97:6f:ac:1d:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0E:E7:BF:BF:DA:08:3A:CB:05:A2:EB:D3:C4:1C:61:41:83:DE:AC
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:81:0c:f6:84:0f:ab:e5:4a:45:b4:62:b5:6f:ac:3e:eb:62:
ce:1a:73:8e:53:d9:d6:1e:ac:f6:ed:21:d9:7e:1b:8a:e3:3b:
f7:3f:e5:f4:37:6c:35:17:ed:5c:f8:46:ea:09:b1:c6:19:17:
7d:77:d9:19:42:87:74:40:18:e3:38:2d:4f:51:77:d0:d6:e6:
c0:1d:a3:5f:bd:9b:08:28:d8:cd:bc:66:94:3a:2a:c7:8f:ac:
3d:8b:64:ce:e3:46:91:55:1e:06:9e:b0:fe:35:38:30:4e:f2:
e4:d5:70:b5:13:3b:cd:ab:24:28:f1:05:55:16:e3:2c:46:37:
cc:b5:a7:51:d5:85:a3:e5:7f:7a:a2:38:d8:ac:87:63:63:dc:
13:6f:f5:2b:06:2e:0c:3c:ce:8c:74:ac:42:72:ad:fb:dc:4f:
cf:27:b2:cb:fa:eb:e2:f9:92:c5:6a:bc:83:6e:d4:4e:7c:57:
55:a8:be:e5:cb:8f:fd:8e:69:9e:5f:95:f6:0d:b9:f2:56:a6:
aa:2a:6d:f1:13:09:87:ba:49:e1:61:cf:54:d3:5a:b1:f5:de:
4c:eb:8a:b7:85:b1:bc:7b:b4:60:fb:9e:49:e7:4d:3f:82:27:
8c:4a:27:c2:c0:a0:83:6b:65:2a:00:f6:99:03:f3:94:00:a0:
dc:d6:e0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:11:32 2025 by rpki-client