
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
File: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft (raw, json)
Hash identifier: qKQ4m/SOEsYjNKZwLxWzihfLhYllSzRXRAxazHQiZbQ=
Subject key identifier: 74:0D:3E:D8:78:19:0A:A4:46:62:63:CF:79:D1:B4:8C:EF:E4:7E:66
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0197CC83DDB74485D566FC05BA64CA5262EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
Manifest number: 1189
Signing time: Wed 02 Jul 2025 19:01:23 +0000
Manifest this update: Wed 02 Jul 2025 19:01:23 +0000
Manifest next update: Thu 03 Jul 2025 19:01:23 +0000
Files and hashes: 1: 1yRjABERup7RTt4hqk1aXAn6I28.roa (hash: NJ6G49O9CFBy7+FZELdjH5Xu5YTgJIm1JTSVMsvAJVU=)
2: 3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl (hash: /PBv5x2oruzYn243pzuf+YahL4hmw6uFL6c68ygOs0Q=)
3: 7rg1F4HgZ7zSeJoz-U_jPAZdhF4.roa (hash: 2/dtA+MhzA1yuRHIZr7zNjT01R2dWfLd5caA+s+aUIs=)
4: GrU2vaBhkBzS3K8X9VsBUEDQ-Ys.roa (hash: S0e3alH6VMGxSxqRIvBfzNIaU1ORaUEPJSClZJ4TLEc=)
5: L_qsbBfVyL3l9SagoQBKCLrVtEw.roa (hash: 03I9prqnz0zpB06MZCjGZQRrcQGM48WJMHEMaihRoKk=)
6: Mr8lTv9s2ct83iFwG6O7kzVlPUU.roa (hash: jZNtkQ3oj4uhzih/pzsajL+HJy7Cy8jaB0/btWz9AK0=)
7: grkoHwG6ruvsLrWe-XcVrclLFRM.roa (hash: o+mRjvMlUOZLkK1MI0d98odDiAgNF1dh7mZBKvnTAUM=)
8: v9-5z5YpI-v4-8G9E800WCaoj2E.roa (hash: g0Wb037SZahs3CM0km/0DRjxcAfVhOxL5a1u4O7CbRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:dd:b7:44:85:d5:66:fc:05:ba:64:ca:52:62:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 2 19:01:23 2025 GMT
Not After : Jul 3 19:01:23 2025 GMT
Subject: CN=740d3ed878190aa4466263cf79d1b48cefe47e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:6c:23:dd:5a:01:e3:4f:09:e7:e5:da:99:
b8:8e:03:3f:eb:8b:65:72:97:ec:f3:e8:38:b6:d0:
2e:0c:9d:71:19:13:ca:55:98:68:da:29:30:4e:e6:
30:4b:36:aa:67:6d:51:2e:24:23:16:3e:9d:de:71:
6d:91:04:2d:d5:ea:72:88:6d:10:0d:26:58:61:cf:
f2:50:5e:02:cd:24:58:f4:39:36:99:08:b8:3f:36:
f4:c5:dd:be:17:71:50:83:d5:e6:b7:d1:7f:33:0b:
e8:e0:ca:1d:1d:79:b9:e0:00:dd:d3:3d:cf:39:46:
a8:e5:14:9b:23:04:86:b3:a8:45:8a:6c:3e:66:48:
19:f3:c6:ff:94:ce:57:c4:15:67:24:9d:52:f2:44:
e2:f3:96:6c:e9:ce:3b:db:5e:c9:8d:f2:26:4f:77:
95:fb:39:91:e5:b4:17:61:34:1e:7b:10:74:65:6f:
a6:96:8b:bd:97:31:47:90:6e:41:e9:f4:fe:95:84:
30:96:1a:ba:02:d6:ea:44:e0:8f:cb:72:e3:38:85:
d8:e9:79:24:84:13:c2:84:3c:3c:be:6a:a2:ff:ce:
77:99:43:ec:14:9e:ac:c2:f8:52:db:f6:3d:7f:33:
d0:df:f3:a8:36:a9:98:a5:5b:63:32:de:d3:95:43:
42:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0D:3E:D8:78:19:0A:A4:46:62:63:CF:79:D1:B4:8C:EF:E4:7E:66
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:70:7a:69:06:53:46:7c:82:60:34:7e:bb:4c:48:86:a5:c9:
ba:56:5d:65:8d:ed:1c:35:98:b0:0d:c7:16:57:5e:4c:cb:25:
6a:57:84:06:86:50:e8:4c:45:d5:e4:6a:cd:ec:9b:0a:32:af:
b1:50:52:15:92:b5:f4:ed:e1:53:4a:51:0c:55:87:5f:4d:28:
ab:d4:13:c6:d1:25:8b:85:68:b8:38:75:45:44:d2:f1:a2:d7:
5c:02:31:12:41:14:af:13:f9:0e:e3:d2:4f:ad:75:56:56:17:
0a:c3:ff:3b:0d:13:b0:8e:5c:2d:54:b4:72:20:5a:2f:82:c3:
24:a1:a3:31:7f:c6:66:e6:5c:e0:30:fa:a8:d2:d3:4b:8c:ef:
47:a8:29:d3:69:c2:32:68:55:47:f2:50:e1:f8:67:c2:6b:dc:
e4:25:f2:1b:41:2e:5a:69:62:02:ba:d0:a5:8e:3a:93:ed:d8:
25:1a:84:56:7a:0c:d1:b2:5c:bd:f9:f5:2a:19:30:8b:06:d5:
71:76:5c:61:09:d8:58:56:6e:fa:3c:b9:dd:a7:44:8e:73:e2:
8c:7c:c2:35:7c:75:6a:13:6d:95:69:7b:76:d1:1f:b2:c0:64:
bd:b3:5c:e1:aa:24:71:60:c1:23:ef:d2:56:be:73:13:94:77:
8d:bb:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:59:43 2025 by rpki-client