
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
File: 3t6RoPsfTdF5ANBttuiDNveLXAU.mft (raw, json)
Hash identifier: NqHlfjCRW7GbGiyNLMv5TrTySiNZL/854wrZr5gdLP8=
Subject key identifier: 2D:41:CF:03:83:95:96:7E:47:2C:E0:DC:E6:CD:A9:5A:5E:96:B8:EA
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 01992CD9511D97400B66FD47D24964960571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
Manifest number: 0D3B
Signing time: Tue 09 Sep 2025 05:01:03 +0000
Manifest this update: Tue 09 Sep 2025 05:01:03 +0000
Manifest next update: Wed 10 Sep 2025 05:01:03 +0000
Files and hashes: 1: 3t6RoPsfTdF5ANBttuiDNveLXAU.crl (hash: r+ixYvPkEFz4gTkZ4JprHoW4kx2u5sOElm0iZ5/F3eU=)
2: 3y9oPhhQ76ajFYxPaGTfj0mGenY.roa (hash: aJMldfOcg7PSjdceOikOWHYMelePcp968D1IHsbQCQs=)
3: Eru4dcnP3AWADVXKAGfzuxLYfJc.roa (hash: qrokzcnnG9HxWIaV9kzA+31DT5BxA/ZSbotCh3hraYc=)
4: Kbhh_-jKSqwyjY9YyEcKOFQSYSE.roa (hash: a+ayqrZ5gSfoloT8KLq9Di5/TpqXgWgvxKNvHS7J0us=)
5: Tz-eGTasLTxJaRB_AyMo0GbjCYY.roa (hash: y/BDSOiRtRFchkB8Upvuvb+MNs6zs82qA1XU7WJzVqs=)
6: n1PdHVenW5fayjdB9KftVERroVM.roa (hash: vk271JDoo1aPMh1SkN6xn//CcT9hk4SqnKTKa0JtzvQ=)
7: njV-GA0Ii5_5OkqbA6b8eDCoFt4.roa (hash: 3zM9PD2sx2obkpcLLLOA9+i/X09CCKUBp/Xzom7yXUE=)
8: zH0GORTR7Uyj1Cp9s_FZC30xG7E.roa (hash: hQY0rZB8ZrQ/2LTg6dzNd2hK2I9T6rcNdp9cuBHVHhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d9:51:1d:97:40:0b:66:fd:47:d2:49:64:96:05:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Sep 9 05:01:03 2025 GMT
Not After : Sep 10 05:01:03 2025 GMT
Subject: CN=2d41cf038395967e472ce0dce6cda95a5e96b8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:13:30:82:62:97:3a:55:8b:c8:6a:4e:07:
9b:43:32:e1:0f:24:44:4f:3f:ec:79:d3:57:6e:02:
86:7d:9e:ea:80:d2:a0:18:80:ad:c5:6e:2f:b8:00:
af:7a:6c:d3:dd:9d:d4:df:42:df:e2:b4:2d:75:0c:
c1:18:20:c8:8e:1d:c0:88:d4:27:95:10:94:68:da:
25:a4:36:58:8a:24:2c:35:fa:d7:e4:1c:73:87:29:
5c:7d:bd:f8:13:82:c2:9d:be:82:18:b8:01:db:44:
a3:a3:ee:2b:ae:c8:28:89:f5:4b:5e:e2:5e:50:67:
62:33:39:55:54:17:b6:f0:fb:68:f2:7c:fb:b7:81:
83:77:ff:f3:a8:2c:05:a0:83:71:0d:d7:6c:9e:92:
6d:de:61:54:47:5f:17:d2:a9:29:22:ce:d3:17:98:
99:d3:ae:80:06:f0:2d:cd:a1:94:3b:e1:79:6c:bf:
c1:01:e3:db:97:ee:ef:43:21:d5:34:f5:98:ea:cf:
e9:b6:07:75:e1:db:68:b7:26:4a:28:81:b6:dc:cc:
25:c7:8e:a1:74:a3:f7:3b:6e:30:8e:ac:d0:71:79:
6b:8d:58:bd:d9:6a:fe:58:78:ca:ce:61:4e:38:22:
cb:26:d6:b2:88:34:1a:bb:79:89:4c:f6:66:52:79:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:41:CF:03:83:95:96:7E:47:2C:E0:DC:E6:CD:A9:5A:5E:96:B8:EA
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cf:7c:d0:a2:3c:e1:91:92:c2:ba:ee:20:39:2b:14:1a:a2:
21:6e:6f:2b:57:1b:cf:69:ad:e1:b3:c3:27:51:47:be:57:3f:
a4:04:54:78:ab:fa:4e:ad:f9:dd:fb:82:fd:5d:36:bd:84:ec:
a8:d9:be:2f:43:71:be:d0:fc:aa:ab:08:20:20:1f:3a:b0:0e:
bb:2f:48:f1:f6:6f:dd:51:53:4a:c3:ff:7c:27:be:7e:fc:c6:
89:04:fd:69:af:a4:b8:80:6f:49:88:8f:cc:c7:6f:2a:d1:c0:
eb:e3:5a:ba:1a:7d:16:88:39:a7:1a:19:59:4b:af:86:14:01:
2c:10:6a:ef:af:a5:13:fb:c3:3d:e3:eb:44:9e:ad:ac:da:5f:
10:51:6f:bd:06:e4:f6:95:2f:4e:d1:d5:24:03:ae:47:c1:27:
7f:6e:43:49:66:6b:c0:60:24:65:8f:dd:ce:ec:f4:49:03:fb:
d7:b2:bd:88:af:5f:ee:5c:2f:ae:a3:69:37:0d:69:95:2a:1e:
7b:66:d9:3a:c2:af:39:fc:bb:f3:a6:5f:d6:76:98:5d:c0:1b:
8a:08:5b:d2:49:13:c2:28:ca:48:b0:a9:16:82:3f:5f:0f:f9:
c2:41:3d:b7:46:63:18:0f:5e:61:50:e4:17:5b:5e:93:c1:6d:
2d:24:f8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:47:49 2025 by rpki-client