Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: hEJiyH2LuMFpQdh2dUmo35TiGACNeL7tCAKrn/UQrHI=
Subject key identifier: 75:0F:68:EB:FE:11:2D:B7:DE:2C:90:33:96:98:0D:92:0E:A4:8A:ED
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 019960C6728AC5FB21CF27A6BF0BB2AB2B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 1694
Signing time: Fri 19 Sep 2025 07:00:42 +0000
Manifest this update: Fri 19 Sep 2025 07:00:42 +0000
Manifest next update: Sat 20 Sep 2025 07:00:42 +0000
Files and hashes: 1: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: DAqRpD9TFuaP3WSzX91m3bCi5Ycu+Vlt3XQ55Hn8p/w=)
2: I2pncAJfzNdJmYYh59kVF5OSpUs.roa (hash: lHfLeGadLKnQRU2ejGfcyZ67n8h62UJ2WQIx9Gm+axg=)
3: MnzrFfyCM6_m24BkwXpZ_Rso1RQ.roa (hash: XgLOcASonVn7TWXy+ktIGTPZ2UgFdKpsifVTE/uxOB0=)
4: UJU_wGK_nKOpS66Lv-qw5sHx6Yc.roa (hash: DVPLZ7QtHdhq6Tawu/C5Hzz46ZghvtTkOTNBcz5aL5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:c6:72:8a:c5:fb:21:cf:27:a6:bf:0b:b2:ab:2b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Sep 19 07:00:42 2025 GMT
Not After : Sep 20 07:00:42 2025 GMT
Subject: CN=750f68ebfe112db7de2c903396980d920ea48aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:09:8f:6e:b4:60:83:85:12:1a:d7:6c:97:8b:
07:80:f7:9d:8f:1c:d8:e2:06:b2:03:b7:45:86:98:
54:be:0f:08:d0:bf:3d:9c:42:84:8d:67:f5:5b:86:
96:bd:98:8f:11:ea:41:3c:9f:f1:c8:36:74:fe:74:
cb:6f:22:da:64:13:45:64:95:a1:e7:7f:74:b8:bb:
c9:83:11:fe:7f:a5:ef:cd:f0:93:87:bc:a0:d9:53:
3e:ef:ae:05:ae:85:ed:c4:70:4d:27:81:0d:da:37:
5a:97:80:c8:c9:6d:2a:50:68:f7:b4:eb:96:02:91:
cb:94:31:b4:d3:85:02:3c:1a:7d:b6:c4:65:e0:f3:
af:9a:d7:5d:7c:2d:a8:25:bc:9d:02:b3:57:12:d7:
b2:c4:95:58:2f:0a:0c:eb:bc:ec:da:9b:ec:4c:9f:
27:7f:c5:a7:a7:4a:0e:92:d9:38:c0:13:a2:e5:39:
90:5c:b9:82:30:76:7c:02:45:bc:17:3a:11:c8:25:
5c:9e:c0:ed:28:b8:cc:0c:5a:e0:ab:ed:a0:46:3c:
08:81:ff:72:cb:f3:53:56:22:87:65:c9:cc:42:e7:
eb:f8:c9:27:93:45:a7:c5:ee:c9:ea:36:9d:2d:3c:
6c:f0:f5:07:95:6b:73:f1:ab:20:16:d4:10:db:98:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0F:68:EB:FE:11:2D:B7:DE:2C:90:33:96:98:0D:92:0E:A4:8A:ED
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:35:05:f1:94:5a:bd:73:5e:8f:53:2e:b9:c2:7d:28:68:de:
ce:bf:9e:7a:17:4b:7e:b5:55:f8:49:d6:f6:8d:e4:58:9f:d7:
13:58:bf:d3:34:af:ad:49:e5:8f:6c:48:8f:55:08:cc:f4:1d:
f4:be:b4:81:0d:74:ff:84:09:52:a4:e1:ca:f6:34:2e:ad:7c:
e7:b3:32:4c:e2:cd:0f:b2:de:d4:4e:e9:f3:91:89:af:77:93:
f6:a8:a8:56:ec:f9:6e:aa:fb:ed:24:ed:99:49:ff:5b:d1:35:
79:fc:60:36:ce:8f:70:f5:13:b9:c9:f8:a0:7c:86:ba:1a:01:
63:5e:f1:b9:87:19:2c:13:95:62:28:ca:f8:a8:46:4d:a5:8d:
da:15:de:77:61:c8:66:23:c2:d7:cf:5b:be:0e:89:ae:58:a8:
88:f9:74:be:ad:6b:7f:4b:ed:8c:b6:29:64:5e:65:95:73:87:
58:bf:db:b6:9f:6a:50:31:5c:7d:ab:fc:be:a6:34:31:bc:a9:
04:de:1c:65:86:bd:eb:0a:97:20:0e:4d:d4:10:21:d5:02:e0:
6e:18:34:a3:9d:c5:8f:f1:b3:0d:35:db:e3:cb:bc:30:60:70:
15:f1:1a:96:92:6f:ab:77:39:75:78:82:7b:fa:bd:5f:eb:16:
3b:44:11:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlgxnKKxfshzyemvwuyqysDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODk5YzI4NjY0ZWU4MTk0YTY0MDQ4ZTQ2YzYwYzZlNWYx
OTBjNTMwHhcNMjUwOTE5MDcwMDQyWhcNMjUwOTIwMDcwMDQyWjAzMTEwLwYDVQQD
Eyg3NTBmNjhlYmZlMTEyZGI3ZGUyYzkwMzM5Njk4MGQ5MjBlYTQ4YWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QmPbrRgg4USGtdsl4sHgPedjxzY
4gayA7dFhphUvg8I0L89nEKEjWf1W4aWvZiPEepBPJ/xyDZ0/nTLbyLaZBNFZJWh
5390uLvJgxH+f6XvzfCTh7yg2VM+764FroXtxHBNJ4EN2jdal4DIyW0qUGj3tOuW
ApHLlDG004UCPBp9tsRl4POvmtddfC2oJbydArNXEteyxJVYLwoM67zs2pvsTJ8n
f8Wnp0oOktk4wBOi5TmQXLmCMHZ8AkW8FzoRyCVcnsDtKLjMDFrgq+2gRjwIgf9y
y/NTViKHZcnMQufr+Mknk0Wnxe7J6jadLTxs8PUHlWtz8asgFtQQ25iHXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUPaOv+ES233iyQM5aYDZIOpIrtMB8GA1UdIwQY
MBaAFNyJnChmTugZSmQEjkbGDG5fGQxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUt
NTJmZTEwNTEzMTI5LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUtNTJmZTEwNTEzMTI5
LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTUF8ZRa
vXNej1MuucJ9KGjezr+eehdLfrVV+EnW9o3kWJ/XE1i/0zSvrUnlj2xIj1UIzPQd
9L60gQ10/4QJUqThyvY0Lq1857MyTOLND7Le1E7p85GJr3eT9qioVuz5bqr77STt
mUn/W9E1efxgNs6PcPUTucn4oHyGuhoBY17xuYcZLBOVYijK+KhGTaWN2hXed2HI
ZiPC189bvg6JrlioiPl0vq1rf0vtjLYpZF5llXOHWL/btp9qUDFcfav8vqY0Mbyp
BN4cZYa96wqXIA5N1BAh1QLgbhg0o53Fj/GzDTXb48u8MGBwFfEalpJvq3c5dXiC
e/q9X+sWO0QRiA==
-----END CERTIFICATE-----
Generated at Fri Sep 19 17:03:04 2025 by rpki-client