Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier: j0kOjpPsdk9WoIVmvd2BINL7Rc0d7u/JAqyhLCKp1GU=
Subject key identifier: 8B:69:DB:09:A8:51:5B:63:35:9C:1C:C3:D1:7E:CC:1E:61:1F:45:68
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 0199375CE3F0581BF1827499ADCAE854E3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 06:00:58 +0000
Manifest this update: Thu 11 Sep 2025 06:00:58 +0000
Manifest next update: Fri 12 Sep 2025 06:00:58 +0000
Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: tv2cJN2UKyFLNoFS8wBZEzBQLOAHsQ1OArsYEC4PiQg=)
2: Pzz9-39B29Zan_AKRyiM2W7cTbI.roa (hash: 2gaPpnMFBn7PDm+0BqVVwSzuzPaAOOzR64kAX25LHLU=)
3: iuKuxv9EBM2kBUoWOZrOGISOEXI.roa (hash: M7VP7rss/sZMOY+HK5CMR5G4/5a9JWWosQij25471bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:e3:f0:58:1b:f1:82:74:99:ad:ca:e8:54:e3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: Sep 11 06:00:58 2025 GMT
Not After : Sep 12 06:00:58 2025 GMT
Subject: CN=8b69db09a8515b63359c1cc3d17ecc1e611f4568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:e2:19:c3:9b:56:32:84:c1:f7:b1:25:7b:
d6:f5:92:b9:c9:34:b2:49:25:45:81:c4:0c:b8:1d:
46:13:40:c6:98:3e:c1:30:a5:1e:b9:36:b7:40:db:
f4:70:18:86:70:a8:8a:80:29:f0:15:d7:cd:4d:a2:
4d:91:b1:5a:a9:ba:96:05:f3:ed:2c:8a:11:11:31:
93:5c:d4:33:51:da:ee:8c:5a:fb:a0:02:bd:62:1c:
88:3b:c3:3f:7e:53:ee:e2:0f:2b:49:35:9d:c0:d9:
e2:22:28:24:34:ca:02:f6:fe:ee:b9:fc:5b:be:bd:
ec:e0:ec:87:68:3e:9f:1a:10:f9:70:d5:06:73:1a:
9c:66:cf:f8:94:a8:fe:5e:02:ec:7f:dd:ea:d4:37:
06:eb:b8:96:3b:81:0e:86:dc:c8:00:4c:8d:17:f9:
f5:b4:33:66:6f:85:0a:dc:a0:6e:fd:a7:9e:f6:f7:
b7:18:50:fd:6e:27:41:56:d0:00:95:fc:0e:12:37:
24:6f:6b:75:60:f0:7d:ca:4c:11:5a:7b:f9:dc:73:
85:92:8c:8a:72:67:5b:51:0f:27:8c:82:2a:76:d0:
f5:a6:b2:6f:5b:ea:52:9b:cb:63:39:8f:11:b0:a1:
2e:70:e5:14:4e:13:5e:b3:0c:3d:7a:b1:ee:d2:30:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:69:DB:09:A8:51:5B:63:35:9C:1C:C3:D1:7E:CC:1E:61:1F:45:68
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:74:61:fc:b0:a0:9e:8b:04:27:42:9f:e6:af:de:d7:a9:6f:
9a:8a:09:b6:eb:60:6b:6e:e2:4a:cf:59:4a:11:4d:c1:92:90:
e3:f9:6d:0e:17:59:93:3c:14:df:f1:c2:77:99:4f:0a:fd:f8:
ec:1c:0a:88:c0:f8:dd:a1:89:c4:ae:dc:2d:8f:f6:51:51:1d:
5d:6d:0a:a3:4c:62:45:79:8c:7f:a3:72:a6:9b:11:69:8d:b1:
8b:e1:6a:a8:d4:ce:0a:34:d3:77:70:c9:b1:37:ee:5d:28:82:
79:10:95:1d:20:2a:f5:b5:f4:c8:0c:2c:80:b1:8d:ca:3e:2b:
dc:16:82:dd:95:96:80:ee:3f:8c:48:14:f5:2d:14:fb:dd:db:
de:9a:37:ab:d1:f8:ee:0d:2c:01:bf:45:6c:b4:e7:99:24:5a:
b6:09:da:fd:bf:09:54:ff:a8:b3:27:da:51:e7:41:4d:dc:47:
9b:1a:71:fb:06:e5:e5:15:6f:91:71:8d:ea:25:67:ea:06:7d:
c1:a8:6c:16:62:0a:e1:fb:09:2b:cd:7d:c2:8f:56:4a:fb:bd:
7e:be:d7:a5:b2:f9:5c:34:71:5d:07:57:f3:d2:6c:64:85:41:
65:58:f4:f7:d2:bb:9c:77:59:33:19:eb:8e:53:c9:09:d7:14:
17:cd:77:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:07:49 2025 by rpki-client