Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: UONBiifiBkijcHbwwOC8xXdCv26Wjmap3igVrUGcpX8=
Subject key identifier: A1:5A:FC:B8:02:94:83:6B:EA:A1:3E:9E:82:D7:13:EE:69:F1:25:F1
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 019933494F58A3AE4DDC929032D91C53C67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 13BC
Signing time: Wed 10 Sep 2025 11:01:06 +0000
Manifest this update: Wed 10 Sep 2025 11:01:06 +0000
Manifest next update: Thu 11 Sep 2025 11:01:06 +0000
Files and hashes: 1: 0HqlbKdQQOK20VPAmPUPyQddTXs.roa (hash: aRBFmT811p8OCKoTireOuzqal/+u+Ljk+6nGgNDmrp4=)
2: 3HTozQB4pcsucL9eexzvUMqz-88.roa (hash: p8l9H8yiS+tCWDGhSt8TqxKK4BPlsy+wIY5igUPwFNU=)
3: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: aLrgZwC5s9l8i5jyRFfVCoJ46Hpbzh+GpCvLFplPWhs=)
4: I_q4haHSQ5-iSHbhiDxn8LO10n0.roa (hash: rR8MdnfYv9DYhofCAQL44jv965jNwY7cLv2/tA4Lg2A=)
5: LMWHVctmfvvA2wgdJVAHRgQ50TI.roa (hash: 4Qw8ZH0YeLtu3JL9HyfQJb52vaJMYGvqmUzqj7paaS8=)
6: RXNrdOw21efpx6l5cQgC8bq0olI.roa (hash: 8j6x5dvkDJAZguY7H+pN2Kt8JqRUnnSH6EpokJsOPmY=)
7: cdhvQ3G9D22hzZ35uWHLO4DK-b8.roa (hash: 9/hDVeqHVKKGEQirCvU77EziyJeBYbpOSUraYbA1sQI=)
8: qNl-Q8HhmrUArxLKQehroWC5qDc.roa (hash: 9pycVyvA/LfKV0R0Bhd4fllbZltDwLcpn1H2WIOi7gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:4f:58:a3:ae:4d:dc:92:90:32:d9:1c:53:c6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Sep 10 11:01:06 2025 GMT
Not After : Sep 11 11:01:06 2025 GMT
Subject: CN=a15afcb80294836beaa13e9e82d713ee69f125f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:b1:25:48:bd:e1:13:e7:e8:85:07:5c:c7:
80:d6:4c:e0:53:36:d2:dc:99:ef:52:70:f2:5f:b3:
6c:85:a5:5a:0c:0f:ad:80:a7:d9:03:1a:fc:79:32:
55:9a:b7:25:2f:04:6a:41:3f:13:e8:6b:df:34:14:
9a:be:c8:cf:dd:1e:82:2b:7f:a5:90:f9:5d:81:ca:
c3:18:c5:6b:6a:3a:db:36:5b:f8:aa:1e:28:1c:95:
d0:16:28:17:e2:85:96:81:87:0b:c3:41:ef:8a:5b:
f9:97:b8:aa:38:71:78:68:cd:49:04:32:1e:05:aa:
53:c8:79:58:d2:72:d7:01:23:45:5f:b7:55:58:22:
42:27:5c:c3:71:b7:5e:16:d2:46:66:26:3e:d9:0a:
e9:a7:e0:a1:4d:6c:9e:61:c5:c5:7c:06:c6:54:f0:
5f:03:02:20:75:63:c0:a4:52:bb:ae:16:18:1f:53:
96:a0:91:4f:0d:90:5b:d6:b5:ee:07:73:77:01:72:
29:73:d3:1e:5c:20:ed:a6:56:5a:1d:70:dc:37:e7:
07:0a:c0:1b:63:af:e5:4f:af:a9:2b:84:29:7e:4e:
32:38:58:ae:2a:78:06:aa:22:cb:5a:79:28:56:bc:
e6:17:c5:b6:72:aa:8b:42:e6:07:52:ae:9c:25:a3:
2d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5A:FC:B8:02:94:83:6B:EA:A1:3E:9E:82:D7:13:EE:69:F1:25:F1
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8b:9c:10:83:ac:1a:b6:68:d9:e1:37:44:b7:b6:37:d8:85:
aa:de:77:87:01:cc:35:11:b0:2b:64:f5:f2:1d:16:1c:5a:75:
12:b9:19:e9:14:4b:c8:41:5c:15:f3:73:c1:72:bd:7e:a4:33:
ac:b0:97:0c:c9:a2:4f:cc:cd:31:99:b6:c8:bc:a0:4f:47:0a:
d4:8d:44:32:b3:b3:cf:af:15:8d:2a:fc:bb:8c:df:5f:b8:dc:
53:27:58:66:04:0a:df:d6:5e:fa:4d:fb:57:0c:4a:20:19:75:
62:7f:52:9a:c7:08:c9:72:5f:fe:21:a5:08:ce:12:e4:b0:77:
87:e1:b0:bd:e9:23:75:b3:66:c5:75:94:96:08:de:d4:02:f3:
0e:d4:71:7f:3d:61:92:60:9d:05:5c:2a:41:97:e5:72:7c:fe:
aa:a4:4e:fb:c1:d7:9a:20:25:44:3e:90:b2:ee:4a:f9:1b:23:
2a:17:3e:7a:59:ba:23:e8:d6:1d:b8:da:41:7e:a0:aa:33:9c:
14:a0:38:59:6d:66:df:04:59:d1:85:ee:9c:fd:97:15:20:fe:
21:c7:a7:78:8b:5e:2a:1a:b8:10:ec:bc:67:5f:a3:7b:db:8e:
42:3d:e5:46:18:34:10:78:3d:a2:f3:4e:1c:f0:f3:32:52:3b:
00:21:e3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:35:23 2025 by rpki-client