Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier: kBpEPaUER0ZUSTGrC7Akf5dSnjMHWKPp9jsMtD8CyfI=
Subject key identifier: 4C:86:67:2F:34:83:59:6A:33:42:EF:98:C5:EF:EE:B8:14:AF:ED:20
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial: 019922FAC9EE2CA9851002F39E59CEAB3B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number: 0476
Signing time: Sun 07 Sep 2025 07:01:24 +0000
Manifest this update: Sun 07 Sep 2025 07:01:24 +0000
Manifest next update: Mon 08 Sep 2025 07:01:24 +0000
Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: cdC9THVt1jGMzbNc5J8JIheivYfx7FBR0vxGolOTx7k=)
2: PT68lLdfHWq61L0p7mbOXLRwHhw.roa (hash: A4keDsv/7uOGmjAx+h6C5RlssIOEsmTqNcUP9OgH66s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:c9:ee:2c:a9:85:10:02:f3:9e:59:ce:ab:3b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Validity
Not Before: Sep 7 07:01:24 2025 GMT
Not After : Sep 8 07:01:24 2025 GMT
Subject: CN=4c86672f3483596a3342ef98c5efeeb814afed20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:55:0b:72:2a:c1:db:00:bc:a9:7d:8a:e1:
f7:78:6b:54:e5:1a:4f:94:78:3c:7a:a7:0a:44:32:
f8:10:09:d8:78:f4:f6:80:b6:fd:a5:91:7a:1d:a1:
6d:93:86:5f:b1:3a:fb:37:8d:93:44:5c:af:1b:7d:
50:a8:f7:e8:9d:6a:ff:7f:ba:90:d2:c8:c6:e2:38:
51:26:62:4c:fc:1f:26:10:e5:7a:2b:e8:98:aa:45:
4d:64:0c:f8:5d:fa:12:06:47:a4:66:19:85:3b:5f:
a2:06:f4:32:e9:d2:aa:7e:77:a3:a4:1e:8b:53:5a:
78:e1:e2:c4:13:8e:61:c1:dd:4e:ab:3a:e7:f1:b2:
17:ce:ce:73:92:e8:6d:89:b5:ea:4f:13:5a:55:ce:
19:d7:8a:67:66:02:67:eb:b6:19:a7:8d:44:99:bc:
29:b8:3e:13:86:5f:61:39:1a:52:e9:ef:b0:1a:04:
85:e2:5b:0d:a9:98:ab:5c:83:10:c2:46:74:fb:be:
c8:fd:bb:a4:07:42:b2:31:05:cd:a2:bc:e8:6f:8d:
6f:42:0a:7e:7e:53:50:ba:bc:c2:01:0a:05:c5:45:
b2:1e:8d:39:f8:64:38:26:2a:3b:61:22:47:08:2e:
50:4f:48:dd:ed:e5:d6:de:8e:22:0f:d0:ed:8f:6e:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:86:67:2F:34:83:59:6A:33:42:EF:98:C5:EF:EE:B8:14:AF:ED:20
X509v3 Authority Key Identifier:
keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0e:97:c3:11:f5:5f:6e:6e:9d:6e:47:63:7a:c5:13:1e:b5:
b5:77:1b:99:d0:71:87:6c:e3:df:99:91:36:6d:bb:3d:0e:af:
54:dd:b6:ae:3c:63:3a:4a:34:65:01:2e:1f:6d:06:cb:2b:0a:
79:c9:bb:41:64:ac:60:d4:51:52:7a:47:c6:d9:62:ac:a4:92:
65:5c:e9:f5:5d:d3:54:a2:94:ee:9d:9c:78:7f:b5:ee:17:0e:
4d:15:0c:b8:d8:19:56:a5:58:d3:c8:e4:ff:3f:5c:e7:9b:5d:
9f:23:21:72:96:1b:52:1d:21:9c:bd:95:51:27:ea:62:da:12:
a3:ea:64:22:49:91:9c:e9:ec:c5:84:55:57:2c:36:7f:d3:b1:
1b:be:a6:2d:a4:55:d8:72:52:cf:c6:eb:c2:8c:85:6d:b9:00:
af:e5:7d:7e:77:10:0c:ad:c2:7b:4d:dd:16:32:c2:c2:4c:f2:
2e:aa:55:ec:7b:03:d6:24:31:6e:72:13:3d:20:10:c8:2f:cd:
d1:57:84:0b:78:01:bf:49:be:4d:31:61:ed:8a:11:1b:e2:9c:
16:32:5c:49:5a:7e:d3:69:71:a3:dd:5a:4c:55:9e:2a:ab:5f:
22:e6:0d:78:ac:20:4d:dd:25:45:ad:33:55:75:bb:27:95:f6:
51:65:66:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:13 2025 by rpki-client