Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: /9nk8qlRNV5mtxXfVdSOfR9OXx+Nguxvohf/G7140cg=
Subject key identifier: F0:8E:34:BC:16:48:10:36:5B:4C:58:CC:E9:D1:0F:AF:6C:BD:7D:4D
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 01992B5A341958F5E7157596CFDA4C944BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 1676
Signing time: Mon 08 Sep 2025 22:02:35 +0000
Manifest this update: Mon 08 Sep 2025 22:02:35 +0000
Manifest next update: Tue 09 Sep 2025 22:02:35 +0000
Files and hashes: 1: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: UNZB/YeX280I4MvTRkJpX7aIiaJGOqZ0Zq9pGTeEZRo=)
2: KW800OmJGIdT7uikc0QcQ975IG4.roa (hash: dwHKNqVSICACPiCia+yUDPbsR26gug+E9f0Pra0zV6s=)
3: cEC9bPBmfz9Z43qJKU1IUGSC0lI.roa (hash: 4mEdeYIHzDK/DCJ4cVdrdS7DkgcRn2OeioiYgUbofOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 22:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:5a:34:19:58:f5:e7:15:75:96:cf:da:4c:94:4b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Sep 8 22:02:35 2025 GMT
Not After : Sep 9 22:02:35 2025 GMT
Subject: CN=f08e34bc164810365b4c58cce9d10faf6cbd7d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:11:58:45:7d:f6:8f:62:d7:4c:24:93:fd:
80:eb:f8:92:38:0f:d7:88:4e:69:d6:6f:f1:f8:b3:
1d:67:e9:e3:c3:38:09:e0:e4:31:cc:a3:78:6f:1c:
38:f5:4e:3c:fd:3a:1a:3f:b7:b9:a0:6a:6a:6b:0c:
05:1b:01:61:a9:c2:a1:bf:d8:eb:30:fe:e9:ca:1a:
99:cc:1c:ca:2d:90:b9:f5:d0:07:e4:70:a9:32:7c:
0d:81:56:89:2f:70:31:68:5d:4d:05:1e:a8:cd:eb:
1f:d1:ba:a5:d7:e0:f0:1b:f1:9e:06:69:ef:e0:ae:
33:93:5b:ab:fb:7d:b4:1d:7c:9e:89:fc:cb:c8:f0:
ef:7d:f4:c4:f0:58:12:b1:58:fa:b1:11:a0:3e:10:
67:f1:b8:84:06:5e:39:52:34:3d:01:b8:9b:76:cd:
42:e4:78:e3:b1:a9:79:9a:86:9e:55:08:d2:06:d1:
ca:26:de:f2:f4:32:4a:a5:0a:6d:99:65:40:1f:4f:
0b:f5:d9:c9:dc:fc:2e:08:9e:13:70:5d:69:d3:64:
60:c5:2c:87:a6:2b:33:be:f8:db:47:2e:b2:d2:90:
02:20:f8:5d:33:e0:f6:43:ba:a4:16:ee:12:ca:93:
4a:f1:ac:de:50:f2:7b:bf:b1:2c:4e:ff:b6:d6:5c:
c1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8E:34:BC:16:48:10:36:5B:4C:58:CC:E9:D1:0F:AF:6C:BD:7D:4D
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:34:99:5d:30:7f:0b:cd:8f:83:2b:a4:2d:bd:5f:f5:01:0d:
44:cd:77:c1:04:36:c3:be:06:b7:02:37:5e:df:00:4f:8b:48:
ca:e6:1b:f6:e4:2b:e7:6c:7e:4f:65:47:77:6d:70:65:be:8c:
84:6b:2d:77:34:36:41:f5:b4:ea:a0:e6:96:c0:b6:6b:dc:4c:
2c:0b:1c:84:a7:4c:2a:06:d3:e8:93:cf:32:7a:33:d6:4a:e7:
ed:40:23:2c:ca:7d:c9:f0:16:ab:4c:69:c3:2d:5e:25:84:df:
e8:3e:4b:14:4c:df:8d:2c:1a:f4:a4:22:04:90:0f:94:93:7e:
d2:c1:e4:35:1a:4c:a1:f5:5c:ea:4c:46:2f:a3:96:38:89:b0:
ac:d6:c2:0f:b1:d5:d0:5e:60:59:49:d3:f8:ec:d1:0f:d0:83:
c5:af:3e:13:0e:5c:1a:f1:9f:3c:2a:b1:59:33:76:0e:17:ee:
5d:9c:71:14:db:18:6b:0c:68:3f:47:93:b1:98:90:5f:a4:3d:
78:8a:93:88:dc:85:64:73:46:de:ea:94:d0:b1:73:f8:ef:b1:
a3:57:4e:cb:dc:59:47:37:ea:7e:5e:db:cf:d0:2e:19:1d:44:
63:ce:bb:f8:6d:80:f4:d2:ec:f2:23:33:18:24:ff:15:21:c2:
7c:ef:00:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 04:12:44 2025 by rpki-client