Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
File: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json)
Hash identifier: Jez2g/KCYk9yDYcaKvNKeGvC7VaZUoxJurKrks32x2I=
Subject key identifier: E8:38:C0:D4:68:0B:ED:CD:B7:E0:E7:E1:7A:1C:7D:2D:C2:7C:2E:1F
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 01993424FB193675A4444491CAFB4AA35D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
Manifest number: 1684
Signing time: Wed 10 Sep 2025 15:01:02 +0000
Manifest this update: Wed 10 Sep 2025 15:01:02 +0000
Manifest next update: Thu 11 Sep 2025 15:01:02 +0000
Files and hashes: 1: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: 2s2H2puXhUm+5zObL1NFeBkrLOyf6eTVcBuhXMSmttU=)
2: 6JZopMJN7uTSjk8RLqAqQqiOTv8.roa (hash: i0CLCf229jC92V+lcugJs5cHzmKb/QwzzortpUgSlE0=)
3: C_l7gY4HKMAH6m-SKmgQfr13Qes.roa (hash: pRZ/nLpDPpbsV4pq3dfe7vuh4pYoUDOFa7B5tX5SH6o=)
4: F28FkCdyuci3Fria3smj-aR0Mo8.roa (hash: +iHBrJeXSZDW37L79isCmbH1GRGsYAUMJPznVWSAn3s=)
5: HxeMl3I7fWCrTKC3UKE8t5xV0DI.roa (hash: zshfuevzv04489EuaUye3hUzbr9QLab/OpuQsfk2Dcs=)
6: J6fnUwtuy6KkAVjKhE44GNNzN8M.roa (hash: nJgWO4VkQ+dgAVkCE/fAmTK8VpG4vrJ+GVnehbPgZ8E=)
7: KwTls30WYcznTSabSq35vBeXpj0.roa (hash: X/ekOhBXSP8fVDHGwbrzlLZCwxwJt0Lb7wF+ki+I/bA=)
8: U_EQ5jekqkfzEnde1Ryv_SKglkw.roa (hash: cXnEtyK2NW31Ug/q25GQCbINI47bxmk/UuYt64mKZR0=)
9: aMc4nGsoGQu2w3W1s-uVvNsFK0I.roa (hash: /2ttmZLJW9TyxvH3IbbsGdnKYvWQ9tFHHmFxUOSmV/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:fb:19:36:75:a4:44:44:91:ca:fb:4a:a3:5d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Sep 10 15:01:02 2025 GMT
Not After : Sep 11 15:01:02 2025 GMT
Subject: CN=e838c0d4680bedcdb7e0e7e17a1c7d2dc27c2e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:60:1e:a4:56:b1:aa:d9:32:a8:f3:00:20:3a:
04:65:ad:49:b0:56:83:d9:c4:12:f4:d7:c8:85:32:
c6:7b:62:56:de:66:c4:d9:4b:5a:91:a0:19:cb:67:
dd:5b:08:c6:cc:07:5d:c4:90:f1:72:2a:26:6a:cf:
30:76:b1:ba:d0:eb:85:f6:66:49:41:11:1f:48:f2:
ea:f6:79:a5:68:ea:c7:f1:39:44:15:7d:85:dd:fb:
5c:37:3f:4d:54:5e:be:3f:1e:22:e6:08:12:31:f1:
c7:96:7f:bd:01:db:4d:ec:19:37:4d:b0:22:22:d0:
d6:d2:68:8e:bd:07:ba:ba:75:23:36:de:58:46:01:
e2:1d:81:15:d8:d1:cc:30:ba:60:e7:9f:9c:ee:7f:
e6:37:64:6c:df:2d:01:2e:32:30:b2:95:2d:b3:5e:
6d:a1:7f:0e:0b:b1:ce:20:16:83:9e:3c:e9:f5:20:
03:b1:fe:f7:e3:3a:22:17:e5:7c:d4:06:8c:aa:36:
c4:ec:0d:5d:33:fe:94:17:b2:83:3b:c4:8c:80:1b:
8c:02:ff:e9:ec:db:95:b6:a7:57:cc:80:be:e4:a5:
50:9c:3b:f3:58:bc:dc:6d:5e:af:7e:59:c7:f4:c1:
30:1e:14:4a:05:0d:b4:c9:57:b8:77:20:a2:3b:2c:
9c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:38:C0:D4:68:0B:ED:CD:B7:E0:E7:E1:7A:1C:7D:2D:C2:7C:2E:1F
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8d:d5:80:9b:3f:67:13:21:46:87:7a:63:a3:0a:b0:70:ec:
cc:ff:4b:1c:20:33:22:21:64:00:d4:0a:20:df:54:e2:12:bc:
1e:2e:d5:cb:45:71:92:c1:69:ac:8c:64:0a:00:15:c8:5a:86:
0b:75:5c:f9:94:87:79:c1:2c:4f:5f:c4:fe:4a:93:8a:05:f9:
fd:1b:f5:c1:10:8d:67:0c:54:a8:24:c4:ff:b3:27:a8:d3:07:
07:3b:9e:64:1d:95:28:f6:84:68:e3:0b:eb:75:3f:c1:b1:bf:
8c:91:ab:5d:f6:7c:3c:49:b3:a7:6a:5e:1e:11:a7:bb:41:b3:
83:16:1e:bf:4d:b2:de:e8:5a:7f:24:ac:ee:19:6c:19:ac:46:
b4:44:eb:eb:7b:3d:2e:dd:e5:da:9f:01:fc:52:93:48:0d:e8:
10:6e:d0:34:d4:77:bf:db:0a:2b:94:e6:d4:b1:72:ad:78:64:
46:a6:ff:f7:44:a1:41:1e:03:ca:4f:23:dc:78:c6:5e:01:71:
99:15:cb:79:15:2e:1c:53:4d:b2:75:3d:2a:78:d8:73:d9:ee:
ff:a1:34:ba:1b:15:f7:a9:8b:32:d5:d9:c7:df:41:2f:3f:dc:
ea:13:d7:22:21:02:5b:a0:e6:18:e8:95:a8:70:c8:89:99:ab:
99:63:7b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:19:44 2025 by rpki-client