
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
File: 3mZANXrkrhD8Cz6dmPKgywEYkDw.mft (raw, json)
Hash identifier: nqpUQAEFKPogkJNub+heYBKE/KLkLPSG/ww52n9/TrM=
Subject key identifier: 66:D5:5B:DB:CB:74:76:47:6C:FD:B5:92:5D:3A:D1:B3:70:86:C9:C2
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Certificate issuer: /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial: 0198C97F505884BD38ED517782F8027C2F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
Manifest number: 0B35
Signing time: Wed 20 Aug 2025 22:00:20 +0000
Manifest this update: Wed 20 Aug 2025 22:00:20 +0000
Manifest next update: Thu 21 Aug 2025 22:00:20 +0000
Files and hashes: 1: 3mZANXrkrhD8Cz6dmPKgywEYkDw.crl (hash: wq5wecvVscrx/JZualAxyVKKgzPkV073gvAn4OxbCE0=)
2: 9Ht1WS_vqd6PGFgJgGHqYQxnzds.roa (hash: jy6H59LUS5waYqQP6Dhp+2VxxeHkS9j62qw0M1cdA/g=)
3: HWj4rrIG5yLx-R7YJHriQZkaHlU.roa (hash: w4NJmcaVn2AcPxlAH9mW36Xv6MPv2ne3C9Tmp8J45QY=)
4: Ja-mDUtTmKTc_5z3WZikEzgxnO0.roa (hash: OHF3bECjzb4WxileHvkYP3598NMiRQdCX4l/f2//5yI=)
5: gizPDPJlnHFMwdNkDj4bjEHwsOM.roa (hash: s+HhHFRsrWXDsklXWcH/16ndefegRFDZvIRvtU1bOnQ=)
6: o4UdTzK11yn9790w6aFya-CRsYk.roa (hash: 5gJHsN2PGfagg0XX4Yhkkp3hRI4hmN+LCY9ILQ0xCTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:7f:50:58:84:bd:38:ed:51:77:82:f8:02:7c:2f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Validity
Not Before: Aug 20 22:00:20 2025 GMT
Not After : Aug 21 22:00:20 2025 GMT
Subject: CN=66d55bdbcb7476476cfdb5925d3ad1b37086c9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:2d:7e:d0:4e:11:c1:31:55:00:0f:1b:ea:
04:bd:90:3d:65:03:fc:af:ea:53:97:d8:fc:92:a1:
69:27:1f:05:e1:be:98:1a:35:92:25:4b:a9:21:ef:
c6:fb:65:6e:46:16:c9:51:3d:c9:bf:79:50:e3:28:
c5:f2:28:39:69:8e:4d:b2:06:b7:2e:43:31:12:f7:
52:7d:3a:41:2c:c8:6a:e3:51:74:71:9c:24:c6:51:
fc:72:b5:b2:83:9f:ce:16:98:eb:b4:51:b8:b0:4a:
05:b4:f5:64:d4:6e:fd:54:97:83:f2:6b:3b:e9:8d:
08:bb:12:6e:11:45:07:82:6d:67:44:92:cc:b9:78:
6e:d3:f4:5a:43:8f:92:31:dc:7d:e3:c4:25:c8:d9:
31:4a:e5:8c:ff:42:13:91:15:a3:85:29:2e:ea:c2:
b8:33:11:a5:80:9c:cd:63:db:44:0e:d0:ef:f8:d8:
9c:61:a6:ed:c2:b8:20:bb:96:a8:a5:54:2f:48:f9:
fe:99:2f:45:c0:96:4c:7f:9e:ec:4e:cb:71:1a:72:
73:5a:73:c2:60:87:78:df:9d:85:2f:96:91:3a:9d:
d6:09:9e:81:4c:cd:a7:62:dc:46:e6:aa:d7:26:51:
44:51:40:27:03:10:2c:4e:76:9e:cd:6e:2b:75:e7:
fe:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D5:5B:DB:CB:74:76:47:6C:FD:B5:92:5D:3A:D1:B3:70:86:C9:C2
X509v3 Authority Key Identifier:
keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:85:74:42:29:e3:3c:08:80:7f:f4:d2:0b:e6:5b:e8:d9:ad:
83:da:2d:a2:e2:03:18:ad:61:25:ea:60:07:b5:aa:31:86:01:
98:90:cb:d9:d2:4f:68:f9:d8:3f:8f:19:b8:04:41:b3:24:ce:
f4:17:f3:c3:f4:72:f7:ba:3e:17:e1:36:a9:0f:b9:28:1f:b7:
8b:48:39:ce:67:62:2f:53:2f:8f:e0:e7:8a:1c:98:e6:11:1b:
a8:4b:24:b5:11:0b:84:71:a6:2c:85:a2:f9:02:bf:f6:b0:37:
84:dc:35:df:e1:56:56:db:20:86:9d:01:93:87:76:bb:1b:46:
14:9c:42:9b:cd:d1:6c:12:7c:37:40:6f:e0:07:d0:48:05:6e:
b6:da:b0:20:c4:ca:81:96:4b:40:1f:44:7c:fa:8d:f3:b3:e7:
3c:3f:60:10:1a:53:7c:73:2e:b0:0d:d3:10:27:bb:4d:08:c8:
36:3f:8a:45:a2:e3:83:3c:f4:74:9d:0c:fb:a9:9d:2f:3c:e7:
a0:47:e6:85:75:4b:d2:f2:c1:8a:9a:bf:ce:c6:a4:b2:ca:26:
a9:69:00:70:19:ac:04:11:55:b4:5b:6c:91:56:01:44:d3:fd:
c8:48:f2:d1:b3:de:59:ef:c4:7c:28:fa:36:dd:c3:fa:a0:2a:
28:bd:5b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:01:56 2025 by rpki-client