Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
File: 3AKxj1iKULknT-NGn_i9ShZJ100.mft (raw, json)
Hash identifier: H8+8z4jWkhuBSoXfdp6JcSRkgwHe7EObAyr6yhwJC9o=
Subject key identifier: 12:9C:D1:D8:64:9F:BC:A0:5C:EF:FE:D0:31:81:AA:8A:4D:30:AC:94
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 0199364A428F1B833549B73F1DB5F78907CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
Manifest number: 1697
Signing time: Thu 11 Sep 2025 01:01:00 +0000
Manifest this update: Thu 11 Sep 2025 01:01:00 +0000
Manifest next update: Fri 12 Sep 2025 01:01:00 +0000
Files and hashes: 1: 3AKxj1iKULknT-NGn_i9ShZJ100.crl (hash: zKTMvoQ8gZRWjPcwKVoM5nPBE1X/vnoBOPBTNnzm730=)
2: 6vn0S84Of3Am641RtQSWgEcI8LQ.roa (hash: liXU+EaS34eLz4h7mt5PwqdMf8bXjU0VdoViqn9V7yA=)
3: 8CNNYBbzQiDFPTM1tjqp5lUESM8.roa (hash: FKMYJ+6HiuRFIY6sbk4LB3mHseE0YsFT5neIU8ZSV0A=)
4: PC0WYdZ1ycG1Cd4ptQwx-c0T2q0.roa (hash: At2fGeC/cafSt/IzSRflfqxkQbNcMN2V1hxeUFtAGgk=)
5: SgwPvwknub36baQ9KcDiF10XVjg.roa (hash: AqBX/OOtLCRwId7Bx3Diq3oyJG6vd4oLaGxEgTaatfA=)
6: VajIGedTAEjBNV3b8yhI3Gm_wwY.roa (hash: zWXkCVS1+asFBr2Z3nZVK8HEU5fThFspnuVO3DjbBl4=)
7: goC_YpQrwJcU48WyzOg3OlsUAbY.roa (hash: OHpeanfXRy8bamPYQwO5dLykWIe4C63dtCxwNHxZdBc=)
8: lXMs99__wPFL_tQdoxzgPhccZK0.roa (hash: OuWROGz9NUYwdhgN+POUZ2OWYBha2GAUM0PW+Sf4wFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:4a:42:8f:1b:83:35:49:b7:3f:1d:b5:f7:89:07:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Sep 11 01:01:00 2025 GMT
Not After : Sep 12 01:01:00 2025 GMT
Subject: CN=129cd1d8649fbca05ceffed03181aa8a4d30ac94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:55:95:bb:3e:0a:99:2b:08:05:00:24:39:76:
a8:b6:7e:b4:59:00:34:00:62:70:6e:c7:e0:aa:55:
b5:27:cc:1e:00:73:da:9c:08:47:81:2c:ad:81:64:
e5:cf:71:0b:1a:64:a9:ce:c7:18:df:f3:8a:ec:e1:
74:c5:fd:f1:1b:c4:01:c3:9f:39:a0:1e:32:0c:09:
ab:fa:84:5e:db:77:00:5d:6c:b5:14:fa:fe:4f:b2:
32:a6:3c:4a:9a:a4:b9:bb:1e:fc:2b:a7:d0:be:b8:
84:57:47:12:9e:8c:3c:24:ab:04:0a:11:ae:e3:d6:
ba:4a:f7:fe:86:42:0d:ab:e8:57:2a:05:38:0f:09:
c4:d0:3b:da:7d:86:cc:97:e2:e7:91:3d:47:e4:ca:
05:e3:08:d9:23:fc:9f:e9:e4:f1:c7:62:89:b1:db:
6b:06:ab:77:e6:f6:cc:e2:0b:af:93:3d:5e:31:fd:
4c:01:eb:05:3c:29:19:b8:52:cb:2b:4b:27:a9:b8:
c5:3a:89:65:24:1e:6d:8f:56:c8:78:b5:b0:6c:81:
c5:f6:bb:04:65:f3:54:ec:c0:cb:6d:df:fd:5c:bc:
6c:37:fa:4d:a7:01:93:61:63:38:41:af:7e:d8:d2:
8a:ce:9f:fb:38:47:dc:aa:dc:e5:7e:3c:84:df:88:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9C:D1:D8:64:9F:BC:A0:5C:EF:FE:D0:31:81:AA:8A:4D:30:AC:94
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:25:f8:40:79:bf:c6:09:94:67:25:96:b1:ff:23:95:69:61:
7a:ee:18:ba:54:97:66:6e:79:70:85:49:aa:9a:9d:a3:bb:e9:
7f:3a:29:b7:e5:7c:68:80:0c:87:73:2d:5b:9e:1e:72:ca:65:
2f:42:e6:41:46:15:75:94:94:28:10:e8:c3:ea:22:8b:46:d4:
54:29:59:25:cd:75:fc:0d:e1:54:6b:b8:28:89:3d:cc:cb:da:
f7:7c:70:70:c5:5f:e6:c1:ab:a1:0a:c2:bb:0d:8f:f1:3f:fe:
c8:25:6d:20:32:80:29:49:7b:dd:b2:62:80:a1:da:78:84:9d:
f8:eb:24:bc:4c:90:6d:4f:27:08:56:5d:fb:08:a3:65:49:54:
34:12:28:9d:3d:7a:1a:1f:9e:b2:71:3c:b0:95:bb:da:de:19:
a1:ee:48:13:97:35:ef:2e:cb:ff:94:31:de:1b:99:21:c2:d5:
3c:6f:4b:ff:9c:fa:87:06:fc:d6:8e:fa:b3:8a:96:9d:ab:c3:
c7:6e:b2:26:6f:09:e1:3c:e5:e8:ed:1d:cf:05:e7:fa:8c:c9:
7d:7a:00:6b:d5:7c:6b:14:20:59:94:52:48:8a:1a:71:46:a1:
57:12:e8:72:59:0b:c9:f4:5c:3e:ce:fa:c4:28:b5:c3:d6:1a:
41:1b:83:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 05:12:22 2025 by rpki-client