Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: C4nuZgcxTQHisxKWE4Y0DUB7vWf3FxG9DTkNBs0p+K8=
Subject key identifier: D6:91:E4:41:A0:43:D3:2D:37:D1:50:D6:3C:9B:85:9F:F0:B7:04:CE
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 0198868D780A6A930B9BBCC5D91F4676BD63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 22:01:14 +0000
Manifest this update: Thu 07 Aug 2025 22:01:14 +0000
Manifest next update: Fri 08 Aug 2025 22:01:14 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: TmDS9j+WuVNVyveJWSiR9xsVz6eD7jQIQvLoye+Gd4c=)
2: 9euEZiQBZa0KQy87mhddaAGMyJs.roa (hash: SlkEYhw31htGhY3rwyORB+KNW056wx1mf03bV0slrXo=)
3: PbQAq4tBfBzJf67NNR29Pj0FkmA.roa (hash: 68zQoRFiAUVZyRagTzVHGcIdd/jEkcY9EEgWfXz5qFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8d:78:0a:6a:93:0b:9b:bc:c5:d9:1f:46:76:bd:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Aug 7 22:01:14 2025 GMT
Not After : Aug 8 22:01:14 2025 GMT
Subject: CN=d691e441a043d32d37d150d63c9b859ff0b704ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:7f:c5:8a:2a:09:97:f5:f9:77:96:8f:24:
0d:7f:9e:8d:1b:4b:aa:5e:39:69:c9:2a:e8:28:db:
81:97:a5:f5:68:a6:19:c0:fc:dd:4d:f6:4c:4f:24:
9c:2b:ff:0d:32:b4:45:95:35:0d:c5:91:59:d0:d7:
3a:38:72:13:f1:e1:a5:6c:54:eb:58:af:0f:f0:48:
4d:62:9c:70:cb:63:21:b2:74:22:ad:59:4d:8d:05:
3f:40:d0:21:15:5f:57:9f:bb:44:19:cf:a2:e0:8e:
58:bb:f9:bd:e9:1d:3d:e4:33:6f:99:b1:89:30:28:
c4:7d:a7:1d:cd:66:bd:d4:94:4e:e8:7f:8e:8e:32:
61:bc:91:99:fe:90:13:2b:00:65:a7:e7:66:9c:17:
c0:bc:5b:c2:aa:87:fb:2d:94:aa:59:02:1f:bb:d5:
c4:d2:5a:8a:cc:7e:bb:b3:86:41:b8:12:aa:72:6f:
44:58:7f:61:e0:ef:63:e2:bb:14:51:1b:c3:7a:e9:
c5:a3:2c:e4:9c:50:c8:4e:02:e4:e5:c9:89:6d:2d:
78:78:f3:27:59:15:56:9c:3d:4b:8b:9a:4e:c1:e6:
eb:90:1e:01:a1:00:85:11:74:8d:84:fd:1d:92:89:
bd:e5:60:b2:ca:5d:eb:c5:bc:42:2e:ef:24:b6:bd:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:91:E4:41:A0:43:D3:2D:37:D1:50:D6:3C:9B:85:9F:F0:B7:04:CE
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bd:62:e8:19:4f:75:ba:98:70:fd:69:4b:39:56:e3:d7:23:
72:9c:57:38:80:cd:7d:89:f5:aa:52:83:6f:13:f7:e0:1d:0b:
ab:ab:ac:b2:cb:61:ec:88:a1:43:f3:bb:e0:24:1c:3a:23:24:
4a:fa:f7:2c:17:25:e5:e1:d0:f7:f9:32:a3:40:87:75:ca:f6:
13:c7:cc:71:61:78:17:9e:7e:5c:10:d0:50:ae:7f:47:3e:ee:
70:33:d4:66:cb:d1:91:84:6a:dd:69:f3:d3:0f:16:d9:2d:5f:
2e:7e:97:11:7b:a7:1b:ad:dd:b6:ba:fc:d7:dc:46:34:d2:ca:
1a:d2:8b:14:ab:64:a7:36:e3:9b:79:bc:8a:9f:72:36:9c:40:
0e:eb:cb:4d:2f:03:79:7b:e3:81:73:f3:73:80:28:8a:73:72:
44:79:c1:82:71:15:9e:e2:1d:1a:96:67:fd:54:69:9c:2e:cc:
e3:d6:01:7c:35:ad:70:06:79:8e:59:db:fa:15:2d:62:26:8f:
64:5f:c1:a1:ed:d8:c5:89:ab:7f:9d:7b:66:ce:74:43:d7:05:
15:1c:46:32:64:45:4c:78:52:32:ca:0a:ab:a3:a3:25:1c:c1:
c8:73:73:7a:81:56:d9:c1:d8:c4:18:41:c0:7b:7a:6b:16:f4:
eb:cb:21:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiGjXgKapMLm7zF2R9Gdr1jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYTQ2ZWFhZTdhZWYyZjQ0ZmU2NjAxNjJiYjlkYzcwZDY1
MjVhZjEwHhcNMjUwODA3MjIwMTE0WhcNMjUwODA4MjIwMTE0WjAzMTEwLwYDVQQD
EyhkNjkxZTQ0MWEwNDNkMzJkMzdkMTUwZDYzYzliODU5ZmYwYjcwNGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7R/xYoqCZf1+XeWjyQNf56NG0uq
XjlpySroKNuBl6X1aKYZwPzdTfZMTyScK/8NMrRFlTUNxZFZ0Nc6OHIT8eGlbFTr
WK8P8EhNYpxwy2MhsnQirVlNjQU/QNAhFV9Xn7tEGc+i4I5Yu/m96R095DNvmbGJ
MCjEfacdzWa91JRO6H+OjjJhvJGZ/pATKwBlp+dmnBfAvFvCqof7LZSqWQIfu9XE
0lqKzH67s4ZBuBKqcm9EWH9h4O9j4rsUURvDeunFoyzknFDITgLk5cmJbS14ePMn
WRVWnD1Li5pOwebrkB4BoQCFEXSNhP0dkom95WCyyl3rxbxCLu8ktr1DSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaR5EGgQ9MtN9FQ1jybhZ/wtwTOMB8GA1UdIwQY
MBaAFN6kbqrnrvL0T+ZgFiu53HDWUlrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEt
MWZhOWFjNTgwYjhlLzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kZTM4OTAtOGQwNi00MjdjLTg1ZjEtMWZhOWFjNTgwYjhl
LzEvM3FSdXF1ZXU4dlJQNW1BV0s3bmNjTlpTV3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASr1i6BlP
dbqYcP1pSzlW49cjcpxXOIDNfYn1qlKDbxP34B0Lq6usssth7IihQ/O74CQcOiMk
Svr3LBcl5eHQ9/kyo0CHdcr2E8fMcWF4F55+XBDQUK5/Rz7ucDPUZsvRkYRq3Wnz
0w8W2S1fLn6XEXunG63dtrr819xGNNLKGtKLFKtkpzbjm3m8ip9yNpxADuvLTS8D
eXvjgXPzc4AoinNyRHnBgnEVnuIdGpZn/VRpnC7M49YBfDWtcAZ5jlnb+hUtYiaP
ZF/Boe3YxYmrf517Zs50Q9cFFRxGMmRFTHhSMsoKq6OjJRzByHNzeoFW2cHYxBhB
wHt6axb068shnA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:11:27 2025 by rpki-client