Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: t++7KGQ+205gdA80CO5vcQkO6+otr4Y6vzxvDrIJvAg=
Subject key identifier: 16:E8:CF:7F:3D:EB:17:23:E1:1C:05:D2:15:9A:12:58:EE:7B:1A:B0
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 019881680740303A1C4E127DD33F43D89FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 1034
Signing time: Wed 06 Aug 2025 22:02:15 +0000
Manifest this update: Wed 06 Aug 2025 22:02:15 +0000
Manifest next update: Thu 07 Aug 2025 22:02:15 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: jAevhiiQJVjMrXxiCWWLBQI//EbxgIac/bm5XpQT438=)
2: 9yOwmAU645k5B-2q5IOc7M05GTo.roa (hash: E7bgo02yf2p1Xr2S53fCsY3j/+dXZDb8jPxeB97qfpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:07:40:30:3a:1c:4e:12:7d:d3:3f:43:d8:9f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Aug 6 22:02:15 2025 GMT
Not After : Aug 7 22:02:15 2025 GMT
Subject: CN=16e8cf7f3deb1723e11c05d2159a1258ee7b1ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0f:56:1f:b5:ac:22:08:6d:3c:7b:7e:8c:3e:
ae:a1:2a:cc:d7:f3:c8:38:67:0d:5a:79:29:fa:16:
6a:53:68:7b:7c:97:81:4b:c9:39:20:77:f8:eb:39:
02:f4:ee:47:92:23:d1:a3:91:e1:ec:c9:0d:11:1e:
c2:d7:3f:4d:d5:ec:fe:17:a1:62:28:a2:39:e1:47:
aa:bb:48:85:d8:05:8c:03:05:88:0b:54:4b:8b:89:
88:38:71:1e:ec:4f:39:d5:4a:72:68:ad:f4:8b:43:
2a:81:cb:78:d0:53:e7:0c:4d:80:29:63:0c:da:c0:
b2:7b:c8:11:d2:c3:5b:8d:de:10:37:b3:cd:8a:0b:
35:07:f3:6e:c7:ce:41:21:e7:3f:dd:d2:5d:9f:fe:
99:83:9f:ad:f8:b2:6f:64:7c:db:8d:eb:45:1f:35:
e1:58:5e:04:90:45:1d:6e:69:8e:72:c5:a2:d6:8b:
78:9e:7a:09:99:3e:03:12:e9:b0:72:0a:66:82:fb:
12:17:2d:1b:f5:df:77:07:9c:24:56:5e:8c:cc:b2:
58:32:0f:df:8d:ef:3b:0f:9d:a0:e1:dd:27:5d:79:
94:85:7e:8e:a8:ee:f7:48:d7:82:1e:0e:ff:c5:1a:
81:38:f4:2d:52:9f:d4:b2:5f:fc:65:47:fc:cc:f7:
2d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E8:CF:7F:3D:EB:17:23:E1:1C:05:D2:15:9A:12:58:EE:7B:1A:B0
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b2:4d:09:78:f8:b1:31:02:80:c5:5e:6e:15:45:4d:6b:66:
cd:8f:be:31:f1:15:a8:e1:73:28:7c:2a:78:f2:89:80:f3:f5:
b5:38:f3:a9:a8:66:f8:8c:a5:f5:e2:ea:1a:8d:eb:cc:ed:cd:
ed:b5:d1:0a:48:82:34:3c:7c:7e:9f:7b:4f:8a:ba:b3:9a:db:
1d:07:6f:e8:93:cc:81:fe:11:b5:6a:36:70:55:db:9d:68:9e:
24:ba:67:92:f4:d0:4e:62:d0:f1:cb:fc:84:41:1a:a0:6c:20:
5b:9e:29:73:5b:ef:42:4c:68:ac:76:a7:77:7e:7f:ce:79:0c:
2e:44:9d:89:0c:ab:a1:85:72:9e:ef:c1:db:da:21:24:ae:3f:
26:7c:20:67:77:0a:74:ee:b6:0f:ac:41:e1:f2:31:d0:38:d7:
42:2c:82:bd:ac:27:ec:f9:e1:12:68:77:31:bb:65:c4:67:e9:
f5:7b:ec:7f:e7:8d:e4:44:07:40:a8:65:54:dc:c9:a1:b1:b9:
4b:0f:32:55:35:43:45:c7:21:1d:ee:d5:de:ce:4d:ac:31:1b:
bc:f3:c0:04:fe:e7:ef:62:9c:5c:3e:96:94:12:fa:9d:38:a9:
72:62:81:c5:95:c5:60:64:ea:e3:d4:32:76:01:97:01:70:3c:
94:91:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:22:19 2025 by rpki-client