
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
File: 3-4r9D8hqBxJLG5qn8bwdNLwohc.mft (raw, json)
Hash identifier: lpLMZ8ykBMFTaJJtBR9qIP0JOVWo5AQyB7T2sfgSLB8=
Subject key identifier: 9E:CB:5A:A7:86:C1:25:D1:41:F3:BB:85:4A:93:98:68:F2:60:40:AF
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 019879ACFD141C09C0C765C035B286C87A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
Manifest number: 1624
Signing time: Tue 05 Aug 2025 10:00:36 +0000
Manifest this update: Tue 05 Aug 2025 10:00:36 +0000
Manifest next update: Wed 06 Aug 2025 10:00:36 +0000
Files and hashes: 1: 3-4r9D8hqBxJLG5qn8bwdNLwohc.crl (hash: sTJQvHhjIA3/Vjk5Es/GKLVHtCWJGiQN+PfzjQXHBPs=)
2: Low4CRi4iGKYokty-NINmJn09rg.roa (hash: Mly1uM7PqUcjuRWWihLVa+ejMa5zwEjs5HqRkIM9ZCc=)
3: TUldFuXRlNkhcxG2k3pbkLp8w6k.roa (hash: u8w+hKuVRJcapFna3Gt95nB+zwn2rJ1IH60Do+ZSEr0=)
4: VFLtaw7ddcrkuS71SLZjd28hT9Y.roa (hash: wkImuoriz8/Wt+wr39TPtXLgxrVgYHqbWY2XyO00qX4=)
5: fWDdDEZ5-7TJ7ifcAQ9Kizx3VI0.roa (hash: 9iAjE9rwQQFIjLwRuw0Wl4wwOwQae4btRIJRt6LJVxE=)
6: iYMgW4EcYcU5AKm4CceLlPmJSsA.roa (hash: 7zWW49XDo1LsXGWIP2om4UTMjsubF7Ml4DbV3OJ7N00=)
7: mWQQr9Df8Gxi-vy8YAXzFkBEGAc.roa (hash: z+245YsTzlJ8Yat/3J5h5H154DAsYclcNAuZzX8bEFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ac:fd:14:1c:09:c0:c7:65:c0:35:b2:86:c8:7a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Aug 5 10:00:36 2025 GMT
Not After : Aug 6 10:00:36 2025 GMT
Subject: CN=9ecb5aa786c125d141f3bb854a939868f26040af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:b5:a1:7e:c7:91:0b:9a:d7:62:3d:5f:8e:
35:b5:d4:d9:cf:6e:17:fd:2f:cb:cc:28:e1:2f:25:
67:07:fb:e7:90:55:9b:55:e5:e0:4a:3f:ff:03:b9:
08:9b:05:2b:5d:21:36:50:33:fe:ef:58:8c:42:50:
33:32:c7:d7:69:94:ee:3a:a8:a7:31:c1:62:f5:ff:
7b:49:70:8c:21:59:e3:21:ef:d8:03:1b:a4:e6:bd:
04:f6:c3:0b:12:0c:5e:94:f6:f7:d4:d9:e1:9f:db:
ab:ba:b9:a7:ac:1f:96:52:2e:df:f9:eb:77:76:0a:
1d:d0:da:7d:50:7f:3c:00:d3:7a:2f:96:6d:85:06:
d8:be:6b:36:1f:4b:e8:7f:2c:ee:5f:66:0e:41:7e:
f6:23:76:49:e2:b2:8a:f0:49:0a:36:13:77:26:ee:
ce:ef:9f:9b:1f:9a:46:fb:22:7f:c5:8f:6c:9d:2b:
64:42:f5:b0:91:4f:24:63:29:14:f6:37:b1:cb:cb:
e9:d8:6a:e0:2c:51:85:c9:68:92:d3:84:da:0d:78:
d0:cc:2b:f1:ae:b2:33:f9:b6:cb:6f:a3:60:9a:8c:
da:08:ce:2e:68:d6:24:ba:95:b6:9e:08:06:02:63:
67:4f:dc:99:04:65:3e:9c:78:83:35:5e:88:20:b2:
58:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CB:5A:A7:86:C1:25:D1:41:F3:BB:85:4A:93:98:68:F2:60:40:AF
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:22:53:47:7a:67:b5:ff:c8:0d:19:eb:6c:9e:cb:42:5e:87:
4f:b7:7d:f7:ca:00:84:67:68:ed:50:c4:2a:ee:59:f4:dc:3c:
c7:3a:1b:9a:50:b4:d2:3e:9e:a7:08:4c:96:c3:4a:1e:93:c3:
54:19:dd:da:66:9a:08:f5:ad:7d:53:4d:62:26:f6:9e:55:48:
02:d6:64:5c:cc:17:84:37:27:ef:7b:d8:33:7d:19:fb:0f:26:
fc:5e:fe:6a:ed:e5:55:53:3e:df:7f:0d:f7:e8:1d:7a:94:4c:
7d:b8:65:3a:a3:0b:6d:62:ed:34:c1:74:b0:bf:3a:0e:10:b5:
21:2b:fa:55:8b:77:40:2b:af:78:59:1b:79:a4:e0:02:db:4e:
91:fc:b6:ae:ae:c2:0a:22:f7:06:54:7d:ca:29:39:fa:c8:05:
7c:5f:31:73:87:c3:5b:79:c6:0e:eb:d2:d7:0b:6d:ac:c4:e1:
00:0b:f0:90:6f:91:64:60:81:69:59:32:b0:58:ac:98:13:d5:
bd:83:f1:2b:c0:5e:5b:82:21:f8:99:c2:d0:b6:a4:71:ee:13:
cf:ef:fe:f7:42:76:1a:03:4a:f7:28:32:5b:64:ab:7a:55:34:
21:bd:2c:1a:de:10:98:03:94:78:41:08:03:14:67:5e:f2:a9:
9f:35:22:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:21:15 2025 by rpki-client