Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: QMc6D1RZFLon2B7XL8TRkQWZrf3h5dY325pk8XNkJYA=
Subject key identifier: 65:88:C1:DD:AB:1F:38:6E:69:DA:34:FF:A5:19:EA:A1:47:1E:D8:28
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 0198868CD6CA7317D2784CCF9664CC4EF4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 1623
Signing time: Thu 07 Aug 2025 22:00:33 +0000
Manifest this update: Thu 07 Aug 2025 22:00:33 +0000
Manifest next update: Fri 08 Aug 2025 22:00:33 +0000
Files and hashes: 1: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: 3w2Y10BoSQUTifbAz9Xg/FbCnf0y59DNTMU+yfAW3jk=)
2: I2pncAJfzNdJmYYh59kVF5OSpUs.roa (hash: lHfLeGadLKnQRU2ejGfcyZ67n8h62UJ2WQIx9Gm+axg=)
3: MnzrFfyCM6_m24BkwXpZ_Rso1RQ.roa (hash: XgLOcASonVn7TWXy+ktIGTPZ2UgFdKpsifVTE/uxOB0=)
4: UJU_wGK_nKOpS66Lv-qw5sHx6Yc.roa (hash: DVPLZ7QtHdhq6Tawu/C5Hzz46ZghvtTkOTNBcz5aL5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8c:d6:ca:73:17:d2:78:4c:cf:96:64:cc:4e:f4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Aug 7 22:00:33 2025 GMT
Not After : Aug 8 22:00:33 2025 GMT
Subject: CN=6588c1ddab1f386e69da34ffa519eaa1471ed828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:28:39:d1:34:3b:10:34:50:29:0c:69:04:
99:f1:88:14:77:4d:18:e0:5a:55:6e:08:c0:8a:d7:
f9:7d:86:7c:d6:6a:61:44:a4:30:2f:5e:2a:ac:90:
bd:d4:35:60:b6:6e:1f:fb:37:05:3c:94:d4:12:38:
88:0e:2d:90:58:a5:6d:c1:98:e0:4b:27:41:73:4b:
8e:3e:fd:50:e1:be:25:db:d7:9c:4d:2b:e2:22:43:
d6:b5:d3:13:f3:57:08:a9:49:a0:67:92:d8:2c:9b:
9a:ae:b4:b5:84:a0:cc:8d:fe:11:71:54:57:f2:eb:
2d:9b:ad:b2:82:05:a4:bd:a8:e5:7e:91:3f:ae:5a:
b4:81:a4:61:1d:d8:7d:d3:02:4e:00:c1:da:f3:83:
f3:3a:6b:05:fc:c3:88:1d:95:3f:a5:27:71:3b:9d:
28:ae:05:d0:0f:f2:fc:74:3c:b4:78:c8:77:82:63:
76:c8:91:ba:f2:8a:46:0e:e3:c4:d3:75:dd:35:51:
f9:5e:5e:a0:b4:82:cb:d7:28:c2:79:f5:dd:60:ad:
8d:a1:21:20:e8:c3:f2:48:b0:84:41:9a:5e:07:0c:
8c:40:9f:59:f9:83:0a:6f:45:88:c4:f9:06:ba:dc:
48:d1:eb:26:f3:9e:5a:b0:9c:76:72:7f:17:38:be:
99:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:88:C1:DD:AB:1F:38:6E:69:DA:34:FF:A5:19:EA:A1:47:1E:D8:28
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:12:54:26:4e:3a:70:fc:34:31:14:92:b4:19:9b:48:37:97:
c9:86:fe:d9:73:6c:b9:52:63:9f:b4:f4:57:fc:19:9b:90:a3:
6b:00:2c:91:8d:27:7f:84:37:b2:e9:d3:95:3c:0b:c0:d3:c2:
10:41:3c:08:02:ff:29:d3:62:cb:b9:89:76:25:7a:61:7c:e9:
53:b3:b1:44:fa:5d:05:fb:b6:6d:f0:68:f4:74:3d:9e:7a:10:
1d:cb:df:ec:ad:1e:9d:59:c8:9c:ab:e4:6e:72:fe:26:5a:59:
1b:df:a7:d0:11:50:38:97:17:56:62:28:c2:a9:78:82:00:7e:
33:7f:da:57:37:58:07:b9:56:82:f3:41:c0:77:d6:4c:ed:ed:
fe:ea:33:e6:42:35:f1:a8:4a:0e:67:d0:1a:e7:8f:bc:4b:44:
79:75:df:c3:2c:2b:9b:bf:ca:3b:4f:88:78:09:59:76:7e:58:
e6:24:3c:82:f6:7b:f2:8c:4c:3a:b4:5c:82:f0:98:b7:ab:ee:
63:54:ac:70:f1:ee:2e:21:2a:56:77:0d:0f:95:31:22:07:b9:
3f:c2:26:9f:14:d1:de:80:ee:ac:ee:01:84:1d:f4:d4:0b:9c:
9f:b8:86:f7:02:66:fc:b7:26:bf:c7:96:48:0a:23:73:41:08:
f8:87:cc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:07:18 2025 by rpki-client