Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier: jbXk4A9eznvXSFKeqHO1oZzKgrlnH47qN4ZU6Tbf3oU=
Subject key identifier: ED:47:65:0B:9B:10:9F:10:BF:E5:58:F4:9E:13:F5:73:84:46:8C:01
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 01988DD8A66F3F245E06FC39B09287981DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 08:00:42 +0000
Manifest this update: Sat 09 Aug 2025 08:00:42 +0000
Manifest next update: Sun 10 Aug 2025 08:00:42 +0000
Files and hashes: 1: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: O8kYOF6mX+zreVENRKnxAGikb1uu2QWGv6VyZKBabg8=)
2: I9GqI9GxRbg5gyNw2oYeQXtgJJg.roa (hash: IdZbo1C2DnUJiJSpOjjTPKnvp3frNBJygc4FMjTeWHU=)
3: OJHrSjDn0A0xOyeisC7fOP_zy4g.roa (hash: 4mrlovUy+cBI29r4SEJkRQxz3HoEwjM6nDvfGvlxWBU=)
4: ie70DJhDrGYxNNPSAG6BpAZrtxY.roa (hash: HiOIeBO8KrrORXl70BQK8AAzSZ8zCob2hQpjThQB7t8=)
5: tr4Wz-5rQhPo47mTFs_LgvHDl8s.roa (hash: PZGVkTuh77FvBlVCnDa38AVdteMzJ1COvOQXzBoIS0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:a6:6f:3f:24:5e:06:fc:39:b0:92:87:98:1d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Aug 9 08:00:42 2025 GMT
Not After : Aug 10 08:00:42 2025 GMT
Subject: CN=ed47650b9b109f10bfe558f49e13f57384468c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:5b:63:6e:a6:ca:c4:b3:e6:a3:c0:24:88:
75:61:63:b8:2f:d5:6a:c3:8a:77:93:a0:54:9b:58:
07:d2:0f:1c:69:ca:b8:6e:92:98:dc:26:eb:3b:80:
f9:96:67:ae:06:8c:4d:c9:8b:86:5e:35:45:0a:48:
9f:a0:53:f9:78:7e:65:74:da:ec:42:45:3c:00:a9:
03:a0:e7:b4:84:1b:4b:64:4d:44:bc:50:78:e9:00:
4e:c5:76:4b:23:37:33:ae:32:c8:43:2f:13:36:af:
e6:0d:a9:84:4b:29:65:68:88:d6:2b:7a:70:85:89:
92:35:10:1c:70:40:fa:52:f9:0f:95:fd:10:be:95:
bf:05:03:49:26:9c:b7:16:5b:65:cd:a8:87:f6:02:
ec:ee:d2:6d:9f:80:5a:b9:90:e3:dd:b5:ee:c4:c6:
d2:f1:fc:65:d5:b3:3b:a2:0f:95:fa:3b:86:bc:a0:
22:e5:f2:4c:08:ec:09:08:8f:28:b5:25:38:8c:12:
73:45:8c:f4:01:fc:e7:0b:25:fd:83:b6:ed:4c:27:
96:e4:74:cb:d6:99:c5:3d:c4:fa:88:73:81:91:f5:
08:41:3e:fb:00:4b:e5:40:43:ad:6d:36:3f:fd:ff:
41:6f:33:6e:53:cc:92:5e:dc:17:02:c0:47:1f:3e:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:47:65:0B:9B:10:9F:10:BF:E5:58:F4:9E:13:F5:73:84:46:8C:01
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:11:f0:71:1d:f4:05:5b:5a:6d:30:20:c1:4f:81:96:95:cc:
40:30:69:28:eb:6b:29:19:ab:e3:55:3c:bc:c0:e1:1f:e3:14:
83:ee:e4:23:48:80:c7:5b:b3:99:c2:82:c8:be:7f:f3:db:5f:
79:aa:22:83:2a:d8:26:c4:34:01:28:5d:c5:57:ee:7e:0f:a6:
7a:44:69:ae:f2:bb:b4:98:77:0f:ab:13:33:87:0a:67:32:c9:
63:e7:33:fe:29:1b:de:fa:4b:60:45:d7:5f:05:48:87:44:87:
ad:91:9f:4b:3f:53:31:4c:eb:85:c0:f3:55:99:5a:55:80:cc:
d7:72:89:cb:d2:cf:e9:1c:c4:f5:ec:9a:44:d4:d8:0f:ee:a9:
04:c1:ba:6c:b2:97:81:33:d2:67:d5:6f:b7:ba:b8:e6:72:c5:
11:b3:a8:dc:c6:c1:f6:68:02:46:3c:81:2f:f5:53:22:b1:7b:
29:43:2e:e0:3e:95:f5:04:16:46:4b:d1:74:b8:dd:86:ab:5f:
dd:2d:d1:e6:e7:1f:f1:b7:5d:86:7c:b2:3c:a5:92:bb:cd:e7:
76:a9:27:25:70:f8:4a:13:66:d9:b5:4c:1b:57:e9:16:65:2d:
cb:48:e6:e8:e0:c8:8b:da:e8:46:3e:ab:26:ef:1c:1f:31:ad:
b9:bd:39:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:28 2025 by rpki-client