Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier: 9tuRS7wpu8qOs9yTYF6JWXzSjrsiJ1DcBUgyPL+nJyg=
Subject key identifier: 9E:65:1D:49:A3:FE:6A:86:2A:2A:D3:5F:2B:0D:50:AB:B0:B7:65:06
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 019881D48AB16086F81C328A4812B7083E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 00:00:46 +0000
Manifest this update: Thu 07 Aug 2025 00:00:46 +0000
Manifest next update: Fri 08 Aug 2025 00:00:46 +0000
Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: HNkI7ZHmcLhejvGPW/IFgn90gRF3EuiUFJWSaRyAnr0=)
2: Pzz9-39B29Zan_AKRyiM2W7cTbI.roa (hash: 2gaPpnMFBn7PDm+0BqVVwSzuzPaAOOzR64kAX25LHLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:8a:b1:60:86:f8:1c:32:8a:48:12:b7:08:3e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: Aug 7 00:00:46 2025 GMT
Not After : Aug 8 00:00:46 2025 GMT
Subject: CN=9e651d49a3fe6a862a2ad35f2b0d50abb0b76506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:b4:82:55:e7:13:eb:f1:06:18:da:47:0d:
63:ec:24:d8:bf:d5:0e:a2:7d:d3:2f:96:9d:24:23:
a8:8f:55:72:d8:63:f5:64:a8:dc:48:e2:5d:d8:e0:
4e:71:fa:dc:e7:62:3f:8c:4d:e4:dd:3b:a3:75:58:
50:cc:c7:e7:39:0d:f0:eb:17:8a:a1:88:14:be:d1:
de:ae:c6:6c:13:10:3e:38:ea:38:d3:05:76:2e:ca:
35:64:d9:95:9a:da:ca:43:f9:e0:5b:6b:2a:fd:c6:
a4:1c:0b:72:f8:6d:03:88:3a:de:47:9c:40:b2:62:
aa:11:98:06:31:dd:ec:9a:90:6d:50:79:51:0c:4c:
fd:e9:28:0a:eb:97:75:a9:a0:ea:61:72:d5:4c:eb:
ab:48:57:ee:a3:fe:0e:d8:26:46:5f:e4:65:c5:9c:
7c:30:05:47:45:c6:a9:a2:6c:fe:6a:0a:d1:5e:42:
9e:fe:9b:3b:4f:15:e2:f3:85:1f:61:f1:a8:13:1b:
f8:5a:01:21:a3:54:9a:cc:ca:78:68:76:aa:91:dd:
80:02:06:c9:dd:ad:b7:ac:9b:7c:0b:1f:3b:17:67:
b1:39:8e:a0:9e:53:db:46:38:15:29:2b:1a:5a:43:
91:75:f3:d6:98:34:12:7a:60:c6:ef:81:d2:49:fc:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:65:1D:49:A3:FE:6A:86:2A:2A:D3:5F:2B:0D:50:AB:B0:B7:65:06
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:74:e0:f8:7a:e1:94:9f:6e:2a:03:88:2e:03:ae:ff:16:1a:
9e:d3:82:52:09:76:2e:55:4d:f5:af:a3:cd:23:af:00:20:e3:
b4:14:73:05:d5:cd:29:9d:57:1d:1e:cd:a2:48:36:ee:15:35:
38:ba:93:24:c5:c2:02:84:e0:97:46:4b:46:65:c5:35:39:70:
0d:25:85:59:cd:ca:c0:a1:67:30:6b:9b:e9:21:b3:9d:ed:aa:
d2:97:f7:b1:3c:a6:71:bf:62:a0:16:bc:7f:d5:f6:84:d1:2a:
8c:8d:45:28:92:23:dc:f2:89:89:3f:5f:af:a7:fe:ef:81:93:
87:7f:b5:e2:70:13:d6:b4:e7:ab:b2:c3:7e:04:f5:63:61:60:
d4:71:b9:3a:86:bb:9a:e4:fa:57:48:6f:41:61:47:79:1d:a1:
68:67:ca:f3:fe:c8:93:8d:c3:9d:a5:47:9c:e6:11:23:2b:05:
a2:14:a2:0f:72:69:e7:81:10:70:11:24:a1:1a:ca:e8:6b:08:
3d:4d:7e:ca:b9:50:1d:74:28:e1:78:99:e0:d0:22:b8:89:4f:
5d:fc:27:17:87:5b:39:06:da:36:e0:49:49:61:9b:a2:83:d7:
1c:7e:bf:9d:7d:7c:a1:db:23:79:ca:7d:43:16:94:28:7c:86:
f7:7a:f5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:28:35 2025 by rpki-client