Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
File: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft (raw, json)
Hash identifier: 9kKEYlRGURWLJ2eeAZA5K4B2yqmh4+0+aOb74LJYDVI=
Subject key identifier: 09:14:C8:2D:EA:99:81:1F:69:55:22:E6:CA:8F:36:41:76:FF:F6:31
Authority key identifier: DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
Certificate issuer: /CN=dead4c89f7aed8681d0202d22479d86e1462f889
Certificate serial: 01987675AEBC44AFD1EC659DB5EE512743B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 19:01:20 +0000
Manifest this update: Mon 04 Aug 2025 19:01:20 +0000
Manifest next update: Tue 05 Aug 2025 19:01:20 +0000
Files and hashes: 1: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl (hash: Y/ueKOsny1O0IcMxNl4wFA0i5j22hKy5lrVDPFCOWag=)
2: hs44kTsCSKJHF4M4m6a7yybk2BU.roa (hash: sJmLUUiHtQ2muOzZ9TuqLt9boiXoy5M0LFt8+5jZEwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:75:ae:bc:44:af:d1:ec:65:9d:b5:ee:51:27:43:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dead4c89f7aed8681d0202d22479d86e1462f889
Validity
Not Before: Aug 4 19:01:20 2025 GMT
Not After : Aug 5 19:01:20 2025 GMT
Subject: CN=0914c82dea99811f695522e6ca8f364176fff631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:65:fc:30:73:1e:a1:e1:87:b6:e8:b1:9b:
a1:bb:36:b1:67:c7:a6:b0:4e:3e:41:00:3d:84:61:
b7:41:bd:79:9d:b0:86:01:25:da:a4:47:9a:3e:dc:
cb:b3:15:fe:46:92:46:f7:bf:95:2c:c7:85:ea:e0:
cd:0f:5a:10:fa:80:65:63:c0:94:3f:d7:99:22:cc:
3c:a7:18:a2:85:77:11:0c:83:9f:a1:13:8b:e8:ce:
21:7c:4d:2e:38:7d:89:5b:f2:e0:33:ea:b8:80:94:
49:9f:97:2f:29:b0:43:5f:b0:d3:7d:1a:0f:a5:55:
05:bc:ba:e6:24:a5:87:34:60:86:71:bd:b2:dc:f5:
8d:88:30:e4:51:34:ab:1a:3e:40:dc:c4:51:cc:e0:
4b:27:24:78:de:c4:df:cc:c9:02:e9:18:94:b6:53:
2c:dc:19:45:16:0c:07:6d:e4:20:42:21:56:16:9f:
86:88:32:2f:29:8a:fe:43:47:80:eb:5b:7c:5f:43:
e8:62:b6:71:ab:c4:0c:50:93:8c:64:d3:27:1c:e5:
4a:35:74:b3:6b:cb:16:8a:77:ec:24:0a:4f:ee:0a:
d1:bb:63:42:c0:22:ea:88:3c:be:e8:4d:de:8f:c8:
c8:37:8b:44:2f:82:9b:f6:da:54:17:e7:d8:63:e6:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:14:C8:2D:EA:99:81:1F:69:55:22:E6:CA:8F:36:41:76:FF:F6:31
X509v3 Authority Key Identifier:
keyid:DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:27:4b:60:ae:85:9a:cb:e4:56:f3:0e:01:24:fb:a1:e0:b6:
20:3c:59:2c:d7:93:d9:02:42:6a:9d:c8:8b:4d:e4:8d:51:37:
30:10:30:49:f9:6c:57:c8:e1:8d:71:4a:a5:47:8b:3d:6c:30:
af:d4:86:4d:77:b8:db:89:a9:26:7e:67:0f:26:3c:fd:dc:4d:
3a:b7:00:a3:df:21:6a:0f:14:59:0f:3c:e0:17:20:81:6c:25:
5a:12:90:b2:98:27:93:d9:7f:2f:dd:91:e9:88:0b:a5:bf:a3:
62:7a:6e:b4:e5:39:30:99:43:65:e2:8c:c4:90:99:76:e8:e6:
14:7e:91:33:ad:19:fb:ef:28:20:14:9b:fb:89:24:3d:3d:f2:
cf:bd:47:8a:f7:87:15:e7:29:da:ba:f2:45:21:5f:be:15:8e:
ea:03:dd:42:88:95:9c:a3:47:bb:93:56:28:93:9e:7d:b2:97:
eb:f2:e8:8f:a3:db:04:8a:0e:ce:90:e4:c9:22:01:43:5c:a1:
18:f0:c1:a7:47:94:d9:05:b4:2b:a9:75:ec:76:77:29:21:67:
89:a9:71:9d:cd:d0:21:7f:5f:08:a4:cf:75:14:e9:ac:b1:37:
b1:96:6e:b8:69:1c:1d:df:61:b7:c2:56:9e:c4:8e:04:64:44:
c5:76:20:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:46:48 2025 by rpki-client