Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier: Ggc5usn4gVETIfR6zmLWWgDa2kq10KW5ZBMO3ohj0go=
Subject key identifier: 81:2B:D8:C1:E4:B0:D1:B9:77:8C:44:B5:60:6C:DD:37:5A:C0:5E:B0
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial: 0198903557CB39CAC14E66632A4ECD598AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number: 042A
Signing time: Sat 09 Aug 2025 19:01:11 +0000
Manifest this update: Sat 09 Aug 2025 19:01:11 +0000
Manifest next update: Sun 10 Aug 2025 19:01:11 +0000
Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: Hda2ef14iVuAgSh9oNzzM8EsQoJh57XheBNOpGMbieg=)
2: PT68lLdfHWq61L0p7mbOXLRwHhw.roa (hash: A4keDsv/7uOGmjAx+h6C5RlssIOEsmTqNcUP9OgH66s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:35:57:cb:39:ca:c1:4e:66:63:2a:4e:cd:59:8a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Validity
Not Before: Aug 9 19:01:11 2025 GMT
Not After : Aug 10 19:01:11 2025 GMT
Subject: CN=812bd8c1e4b0d1b9778c44b5606cdd375ac05eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1c:4d:81:7d:30:de:2e:7c:04:0f:45:63:75:
57:a6:db:ae:ab:d2:0f:21:94:4d:f8:3b:3d:d9:3d:
f1:c1:4e:db:9d:12:65:89:f7:84:81:fe:2b:7c:35:
af:20:2c:7e:d8:48:5a:d7:1f:45:87:65:b4:6d:9c:
0f:d4:2d:11:e2:3e:76:35:18:9b:60:90:84:2e:c2:
a6:ff:af:f3:69:34:ba:a6:3e:91:81:47:e5:48:7f:
a9:5a:cc:ab:11:74:99:da:d0:0d:8f:54:8a:88:e4:
bd:79:bf:c9:1f:d5:c2:fa:fd:40:67:c1:33:7b:7d:
db:7a:bc:17:52:89:90:5a:49:ba:88:b3:30:f4:c0:
38:a6:d6:23:77:99:07:4d:8f:67:9a:f9:31:88:78:
87:d2:46:ec:8a:a8:6e:e7:a3:e1:f4:b0:73:b3:07:
17:ed:e9:70:4c:aa:d3:da:32:18:86:a2:e5:22:c8:
4d:bb:da:b0:5a:0f:1f:bd:01:b9:78:97:4a:a2:e2:
4a:5e:e0:7f:a8:78:ca:09:dd:4d:4f:67:e0:f0:41:
48:9f:e3:16:06:5f:f8:3c:4b:dd:43:25:9a:48:c0:
af:8c:d0:26:a9:67:d4:96:c7:0f:d3:87:2f:2d:e4:
0f:84:c8:ff:83:c4:cb:0c:54:ba:af:46:74:d8:26:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2B:D8:C1:E4:B0:D1:B9:77:8C:44:B5:60:6C:DD:37:5A:C0:5E:B0
X509v3 Authority Key Identifier:
keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:56:60:fa:c1:e7:e9:45:10:95:f6:d0:7e:2e:03:76:64:57:
e1:31:1c:46:d1:ad:ca:ae:d1:86:26:51:67:ac:a3:c1:40:75:
f1:2f:62:a3:42:d0:de:8e:5d:a7:54:a0:2c:1a:57:92:e3:f9:
f0:0d:ee:07:a9:90:89:26:eb:50:20:45:a9:75:ca:7b:51:53:
4d:d6:ae:61:62:07:96:57:df:9b:d6:a6:cf:02:f0:54:bc:50:
db:72:25:bd:ae:b8:70:79:f1:26:1d:3d:c7:a4:d8:b6:fb:1b:
ed:fc:4c:1d:19:1c:6b:ea:82:9f:a9:c6:dd:b2:1d:b2:e8:46:
d5:92:ff:5a:08:a3:d1:49:4c:ae:e6:ad:1b:df:48:a2:dd:64:
7d:a5:f0:47:b7:3d:1a:ef:33:9e:ee:8b:64:fb:f9:cc:7b:f0:
3b:25:75:12:00:d8:c3:c5:fa:e5:27:ed:1d:fa:b7:20:ab:ba:
c0:77:5b:ac:87:c3:4f:12:77:35:d7:58:b5:2a:7a:87:f1:1c:
2a:2b:ac:b5:98:8e:6f:33:7b:59:ad:bd:f5:b8:62:b5:dc:5f:
5d:b5:b9:a3:81:79:8b:ca:1a:97:37:70:51:19:bd:b1:47:96:
fe:a7:7b:91:a5:c0:56:61:17:94:e6:e2:dd:a6:08:e3:76:0f:
78:30:3d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:26:19 2025 by rpki-client