Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
File: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft (raw, json)
Hash identifier: W1sCXQlEO5S2INJNHDwQcD95iOPnFF7DHXsT0w7YTaw=
Subject key identifier: A0:EB:1A:3D:90:6B:24:B3:11:5A:A9:08:C6:3A:B9:5E:28:E6:28:9B
Authority key identifier: DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
Certificate issuer: /CN=dd29c370460bec753010fc7e68365c5770bf45e4
Certificate serial: 01988430C561200D12842014C4F8A0C5575D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
Manifest number: 149F
Signing time: Thu 07 Aug 2025 11:00:45 +0000
Manifest this update: Thu 07 Aug 2025 11:00:45 +0000
Manifest next update: Fri 08 Aug 2025 11:00:45 +0000
Files and hashes: 1: 3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl (hash: wrFqn3XE+ki3/EG9EQaeHkwD4a8lzBzlj1ELZGqpu5M=)
2: NTq0FDzH2xxPaa-1hxtnePIlEA4.roa (hash: LRFHdSsVugdN6TwKBfGKGPR3Nf4KsaI4iw69J8bmMBI=)
3: jzen_y9MjkJUaSD6dgV7vhjezg8.roa (hash: D4rABI9YVwiue3KhIMfk5XfCTjj00ChB0kZlnVkANPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:30:c5:61:20:0d:12:84:20:14:c4:f8:a0:c5:57:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd29c370460bec753010fc7e68365c5770bf45e4
Validity
Not Before: Aug 7 11:00:45 2025 GMT
Not After : Aug 8 11:00:45 2025 GMT
Subject: CN=a0eb1a3d906b24b3115aa908c63ab95e28e6289b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:4c:90:0e:83:42:bf:6d:c8:ac:6f:0f:31:
f1:48:43:aa:21:39:12:b4:4f:ab:64:10:7a:eb:79:
5d:63:36:53:03:e4:42:d0:40:e8:92:d8:8b:6f:85:
df:c1:b3:a9:ba:31:9a:3e:7a:d5:ca:8d:53:57:29:
62:9e:c6:2d:2d:1f:54:74:e1:3b:7b:8e:14:11:19:
3a:72:9a:8e:df:7a:d0:3e:49:3c:ba:16:b7:96:5c:
a0:99:e2:82:78:6c:e3:14:87:3e:03:d6:18:2f:c1:
b8:f6:c9:e5:79:35:50:99:22:b9:0a:26:ef:9e:17:
3a:e6:9a:d3:a8:cc:0b:21:1c:da:4b:2f:23:93:32:
10:0d:fe:41:2c:37:90:7f:46:a7:b5:c2:ac:a4:12:
c6:d7:71:d7:84:15:3d:87:55:e9:2c:68:cb:9b:88:
d2:14:43:71:f3:b4:cc:bf:b7:20:8b:e7:16:98:aa:
49:23:65:9e:e0:7e:18:2e:05:4c:25:f6:95:6b:e5:
bb:12:c2:78:fe:06:ba:c0:28:ce:6f:6a:48:1b:0f:
38:d7:b2:b8:28:4d:94:b9:44:5a:7a:b5:5a:7d:f2:
31:43:89:ea:15:3c:77:01:c2:20:24:72:05:6e:0e:
67:63:0d:ea:6b:1b:d9:63:0e:c0:23:4b:e6:f4:82:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EB:1A:3D:90:6B:24:B3:11:5A:A9:08:C6:3A:B9:5E:28:E6:28:9B
X509v3 Authority Key Identifier:
keyid:DD:29:C3:70:46:0B:EC:75:30:10:FC:7E:68:36:5C:57:70:BF:45:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b3019c-66cf-4f98-a856-134c47b94913/1/3SnDcEYL7HUwEPx-aDZcV3C_ReQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:91:16:5f:47:52:3e:83:9e:1b:42:5d:a6:27:cd:0a:fb:23:
4c:ae:2b:b2:55:3b:28:4a:ae:a3:7f:61:bd:54:82:ed:c3:68:
52:0d:78:96:58:6f:bf:a7:7f:4b:b9:f7:47:b7:58:0a:1d:3a:
45:01:43:91:42:ac:dd:da:fc:4a:31:14:4d:69:63:ab:ab:2e:
2d:cb:aa:b8:b2:02:e5:48:b5:31:df:dd:07:75:c6:fa:67:42:
57:49:c8:48:92:5c:07:7e:75:af:78:84:62:67:f6:35:7e:f2:
82:c2:78:cc:ff:df:88:42:cf:45:1e:93:79:43:da:a7:01:41:
80:40:65:dd:94:36:e5:91:ab:0b:36:44:10:cf:b7:b1:34:4d:
f5:ce:e1:a5:c6:c4:c7:2c:58:6b:ea:13:63:0a:4e:42:78:2e:
03:d3:b4:74:fe:42:36:33:cc:07:69:c2:21:ad:06:f4:95:11:
43:bd:f3:0c:4d:d1:bb:5a:ef:4c:d0:3a:39:49:86:12:68:85:
d7:54:53:30:75:0f:9a:24:0d:73:75:ff:d6:30:3f:ab:b7:86:
a4:ce:98:14:02:d9:ca:ef:88:51:58:c7:b6:6b:1d:2e:9c:e0:
93:94:79:81:a6:ed:58:6f:b8:64:bf:df:63:b8:9e:6e:98:41:
77:a2:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:45:51 2025 by rpki-client