Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json)
Hash identifier: YMawFyEy9Y1rx72UyR7xv/3jWWsBDTGaVfYvrgU5Mv0=
Subject key identifier: 2F:E4:F8:E1:A5:44:74:34:AC:17:C2:6C:C7:CF:48:6D:D6:75:64:5C
Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538
Certificate serial: 0198D9606B25F6B91892ED521337E3F2B652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
Manifest number: 08DF
Signing time: Sun 24 Aug 2025 00:00:31 +0000
Manifest this update: Sun 24 Aug 2025 00:00:31 +0000
Manifest next update: Mon 25 Aug 2025 00:00:31 +0000
Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: pUwS3ZLcUVH9YfvTqVs+kurU4NMoV+rCbIjMJcVy21Y=)
2: ij43C7xr8xTz-pjXAc9irjAaFXA.roa (hash: TchsYLXYDpTrG6rR/zLX/7ji8qJkl2gfrI50UG67KC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:6b:25:f6:b9:18:92:ed:52:13:37:e3:f2:b6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538
Validity
Not Before: Aug 24 00:00:31 2025 GMT
Not After : Aug 25 00:00:31 2025 GMT
Subject: CN=2fe4f8e1a5447434ac17c26cc7cf486dd675645c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3f:9f:8d:88:33:9a:d1:c9:0e:45:f0:ef:4c:
31:01:f1:37:84:11:cc:12:04:1f:88:49:c0:3f:ba:
1f:12:53:99:7c:7b:36:6f:6f:7c:cf:8b:a3:80:ac:
2f:d7:6a:8e:ec:31:21:5c:23:82:ec:93:89:7e:e2:
b5:02:a0:d8:6b:0f:de:cc:88:ad:27:72:e1:3e:c6:
93:66:e5:24:d8:a9:38:a9:7e:79:2f:52:55:2c:ea:
60:ab:b1:e6:43:de:a2:43:d4:14:73:4b:93:96:db:
75:27:36:81:1b:3b:c2:2f:f0:fa:a9:58:b6:94:b1:
13:54:cd:7a:ec:77:ea:43:ee:89:bd:25:95:5f:d3:
b8:02:9d:f1:1f:00:e2:5c:5a:78:e0:72:ac:9b:57:
50:8e:44:da:bb:67:b1:b5:29:46:3c:c4:09:71:eb:
ad:61:48:50:e4:f6:c8:58:9a:19:56:4e:30:d4:90:
65:ac:46:25:44:92:21:6c:3b:c6:4f:fd:73:07:87:
a5:c0:4f:05:40:d4:46:11:91:c1:7d:07:25:6b:91:
7d:5b:7d:60:9f:69:9a:8b:76:62:b1:6b:9f:6a:a5:
90:53:2a:95:e7:bc:9e:d8:8f:7f:b8:41:72:e0:62:
a7:b9:ce:81:ff:67:78:bf:49:99:c8:2b:6c:dc:88:
fd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E4:F8:E1:A5:44:74:34:AC:17:C2:6C:C7:CF:48:6D:D6:75:64:5C
X509v3 Authority Key Identifier:
keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3a:88:26:fe:cd:7f:04:af:32:ad:5b:f5:7a:08:a0:41:fa:
a7:ce:7b:01:37:57:61:eb:92:6c:c2:bd:13:f4:dc:92:85:03:
2d:d5:8a:8d:bb:87:18:46:fb:52:3a:e8:e3:f7:ed:cc:13:f5:
ba:60:4c:aa:a6:93:45:68:36:5f:8d:cc:f4:9e:80:4a:5a:f9:
04:60:0f:64:46:72:d1:3b:e7:bc:04:cc:8d:56:02:52:02:cf:
1c:df:b8:1e:cb:26:93:78:52:2d:5e:85:88:af:c2:62:12:18:
cf:1e:1a:bd:9b:3a:34:8c:ae:af:b5:44:1b:0b:b3:84:de:22:
87:ff:b7:83:61:0b:ce:46:84:39:63:6d:6b:26:88:a8:00:c2:
00:0a:ce:e8:36:5e:5c:98:77:bd:16:28:b0:e1:a4:bf:56:80:
41:7e:fb:e5:1a:8e:1b:1d:61:b0:2d:38:b9:81:d6:70:6a:a9:
e9:ca:4b:12:09:21:a5:33:74:5b:e4:e7:d0:89:b0:bd:ca:47:
44:01:bd:f6:8e:38:d4:fa:bf:5b:c4:da:c3:86:a2:d3:31:6e:
8c:60:94:36:94:49:2b:1b:85:47:c3:21:30:01:0e:e0:fa:33:
b1:4c:f0:5b:bd:6c:ff:81:ec:cf:2f:b1:ab:dd:78:68:42:9a:
99:72:b5:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjZYGsl9rkYku1SEzfj8rZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYmU1MTdlNzQ3NWUxN2MwNjk2NDM5MTBmZDZmNzdiMzE3
Yjg1MzgwHhcNMjUwODI0MDAwMDMxWhcNMjUwODI1MDAwMDMxWjAzMTEwLwYDVQQD
EygyZmU0ZjhlMWE1NDQ3NDM0YWMxN2MyNmNjN2NmNDg2ZGQ2NzU2NDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj+fjYgzmtHJDkXw70wxAfE3hBHM
EgQfiEnAP7ofElOZfHs2b298z4ujgKwv12qO7DEhXCOC7JOJfuK1AqDYaw/ezIit
J3LhPsaTZuUk2Kk4qX55L1JVLOpgq7HmQ96iQ9QUc0uTltt1JzaBGzvCL/D6qVi2
lLETVM167HfqQ+6JvSWVX9O4Ap3xHwDiXFp44HKsm1dQjkTau2extSlGPMQJceut
YUhQ5PbIWJoZVk4w1JBlrEYlRJIhbDvGT/1zB4elwE8FQNRGEZHBfQcla5F9W31g
n2mai3ZisWufaqWQUyqV57ye2I9/uEFy4GKnuc6B/2d4v0mZyCts3Ij99wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/k+OGlRHQ0rBfCbMfPSG3WdWRcMB8GA1UdIwQY
MBaAFN6+UX50deF8BpZDkQ/W93sxe4U4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zODUwYzktOWM2OC00NjEzLWE4NzAt
ODlmNWM0ZjMyOTcwLzEvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zODUwYzktOWM2OC00NjEzLWE4NzAtODlmNWM0ZjMyOTcw
LzEvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzqIJv7N
fwSvMq1b9XoIoEH6p857ATdXYeuSbMK9E/TckoUDLdWKjbuHGEb7Ujro4/ftzBP1
umBMqqaTRWg2X43M9J6ASlr5BGAPZEZy0TvnvATMjVYCUgLPHN+4Hssmk3hSLV6F
iK/CYhIYzx4avZs6NIyur7VEGwuzhN4ih/+3g2ELzkaEOWNtayaIqADCAArO6DZe
XJh3vRYosOGkv1aAQX775RqOGx1hsC04uYHWcGqp6cpLEgkhpTN0W+Tn0ImwvcpH
RAG99o441Pq/W8Taw4ai0zFujGCUNpRJKxuFR8MhMAEO4PozsUzwW71s/4Hszy+x
q914aEKamXK1wQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:09:52 2025 by rpki-client