Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
File: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft (raw, json)
Hash identifier: J9I/MzCJizHIgAHaTEtx6fnuijfSKrDXYw+YjceZ8Qw=
Subject key identifier: 7B:E7:D0:3E:D8:BC:3A:3B:AA:BE:9D:05:3A:50:7E:9B:4E:04:B3:FF
Authority key identifier: DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64
Certificate issuer: /CN=dcc50a2b974349948b04ee389b2a99d1754fb464
Certificate serial: 0198D5BC35FFA454136AF6B6D639C0431CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
Manifest number: 1226
Signing time: Sat 23 Aug 2025 07:02:18 +0000
Manifest this update: Sat 23 Aug 2025 07:02:18 +0000
Manifest next update: Sun 24 Aug 2025 07:02:18 +0000
Files and hashes: 1: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl (hash: Tnxe1WdHNCQnQv+h2DF6eFLR1+3yfba8zjSwtXCGIEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:35:ff:a4:54:13:6a:f6:b6:d6:39:c0:43:1c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc50a2b974349948b04ee389b2a99d1754fb464
Validity
Not Before: Aug 23 07:02:18 2025 GMT
Not After : Aug 24 07:02:18 2025 GMT
Subject: CN=7be7d03ed8bc3a3baabe9d053a507e9b4e04b3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:57:6e:7f:50:64:b2:62:57:c7:c6:a8:dd:
12:7b:bf:61:c7:30:ee:06:c1:3c:66:31:42:21:d6:
e3:39:bc:6b:fd:39:e4:0b:02:44:ff:7f:ba:00:07:
60:a1:ee:19:20:d6:98:5e:cd:58:9e:11:cc:65:11:
f1:7b:a4:70:5f:99:b5:17:3b:79:41:37:d1:af:91:
46:d5:fd:9a:1f:09:b2:ac:18:03:91:b4:c8:20:14:
b2:36:b5:13:07:bd:4e:d5:a4:9e:c9:92:f2:47:59:
24:9f:63:f8:48:75:d7:78:2a:67:06:af:69:e6:05:
d6:06:cb:91:1d:f0:61:c5:83:36:c5:e0:ff:2e:a3:
ea:48:51:b9:c7:2b:27:3b:26:00:48:89:84:07:a5:
d5:1a:95:9e:c7:d0:68:02:bc:91:24:1f:c5:23:c1:
ec:92:85:e8:08:c5:01:1b:52:b4:c1:43:33:07:92:
0b:44:b8:fe:7a:83:e5:c8:f3:11:74:fb:a1:dd:b8:
ce:e8:e0:9d:38:99:50:8a:d0:63:c0:a0:d7:9e:1e:
a9:e2:45:78:fa:ab:bc:2f:36:92:95:55:93:6b:a3:
7f:90:d7:f7:75:a0:98:3f:4b:dd:b9:40:2f:4c:4d:
ed:e8:db:ab:e3:4c:4a:8e:bc:36:ca:ec:a6:56:b0:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E7:D0:3E:D8:BC:3A:3B:AA:BE:9D:05:3A:50:7E:9B:4E:04:B3:FF
X509v3 Authority Key Identifier:
keyid:DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5b:1c:08:4a:51:c2:01:8a:fa:b5:00:d9:eb:1f:71:37:3b:
e4:16:03:1e:2c:8c:94:6a:99:b3:d4:00:17:ad:84:10:81:9f:
6b:6d:bb:0f:ec:b1:29:be:c6:4a:85:49:97:bf:4e:1f:bd:c9:
e1:bc:0e:bf:ba:80:52:e9:55:14:ec:2e:a2:27:f5:5f:de:38:
c5:69:e9:65:ff:af:f6:ea:e9:0c:be:b4:5a:98:eb:e9:a2:d5:
1a:27:8d:3d:7d:ba:a7:15:c4:d1:a5:c5:49:dd:b0:27:73:1c:
bc:c9:95:38:77:fb:67:3e:75:f2:fd:00:e8:5c:74:bf:27:7f:
37:c0:57:c7:3e:21:ad:ca:73:82:3f:8e:f1:01:96:84:32:69:
b3:d7:b9:a9:d2:78:58:a2:5e:70:57:a0:c9:a6:4d:8c:a9:dc:
2d:00:4a:05:cb:1e:fd:91:d3:ad:13:2a:8e:1c:1e:a1:54:57:
14:62:f6:5c:ef:eb:bc:25:ef:aa:02:eb:d0:fe:f2:27:1c:28:
11:b2:be:47:a3:83:66:b9:35:b6:3b:75:a8:55:84:1b:ac:e7:
ef:56:40:dd:de:e0:42:5d:d3:9a:9a:55:b4:3a:f8:d5:66:da:
3b:7d:9b:61:b5:7f:ad:bc:aa:00:0a:92:18:53:56:d8:6b:2c:
49:1a:01:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvDX/pFQTava21jnAQxy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYzUwYTJiOTc0MzQ5OTQ4YjA0ZWUzODliMmE5OWQxNzU0
ZmI0NjQwHhcNMjUwODIzMDcwMjE4WhcNMjUwODI0MDcwMjE4WjAzMTEwLwYDVQQD
Eyg3YmU3ZDAzZWQ4YmMzYTNiYWFiZTlkMDUzYTUwN2U5YjRlMDRiM2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cpXbn9QZLJiV8fGqN0Se79hxzDu
BsE8ZjFCIdbjObxr/TnkCwJE/3+6AAdgoe4ZINaYXs1YnhHMZRHxe6RwX5m1Fzt5
QTfRr5FG1f2aHwmyrBgDkbTIIBSyNrUTB71O1aSeyZLyR1kkn2P4SHXXeCpnBq9p
5gXWBsuRHfBhxYM2xeD/LqPqSFG5xysnOyYASImEB6XVGpWex9BoAryRJB/FI8Hs
koXoCMUBG1K0wUMzB5ILRLj+eoPlyPMRdPuh3bjO6OCdOJlQitBjwKDXnh6p4kV4
+qu8LzaSlVWTa6N/kNf3daCYP0vduUAvTE3t6Nur40xKjrw2yuymVrDSvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvn0D7YvDo7qr6dBTpQfptOBLP/MB8GA1UdIwQY
MBaAFNzFCiuXQ0mUiwTuOJsqmdF1T7RkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01VS0s1ZERTWlNMQk80NG15cVowWFZQdEdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83MDcxNTgtZDFlMi00ZmNiLTgxY2It
NTk3OWQwMDQ4NmZlLzEvM01VS0s1ZERTWlNMQk80NG15cVowWFZQdEdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi83MDcxNTgtZDFlMi00ZmNiLTgxY2ItNTk3OWQwMDQ4NmZl
LzEvM01VS0s1ZERTWlNMQk80NG15cVowWFZQdEdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1scCEpR
wgGK+rUA2esfcTc75BYDHiyMlGqZs9QAF62EEIGfa227D+yxKb7GSoVJl79OH73J
4bwOv7qAUulVFOwuoif1X944xWnpZf+v9urpDL60Wpjr6aLVGieNPX26pxXE0aXF
Sd2wJ3McvMmVOHf7Zz518v0A6Fx0vyd/N8BXxz4hrcpzgj+O8QGWhDJps9e5qdJ4
WKJecFegyaZNjKncLQBKBcse/ZHTrRMqjhweoVRXFGL2XO/rvCXvqgLr0P7yJxwo
EbK+R6ODZrk1tjt1qFWEG6zn71ZA3d7gQl3TmppVtDr41WbaO32bYbV/rbyqAAqS
GFNW2GssSRoB/A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:46 2025 by rpki-client