Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier: OnHdXIFtIiH43NvLM3Efj16vr5SpWBNx2iZ+DK/uEhQ=
Subject key identifier: D8:F7:05:EA:5F:66:06:CD:7F:91:46:31:6A:FD:40:4B:96:7F:7C:3D
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial: 0198D5BBF894EC7E9DE6EFFCE246B9B8163F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number: 0758
Signing time: Sat 23 Aug 2025 07:02:02 +0000
Manifest this update: Sat 23 Aug 2025 07:02:02 +0000
Manifest next update: Sun 24 Aug 2025 07:02:02 +0000
Files and hashes: 1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: 8nDvrTcX3MIY/gxMHLXjRqqmXg/9AIui8sY/XjB3w+o=)
2: MpZzldQi5IW1vH72zsN86ALdCYo.roa (hash: hGLTyfZCRDqAerkM2L4I96QJCTHMEKoFxuiSvfkJH1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f8:94:ec:7e:9d:e6:ef:fc:e2:46:b9:b8:16:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
Validity
Not Before: Aug 23 07:02:02 2025 GMT
Not After : Aug 24 07:02:02 2025 GMT
Subject: CN=d8f705ea5f6606cd7f9146316afd404b967f7c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fe:02:b3:2d:b4:64:03:03:63:ea:3d:ae:f6:
4e:70:7e:34:17:81:fd:fb:04:99:9c:02:01:84:04:
53:58:f1:27:31:a2:84:6c:c1:3b:43:6e:0b:48:ad:
d3:e3:21:ed:47:e5:c0:ec:f6:de:c2:22:42:94:66:
bb:18:8f:8d:62:40:7a:ce:8c:43:14:d4:a3:f5:e0:
ab:eb:de:f8:e3:b7:77:3f:c8:a0:02:a5:b0:9f:80:
f6:48:6e:82:82:0d:17:f0:04:e1:47:cd:42:4a:8a:
93:be:8b:eb:fb:08:d4:ef:38:3e:03:07:70:06:03:
f5:16:82:3c:d6:25:b6:fa:66:41:5a:fc:c0:77:9d:
05:b3:13:50:6b:00:06:d7:66:93:15:4a:d9:b6:e8:
79:1a:14:b9:81:e7:75:56:2d:fa:80:5a:42:7f:44:
02:d5:81:b1:4f:03:4a:27:d7:d8:76:ec:b4:b8:ed:
64:49:fb:d1:1b:ea:ae:27:9f:34:c1:2f:6a:cc:44:
04:89:3c:f8:9d:1c:f7:4e:3b:c6:a2:c6:5c:0a:07:
9c:5d:d2:65:87:b0:9a:99:a1:7c:bd:bc:ca:c4:28:
a7:bd:f5:87:48:4a:b0:f4:78:0d:57:fa:6c:07:db:
e3:47:f5:8d:3e:df:28:eb:89:87:f0:98:23:f8:4d:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F7:05:EA:5F:66:06:CD:7F:91:46:31:6A:FD:40:4B:96:7F:7C:3D
X509v3 Authority Key Identifier:
keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:93:a1:e2:2f:24:3b:fe:85:ee:61:a6:72:2d:8f:e1:49:83:
57:1f:32:ad:c7:f3:c7:d0:bc:87:df:b1:ca:7f:3b:41:d5:e7:
91:f1:c0:c7:6b:54:67:2a:87:c5:8b:f7:0c:28:1e:4f:a9:f4:
fb:96:c2:48:0b:23:b5:91:41:87:ce:c0:80:92:16:e8:68:cd:
2c:dd:bb:2d:43:4d:1e:0b:de:25:2d:f1:6c:81:29:c2:2d:dc:
dd:87:ed:94:6d:3d:dd:61:32:75:df:5f:64:03:d5:57:3f:d4:
bf:3d:6e:fc:aa:c8:f2:69:82:28:dd:6d:4b:ec:e2:f6:70:77:
0b:52:e9:60:d1:cd:e7:6e:69:1a:9e:cc:48:60:0d:43:e6:84:
7e:bb:d5:aa:f9:12:99:74:8f:be:d5:21:c6:fe:a5:2d:88:b3:
1d:18:bc:b7:35:bd:8b:9e:2a:6f:44:a7:8d:5f:e4:e0:ac:b7:
fe:bb:3b:23:53:db:79:7f:3f:36:74:f6:68:73:b1:3e:d7:14:
89:b8:ca:66:1e:1f:c9:37:92:69:6b:9d:7d:a0:80:e4:9f:9f:
82:c1:e9:4e:d5:ac:14:8b:98:c0:82:cb:5f:49:1e:25:81:aa:
da:5d:59:58:00:5c:eb:bf:9d:62:8f:f5:b4:18:0e:0f:06:23:
5c:7a:9e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu/iU7H6d5u/84ka5uBY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNmRhZWY2NjY0YTc1MjliNjI5ZjNmZDY1MDA0OTE1MjMw
ZjFiZTkwHhcNMjUwODIzMDcwMjAyWhcNMjUwODI0MDcwMjAyWjAzMTEwLwYDVQQD
EyhkOGY3MDVlYTVmNjYwNmNkN2Y5MTQ2MzE2YWZkNDA0Yjk2N2Y3YzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6v4Csy20ZAMDY+o9rvZOcH40F4H9
+wSZnAIBhARTWPEnMaKEbME7Q24LSK3T4yHtR+XA7PbewiJClGa7GI+NYkB6zoxD
FNSj9eCr697447d3P8igAqWwn4D2SG6Cgg0X8AThR81CSoqTvovr+wjU7zg+Awdw
BgP1FoI81iW2+mZBWvzAd50FsxNQawAG12aTFUrZtuh5GhS5ged1Vi36gFpCf0QC
1YGxTwNKJ9fYduy0uO1kSfvRG+quJ580wS9qzEQEiTz4nRz3TjvGosZcCgecXdJl
h7CamaF8vbzKxCinvfWHSEqw9HgNV/psB9vjR/WNPt8o64mH8Jgj+E3TuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj3BepfZgbNf5FGMWr9QEuWf3w9MB8GA1UdIwQY
MBaAFN1trvZmSnUptinz/WUASRUjDxvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83ZGQ0MmItNjZlZC00YzEzLWEzMzYt
Y2ZlMTMzNWYyN2ZiLzEvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi83ZGQ0MmItNjZlZC00YzEzLWEzMzYtY2ZlMTMzNWYyN2Zi
LzEvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5Oh4i8k
O/6F7mGmci2P4UmDVx8yrcfzx9C8h9+xyn87QdXnkfHAx2tUZyqHxYv3DCgeT6n0
+5bCSAsjtZFBh87AgJIW6GjNLN27LUNNHgveJS3xbIEpwi3c3YftlG093WEydd9f
ZAPVVz/Uvz1u/KrI8mmCKN1tS+zi9nB3C1LpYNHN525pGp7MSGANQ+aEfrvVqvkS
mXSPvtUhxv6lLYizHRi8tzW9i54qb0SnjV/k4Ky3/rs7I1PbeX8/NnT2aHOxPtcU
ibjKZh4fyTeSaWudfaCA5J+fgsHpTtWsFIuYwILLX0keJYGq2l1ZWABc67+dYo/1
tBgODwYjXHqemw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:35 2025 by rpki-client