Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json)
Hash identifier: Z1Xy0TeAmA0bvse/txgdTX3FDH41v4Lv0KC1igZbnRE=
Subject key identifier: 8E:05:7E:10:47:A5:70:AA:D7:F5:98:22:78:3B:4D:F4:16:15:CA:2D
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial: 0198D73ADE8F4DF19F95A3367C8F4CC93B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 14:00:15 +0000
Manifest this update: Sat 23 Aug 2025 14:00:15 +0000
Manifest next update: Sun 24 Aug 2025 14:00:15 +0000
Files and hashes: 1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: ovaTOgel00GKzRXWpmGxRuJy0YhezwJ3cZRzU8r/B7U=)
2: 57HaC7393494-Kydk1JdAp5sP5I.roa (hash: MC5zLYnL7jsECqxeDtP30qM0sWScy6N43eUhfx207aw=)
3: m5gUSNnJ2hKaiWTW0ODmWqqDw-s.roa (hash: EE2S7AYIPyyJZqEsdRi77q99LaNKBqMzcLpUq4bS+A8=)
4: nX1l9uEaP3hKft0f6nr66330FaY.roa (hash: Ify3evSlWibc6XFuSTIlXp6BEPgQD/cUtILAv8sgqKU=)
5: rYOTmI6zBWy0_qXug-7vEbI5-NE.roa (hash: WCnXAEMnH2mCY9gWHiuKlZ1HO6eQUoArgriFfc+fAVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:de:8f:4d:f1:9f:95:a3:36:7c:8f:4c:c9:3b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Validity
Not Before: Aug 23 14:00:15 2025 GMT
Not After : Aug 24 14:00:15 2025 GMT
Subject: CN=8e057e1047a570aad7f59822783b4df41615ca2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:3b:79:39:db:42:c6:ce:a1:28:73:72:86:
a6:5c:ad:d6:26:b8:ba:0d:68:5f:69:b9:ab:65:1d:
f2:d4:41:ee:21:7f:eb:48:fd:25:ef:df:34:a5:16:
ab:d7:52:61:de:89:75:9c:fa:c5:65:2f:99:8a:8d:
ca:9e:e1:7a:9c:98:59:63:b6:6e:a5:f1:80:04:81:
04:c5:7b:68:75:c4:4b:20:d3:79:b1:0c:59:df:cf:
80:9e:4a:ff:b5:22:05:c5:45:97:1d:db:20:3e:a7:
f2:3b:42:21:d8:72:5e:bc:0b:41:ca:dc:b9:56:4e:
21:2c:2c:d1:e8:50:fe:d8:87:8b:c6:81:a3:cd:20:
29:cc:5e:08:1b:d8:08:8c:b4:9b:da:72:0f:72:75:
91:a8:3a:e3:c5:b7:2f:65:17:22:ba:c5:08:1f:cf:
0b:d5:28:dc:a9:20:ca:6c:30:32:fb:6f:23:46:79:
8a:9d:21:0f:e1:be:ef:0d:a7:9f:30:2c:91:a1:05:
36:46:5e:68:bd:64:6d:82:81:b0:c0:34:dd:e1:c9:
a9:94:91:b3:44:ad:65:de:2d:3f:cf:10:92:e1:bf:
a3:91:dd:8a:84:36:9a:39:48:2d:44:3c:bc:39:ad:
4a:96:67:5c:5d:63:92:a2:14:d2:7d:ab:9e:14:a0:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:05:7E:10:47:A5:70:AA:D7:F5:98:22:78:3B:4D:F4:16:15:CA:2D
X509v3 Authority Key Identifier:
keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b5:e0:a7:41:1a:e3:fd:cf:5a:8d:f1:b3:1c:7f:77:c7:02:
11:c5:10:00:57:df:4f:bf:fc:8f:8f:52:14:00:f2:ef:f4:0a:
6b:04:c6:8d:9a:09:98:44:e0:f3:3e:3d:64:7a:e5:3a:11:90:
29:bd:48:bf:88:66:a7:1f:ab:b3:80:03:b5:af:38:b6:03:c2:
89:0a:8d:fe:10:05:ca:d0:7e:8a:c9:5b:0d:6e:a6:31:26:9e:
65:42:ec:40:f9:c1:ac:c6:d2:e5:bb:35:a5:c6:ae:52:6a:b6:
3e:0c:7b:fe:3d:e2:fb:22:a9:1b:e6:fc:69:3b:f4:16:76:32:
d2:7a:ba:8e:ef:f9:07:e4:9b:6b:d1:d5:49:b1:83:27:86:c1:
6b:04:6c:76:e7:12:26:f0:67:d5:d2:55:4a:e0:1b:2e:76:83:
52:cb:bc:71:26:cb:f9:63:0b:f3:f7:85:58:41:74:48:4f:24:
77:d3:a6:94:3d:96:a9:8d:7c:6e:4f:fb:b1:69:fc:2c:92:dd:
aa:fc:b3:f5:64:cf:1f:14:5d:12:db:42:e0:4f:8b:de:86:0d:
9b:c8:5a:a7:00:ce:51:d1:ca:65:76:a1:88:c7:6a:14:38:b6:
5d:7d:c8:74:46:26:04:0d:fd:02:4c:b4:c7:ee:e7:25:04:78:
e4:6b:61:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOt6PTfGflaM2fI9MyTscMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTA4OWM5NDJiNjgwMzM2ODNiNGRkNTA2YzBjMzZmNzRi
ZTBlYTMwHhcNMjUwODIzMTQwMDE1WhcNMjUwODI0MTQwMDE1WjAzMTEwLwYDVQQD
Eyg4ZTA1N2UxMDQ3YTU3MGFhZDdmNTk4MjI3ODNiNGRmNDE2MTVjYTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYI7eTnbQsbOoShzcoamXK3WJri6
DWhfabmrZR3y1EHuIX/rSP0l7980pRar11Jh3ol1nPrFZS+Zio3KnuF6nJhZY7Zu
pfGABIEExXtodcRLINN5sQxZ38+Ankr/tSIFxUWXHdsgPqfyO0Ih2HJevAtByty5
Vk4hLCzR6FD+2IeLxoGjzSApzF4IG9gIjLSb2nIPcnWRqDrjxbcvZRciusUIH88L
1SjcqSDKbDAy+28jRnmKnSEP4b7vDaefMCyRoQU2Rl5ovWRtgoGwwDTd4cmplJGz
RK1l3i0/zxCS4b+jkd2KhDaaOUgtRDy8Oa1KlmdcXWOSohTSfaueFKABGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4FfhBHpXCq1/WYIng7TfQWFcotMB8GA1UdIwQY
MBaAFNwQiclCtoAzaDtN1QbAw290vg6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDkt
Y2I1NmVkM2VhN2ZhLzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDktY2I1NmVkM2VhN2Zh
LzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbXgp0Ea
4/3PWo3xsxx/d8cCEcUQAFffT7/8j49SFADy7/QKawTGjZoJmETg8z49ZHrlOhGQ
Kb1Iv4hmpx+rs4ADta84tgPCiQqN/hAFytB+islbDW6mMSaeZULsQPnBrMbS5bs1
pcauUmq2Pgx7/j3i+yKpG+b8aTv0FnYy0nq6ju/5B+Sba9HVSbGDJ4bBawRsducS
JvBn1dJVSuAbLnaDUsu8cSbL+WML8/eFWEF0SE8kd9OmlD2WqY18bk/7sWn8LJLd
qvyz9WTPHxRdEttC4E+L3oYNm8hapwDOUdHKZXahiMdqFDi2XX3IdEYmBA39Aky0
x+7nJQR45GthnA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:17:06 2025 by rpki-client