Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
File: 3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json)
Hash identifier: u2hbSryTvkbAJOizCkFdCt96G71WB4CA/Rx+m9CJh0Y=
Subject key identifier: FB:7E:C7:20:CD:C6:50:D0:F4:AB:09:ED:7E:98:51:F1:4A:BE:25:05
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Certificate issuer: /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial: 0198D40457D1465109127C988BA42DF0DDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
Manifest number: 1422
Signing time: Fri 22 Aug 2025 23:01:51 +0000
Manifest this update: Fri 22 Aug 2025 23:01:51 +0000
Manifest next update: Sat 23 Aug 2025 23:01:51 +0000
Files and hashes: 1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: /5AubSgFOEkJEwQfge64KaWupm4hkwUgUHTHQsnJ8N8=)
2: _TZfk1Rmeyf1zvc7aTw1N_o9jl4.roa (hash: YhjRwkXWYnkbx6aMihX7dtN/B/p9Fk3n2XWBk8oSMZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:57:d1:46:51:09:12:7c:98:8b:a4:2d:f0:dd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
Validity
Not Before: Aug 22 23:01:51 2025 GMT
Not After : Aug 23 23:01:51 2025 GMT
Subject: CN=fb7ec720cdc650d0f4ab09ed7e9851f14abe2505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:21:ae:4a:6c:35:32:a4:1a:ab:57:88:f2:
d1:30:12:fb:49:2e:77:68:6d:8a:7c:fe:31:d0:c8:
38:91:3c:b3:a0:87:c0:97:99:a6:1e:8c:70:e7:f7:
f2:01:8b:91:d3:ec:97:ac:2c:a5:c7:71:c1:65:1e:
4c:b1:03:d0:a8:bc:b8:e3:2c:47:d7:a9:72:b9:9e:
a3:71:60:55:99:cf:de:e9:48:70:f7:65:1a:89:02:
8e:d4:23:ff:e5:f3:f7:92:6a:de:ef:85:db:de:38:
05:e6:ef:e5:4b:42:40:bc:20:2c:1c:b2:bc:bd:04:
5a:19:89:39:9b:12:3a:d8:2c:08:e1:58:28:43:3f:
a7:ed:69:cf:62:0a:be:5a:ea:1e:bb:e4:fe:d8:4f:
06:e2:13:66:67:24:fd:b6:6a:ce:62:15:a1:3b:ac:
0c:23:c1:e5:c1:5a:6e:81:c8:e5:cc:dc:78:a5:01:
b0:6c:0b:8d:50:4a:76:1b:3a:96:b7:73:f3:56:5e:
d1:8b:9a:7a:bf:c5:a4:37:5a:1f:81:ee:52:c3:10:
c1:0f:3b:72:4f:eb:0a:51:39:09:55:75:05:8a:cb:
85:d3:d9:ea:4e:41:eb:6b:e0:60:75:1e:ce:bf:40:
32:f8:60:71:76:fa:d5:c4:9d:71:ba:f3:ad:5d:1b:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7E:C7:20:CD:C6:50:D0:F4:AB:09:ED:7E:98:51:F1:4A:BE:25:05
X509v3 Authority Key Identifier:
keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b4:03:a1:45:07:83:ac:6c:19:38:98:7d:12:c0:88:58:9f:
f1:a9:5b:0d:34:a8:89:1a:7e:e6:fa:0a:62:af:36:82:da:3d:
42:9e:3c:8c:d5:a0:83:e7:3d:b1:50:3a:e8:1c:b9:3c:57:05:
6d:42:a8:f2:1b:8c:2c:5a:79:fb:36:19:8f:62:c1:fd:27:ca:
db:92:f4:58:3a:16:78:5e:be:71:97:c7:24:e9:e6:b0:8a:c4:
43:27:66:17:d6:27:0a:62:4e:dd:a4:99:b2:92:3b:6f:1f:86:
ce:d8:a9:a9:c6:89:a0:c7:c1:54:44:ef:f9:eb:94:6b:d7:da:
69:5c:0b:41:ea:bf:7b:e5:ff:94:c9:dc:09:e6:19:aa:a0:b8:
fb:fe:08:03:36:0e:28:18:7d:f5:9b:c8:b3:4a:ea:c6:c0:5d:
d2:58:e2:63:02:49:95:a5:1e:da:2f:9f:61:ef:59:68:ff:79:
75:a0:ed:27:bb:43:c4:87:d5:2f:4f:92:06:12:b9:37:0e:17:
43:3b:de:00:82:4c:81:85:e1:14:7d:41:68:cf:d2:93:2f:7b:
c6:12:0b:ae:8f:2b:fc:59:b1:10:e6:66:57:bc:0f:d0:60:df:
62:82:2f:18:9f:15:44:e7:3f:13:da:27:a1:ac:2a:5b:ea:8d:
fa:78:48:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBFfRRlEJEnyYi6Qt8N3eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMjQ5NmZlZmY5OTEyNzZiZDFiODUzMzZiNzY5N2E5ODAw
Zjg0YzEwHhcNMjUwODIyMjMwMTUxWhcNMjUwODIzMjMwMTUxWjAzMTEwLwYDVQQD
EyhmYjdlYzcyMGNkYzY1MGQwZjRhYjA5ZWQ3ZTk4NTFmMTRhYmUyNTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9AhrkpsNTKkGqtXiPLRMBL7SS53
aG2KfP4x0Mg4kTyzoIfAl5mmHoxw5/fyAYuR0+yXrCylx3HBZR5MsQPQqLy44yxH
16lyuZ6jcWBVmc/e6Uhw92UaiQKO1CP/5fP3kmre74Xb3jgF5u/lS0JAvCAsHLK8
vQRaGYk5mxI62CwI4VgoQz+n7WnPYgq+Wuoeu+T+2E8G4hNmZyT9tmrOYhWhO6wM
I8HlwVpugcjlzNx4pQGwbAuNUEp2GzqWt3PzVl7Ri5p6v8WkN1ofge5SwxDBDzty
T+sKUTkJVXUFisuF09nqTkHra+BgdR7Ov0Ay+GBxdvrVxJ1xuvOtXRuBYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt+xyDNxlDQ9KsJ7X6YUfFKviUFMB8GA1UdIwQY
MBaAFN0klv7/mRJ2vRuFM2t2l6mAD4TBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS80NjQ3N2EtODcwOC00YjM3LTg3NWIt
NjcwMDMwZGNhYzMwLzEvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS80NjQ3N2EtODcwOC00YjM3LTg3NWItNjcwMDMwZGNhYzMw
LzEvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbQDoUUH
g6xsGTiYfRLAiFif8albDTSoiRp+5voKYq82gto9Qp48jNWgg+c9sVA66By5PFcF
bUKo8huMLFp5+zYZj2LB/SfK25L0WDoWeF6+cZfHJOnmsIrEQydmF9YnCmJO3aSZ
spI7bx+GztipqcaJoMfBVETv+euUa9faaVwLQeq/e+X/lMncCeYZqqC4+/4IAzYO
KBh99ZvIs0rqxsBd0ljiYwJJlaUe2i+fYe9ZaP95daDtJ7tDxIfVL0+SBhK5Nw4X
QzveAIJMgYXhFH1BaM/Sky97xhILro8r/FmxEOZmV7wP0GDfYoIvGJ8VROc/E9on
oawqW+qN+nhIWQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:40 2025 by rpki-client