Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json)
Hash identifier: xaHJ39hcdBEEVh8B9THETsd/dfoaS2nKyNOL7JpmsdU=
Subject key identifier: 0E:88:25:E7:07:AA:1A:19:B3:96:5D:04:24:BC:F0:BD:B3:5C:A4:43
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial: 0198D5F1822EDCC6663F05144F49E1EDB569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
Manifest number: 0D58
Signing time: Sat 23 Aug 2025 08:00:31 +0000
Manifest this update: Sat 23 Aug 2025 08:00:31 +0000
Manifest next update: Sun 24 Aug 2025 08:00:31 +0000
Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: ljmrtuLDW4jOmxRfGr60iAiXVIQpK8tMceqH4ezqPdY=)
2: vmqKHuLzrPkqklGr2oHlX4A5H1s.roa (hash: HWx6FXZlLIKlHVfqDThyZuNv2Ccv+hNVkaueWiNq1XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:82:2e:dc:c6:66:3f:05:14:4f:49:e1:ed:b5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Validity
Not Before: Aug 23 08:00:31 2025 GMT
Not After : Aug 24 08:00:31 2025 GMT
Subject: CN=0e8825e707aa1a19b3965d0424bcf0bdb35ca443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:90:b8:0b:25:e5:2a:90:a2:b8:98:b4:a9:
53:4d:a2:a7:fc:f6:a2:7e:23:cd:b5:42:0e:24:47:
df:08:9f:01:56:00:40:75:a0:11:82:d5:c4:c9:9a:
73:69:99:21:09:25:5a:84:cc:f8:fe:dc:42:ad:48:
7d:a4:bd:86:d9:bc:b6:05:28:c6:b6:91:a8:f6:05:
e4:f9:cf:23:68:ef:50:ba:d2:15:d6:39:a4:9a:c6:
e4:4f:f1:16:0e:58:3e:95:93:2a:6d:02:c2:65:8d:
4f:1b:e2:32:59:9e:4d:e1:4e:3c:07:27:ca:90:2c:
15:af:94:7e:fb:ce:ce:14:94:c5:3f:f8:68:da:6f:
e3:bf:da:12:3a:ba:83:f3:80:7e:e4:9c:e7:56:85:
6d:20:a2:0d:e2:e0:3e:90:09:f9:54:61:ab:d4:5c:
e7:c1:0b:18:d1:57:ca:ad:74:e2:b3:e3:55:00:f0:
20:c3:83:7a:58:0e:f3:58:89:51:2d:f7:0c:86:ca:
8f:61:40:69:ba:0d:24:20:a9:cb:dc:f7:bd:ca:be:
64:16:19:bd:d3:75:47:34:de:ec:13:36:5a:29:4f:
85:0b:9e:50:5a:84:1a:25:e7:31:5e:79:42:79:5c:
6d:84:2e:fc:31:ae:47:10:36:f8:75:8d:37:5e:97:
2f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:88:25:E7:07:AA:1A:19:B3:96:5D:04:24:BC:F0:BD:B3:5C:A4:43
X509v3 Authority Key Identifier:
keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:53:d2:f2:05:a1:e2:a4:7f:b3:a5:e5:4e:18:b2:d2:10:2a:
b9:99:94:b1:71:6c:5d:96:cb:eb:fa:90:75:cc:86:87:9c:45:
43:78:20:ea:65:3b:61:f5:79:a3:b9:c7:d1:dc:60:b4:e6:72:
5f:5e:5a:79:d7:70:f4:77:0b:2d:88:76:79:eb:82:0e:20:45:
91:7a:d8:df:02:99:f6:1c:73:20:c3:23:4a:e0:60:82:74:40:
cd:59:1e:ff:c8:80:4e:47:d3:88:47:57:08:64:9c:55:e5:3a:
df:2c:44:fc:43:50:08:c1:d3:6b:d8:b5:43:3b:63:c4:3e:2b:
ea:95:b2:f2:4e:0e:2a:1c:3f:95:d8:a2:a0:4d:4a:36:da:e9:
22:c4:6b:af:8b:9a:f6:1d:67:14:41:fc:df:6b:c7:98:b7:b9:
d5:14:00:e1:f3:7e:bb:cb:2b:a1:f6:37:7c:24:b5:93:23:9d:
5f:00:44:94:3c:be:15:86:42:62:cd:e1:ad:43:a9:82:c1:78:
14:4b:1e:2e:78:b9:55:ef:43:c9:b8:c3:80:b6:40:f4:72:ee:
58:12:d8:6c:c8:08:49:90:a3:72:d1:2f:29:b1:e3:bf:63:29:
47:74:cb:0c:7d:b2:23:01:98:29:92:62:67:5b:41:fa:a7:29:
f3:74:15:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8YIu3MZmPwUUT0nh7bVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNWU2YzIzMzA5MTFiYzFkYzhjODNkNDExZWY2YjEyMDhi
M2JiZDYwHhcNMjUwODIzMDgwMDMxWhcNMjUwODI0MDgwMDMxWjAzMTEwLwYDVQQD
EygwZTg4MjVlNzA3YWExYTE5YjM5NjVkMDQyNGJjZjBiZGIzNWNhNDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2+QuAsl5SqQoriYtKlTTaKn/Pai
fiPNtUIOJEffCJ8BVgBAdaARgtXEyZpzaZkhCSVahMz4/txCrUh9pL2G2by2BSjG
tpGo9gXk+c8jaO9QutIV1jmkmsbkT/EWDlg+lZMqbQLCZY1PG+IyWZ5N4U48ByfK
kCwVr5R++87OFJTFP/ho2m/jv9oSOrqD84B+5JznVoVtIKIN4uA+kAn5VGGr1Fzn
wQsY0VfKrXTis+NVAPAgw4N6WA7zWIlRLfcMhsqPYUBpug0kIKnL3Pe9yr5kFhm9
03VHNN7sEzZaKU+FC55QWoQaJecxXnlCeVxthC78Ma5HEDb4dY03XpcvlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6IJecHqhoZs5ZdBCS88L2zXKRDMB8GA1UdIwQY
MBaAFN5ebCMwkRvB3IyD1BHvaxIIs7vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2Et
ZGU0YmE3ODZmODcyLzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2EtZGU0YmE3ODZmODcy
LzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAolPS8gWh
4qR/s6XlThiy0hAquZmUsXFsXZbL6/qQdcyGh5xFQ3gg6mU7YfV5o7nH0dxgtOZy
X15aeddw9HcLLYh2eeuCDiBFkXrY3wKZ9hxzIMMjSuBggnRAzVke/8iATkfTiEdX
CGScVeU63yxE/ENQCMHTa9i1QztjxD4r6pWy8k4OKhw/ldiioE1KNtrpIsRrr4ua
9h1nFEH832vHmLe51RQA4fN+u8srofY3fCS1kyOdXwBElDy+FYZCYs3hrUOpgsF4
FEseLni5Ve9DybjDgLZA9HLuWBLYbMgISZCjctEvKbHjv2MpR3TLDH2yIwGYKZJi
Z1tB+qcp83QVsQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:12 2025 by rpki-client