Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.mft (raw, json)
Hash identifier: 6mO5h8hSghlktMFBP72F5mH1TmGdJI6eloR22LlgR38=
Subject key identifier: A4:DE:A2:41:A8:E6:B4:59:D6:13:D2:26:92:19:92:E6:41:5F:D0:89
Authority key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
Certificate issuer: /CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Certificate serial: 0198D660FE047069602FFCE54ACE490929F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:02:17 +0000
Manifest this update: Sat 23 Aug 2025 10:02:17 +0000
Manifest next update: Sun 24 Aug 2025 10:02:17 +0000
Files and hashes: 1: 3AXfbkBO-SDmpZKNiWPmpfjWESA.crl (hash: up1BG1o5PFQ7TKlBEKNibB2eN4u8Aglkm5D0Opt0zyY=)
2: VU0FkvZgVaRI8EGkm-qXkP1h2_c.roa (hash: FXgImtBv7FeA5blXsKdg5pD7MuiscFVJi0Lfx25h6e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:fe:04:70:69:60:2f:fc:e5:4a:ce:49:09:29:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120
Validity
Not Before: Aug 23 10:02:17 2025 GMT
Not After : Aug 24 10:02:17 2025 GMT
Subject: CN=a4dea241a8e6b459d613d226921992e6415fd089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:78:8e:40:4f:24:e0:50:1d:d5:c1:90:14:
7c:da:6f:1b:5b:54:d9:e7:bb:cf:e8:5e:7d:dd:af:
0f:5d:71:42:1b:46:94:a8:c4:43:c6:5d:53:0b:44:
e5:e2:95:5b:05:15:9e:f7:f1:c5:48:0c:24:47:e6:
28:6c:0b:e6:e1:bb:0e:6c:be:7c:4a:f4:3a:48:dd:
53:e9:4a:37:24:c2:93:ec:fd:a0:c5:ce:86:03:90:
f0:74:be:ef:00:bd:81:7e:39:39:f1:df:ea:b2:e3:
cf:90:b1:c0:31:4d:21:ea:a9:0b:44:db:c6:3f:4c:
e4:2a:51:2a:fd:94:ca:4e:69:2d:e6:b6:b1:b4:56:
44:6a:00:45:e6:49:72:23:96:b0:01:0c:65:16:35:
e2:d8:5c:c4:7f:61:30:c1:17:92:d2:e2:7a:d5:5a:
45:f0:8e:5b:3f:dd:a6:ce:80:af:1d:a8:46:3c:9b:
9b:f7:85:5f:7b:d1:f1:02:ad:9a:09:d0:a3:d9:dd:
79:6d:26:d4:43:2a:7a:fb:aa:20:fe:b1:4b:f7:0f:
2a:90:a9:7d:fe:48:82:fc:29:4b:74:b0:e2:44:54:
8e:b8:39:5f:67:19:1a:bb:6d:db:d9:59:ee:a9:d4:
50:68:0c:b2:ef:76:4a:20:1f:d6:96:e8:8b:ed:15:
df:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DE:A2:41:A8:E6:B4:59:D6:13:D2:26:92:19:92:E6:41:5F:D0:89
X509v3 Authority Key Identifier:
keyid:DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:10:56:48:55:2f:e9:6f:cb:72:33:e5:a0:5d:c4:2b:6d:0b:
f2:10:eb:8b:7a:11:c4:f0:f4:35:da:96:29:64:51:60:8f:af:
b1:c1:bc:fc:b4:31:95:cd:82:b4:d8:10:41:11:3a:0e:c0:d1:
aa:36:19:99:5c:dd:43:ae:e5:5c:9f:c9:ce:65:7c:76:36:6d:
bb:79:78:82:59:84:a7:a9:ba:e2:c0:65:17:57:f0:d3:de:12:
f0:a0:7e:a7:5a:26:a7:78:4d:5e:d0:5c:60:8e:5c:34:9d:ff:
a1:e2:1c:19:a6:d3:65:b9:66:c1:c4:66:75:f6:c6:a0:60:f8:
e4:3f:c4:bd:26:32:bd:43:88:f5:bc:0b:35:c3:eb:e3:66:42:
c2:00:b2:65:64:8c:6c:b4:c0:05:e9:79:ee:44:59:12:7d:3e:
45:9e:b9:b8:2a:0b:75:b7:ff:79:73:06:a5:4d:0d:2e:c6:6b:
b1:be:f1:26:6e:6f:70:c9:78:d0:b4:73:16:54:65:11:3f:e2:
09:57:72:52:5a:c0:42:89:7d:81:65:30:28:25:b8:fc:9d:60:
c0:30:a1:c6:fc:3a:ff:f4:4c:6a:19:51:1f:7e:90:8d:1f:6a:
a9:11:7d:bc:8b:1a:33:37:f5:98:8c:49:29:d0:f5:95:0e:a4:
33:d6:8f:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYP4EcGlgL/zlSs5JCSn3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDVkZjZlNDA0ZWY5MjBlNmE1OTI4ZDg5NjNlNmE1Zjhk
NjExMjAwHhcNMjUwODIzMTAwMjE3WhcNMjUwODI0MTAwMjE3WjAzMTEwLwYDVQQD
EyhhNGRlYTI0MWE4ZTZiNDU5ZDYxM2QyMjY5MjE5OTJlNjQxNWZkMDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1J4jkBPJOBQHdXBkBR82m8bW1TZ
57vP6F593a8PXXFCG0aUqMRDxl1TC0Tl4pVbBRWe9/HFSAwkR+YobAvm4bsObL58
SvQ6SN1T6Uo3JMKT7P2gxc6GA5DwdL7vAL2Bfjk58d/qsuPPkLHAMU0h6qkLRNvG
P0zkKlEq/ZTKTmkt5raxtFZEagBF5klyI5awAQxlFjXi2FzEf2EwwReS0uJ61VpF
8I5bP92mzoCvHahGPJub94Vfe9HxAq2aCdCj2d15bSbUQyp6+6og/rFL9w8qkKl9
/kiC/ClLdLDiRFSOuDlfZxkau23b2VnuqdRQaAyy73ZKIB/WluiL7RXfuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTeokGo5rRZ1hPSJpIZkuZBX9CJMB8GA1UdIwQY
MBaAFNwF325ATvkg5qWSjYlj5qX41hEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQt
YmNlOTM0MjA1YWU4LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wYzM4ODYtYTMyZC00NDM1LWFiNzQtYmNlOTM0MjA1YWU4
LzEvM0FYZmJrQk8tU0RtcFpLTmlXUG1wZmpXRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBBWSFUv
6W/LcjPloF3EK20L8hDri3oRxPD0NdqWKWRRYI+vscG8/LQxlc2CtNgQQRE6DsDR
qjYZmVzdQ67lXJ/JzmV8djZtu3l4glmEp6m64sBlF1fw094S8KB+p1omp3hNXtBc
YI5cNJ3/oeIcGabTZblmwcRmdfbGoGD45D/EvSYyvUOI9bwLNcPr42ZCwgCyZWSM
bLTABel57kRZEn0+RZ65uCoLdbf/eXMGpU0NLsZrsb7xJm5vcMl40LRzFlRlET/i
CVdyUlrAQol9gWUwKCW4/J1gwDChxvw6//RMahlRH36QjR9qqRF9vIsaMzf1mIxJ
KdD1lQ6kM9aP4Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:03:47 2025 by rpki-client