Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: Jbr4Wd1RrAkDPTCw4xOlh9UvBO4AUkLHdaHufiCkhcE=
Subject key identifier: 37:89:0E:D2:DD:83:A6:60:3C:92:5F:BF:17:EB:84:0C:CC:F8:99:CA
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 0198D4DFD3DEC14E338A900414499FC10C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:01:35 +0000
Manifest this update: Sat 23 Aug 2025 03:01:35 +0000
Manifest next update: Sun 24 Aug 2025 03:01:35 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: UaGmKBFdL0wIfy43mS8sksOwjeZjCBct/jN5984Uags=)
2: 6GNxdzK9UE9bHySiQzQ4c2EkGfY.roa (hash: xWTUJszNKd3dbNHz1f2JomMkK2hd4V6IPZrJaK6VjKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d3:de:c1:4e:33:8a:90:04:14:49:9f:c1:0c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Aug 23 03:01:35 2025 GMT
Not After : Aug 24 03:01:35 2025 GMT
Subject: CN=37890ed2dd83a6603c925fbf17eb840cccf899ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:39:be:00:7e:6e:57:c2:27:be:ac:b0:1a:
76:a7:66:27:45:bc:35:a3:0c:35:fc:c6:70:18:43:
3d:7f:25:8f:0d:ec:96:62:6a:77:53:97:95:11:74:
ce:e2:fb:55:4c:e5:6a:5c:8d:dc:0a:e1:bb:a7:dc:
48:f6:54:5a:a6:70:34:f4:e6:9a:bb:25:50:ba:2f:
22:7d:87:1a:3a:61:7a:55:7f:ff:86:e1:e2:d4:7e:
ce:9a:8e:1c:fa:93:5d:34:90:c2:74:55:1a:db:99:
56:86:2f:92:8a:13:a8:06:e3:27:90:48:9f:c4:92:
b5:4f:e3:5b:ae:3a:ca:63:f8:80:9b:a5:61:97:29:
5a:21:16:70:02:78:b1:1b:88:84:4d:f9:22:1d:cd:
6b:8d:d2:0a:9c:f9:43:ec:29:37:ad:e9:ce:ee:73:
ce:6b:40:24:8f:97:f3:a0:f7:79:ca:cd:8f:ec:03:
ff:7a:cc:fc:bd:88:d8:0d:c0:aa:e0:85:7c:f3:47:
83:2a:db:cc:1b:5a:53:33:a0:84:f9:c8:9f:8f:9d:
c4:a3:bc:4b:77:ec:84:5c:d6:87:f5:da:a2:85:fe:
e2:56:59:67:a3:c0:b0:e7:af:97:51:c0:33:2b:27:
9f:74:96:32:74:fd:9a:d9:df:bd:f0:b3:1f:1a:b9:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:89:0E:D2:DD:83:A6:60:3C:92:5F:BF:17:EB:84:0C:CC:F8:99:CA
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:bc:e9:27:09:60:5b:36:7a:f8:83:14:56:73:a9:54:c8:2e:
4a:bc:0e:af:64:ba:b2:1d:aa:6d:7d:3a:6e:1d:52:cc:b5:0a:
57:64:00:cf:27:2d:f3:a9:b3:c7:51:74:5f:c6:75:79:e0:a7:
a5:8a:b6:e6:f7:b1:47:1c:cd:d0:54:95:28:2f:9a:1a:07:ea:
2f:ab:6d:06:64:99:29:f0:b9:ed:e0:05:b1:72:45:2f:79:99:
0d:20:83:e1:1f:5b:65:6b:ef:af:34:ef:98:40:50:65:16:d2:
6a:7e:7f:c0:ca:67:32:f7:32:97:3f:88:1c:79:43:9a:23:30:
8b:74:85:6a:02:c6:b2:df:b0:2e:07:62:89:88:73:00:c3:79:
08:7d:3c:ce:80:2d:e7:7a:9e:8f:b4:22:6a:dc:a2:7a:f0:44:
a0:c6:d1:ea:95:8d:20:89:37:74:ed:6c:40:b5:b5:2f:e3:c6:
d5:b7:92:e5:bd:f6:11:e9:1b:38:60:25:6c:b0:b2:f4:85:7e:
2b:50:7b:be:14:a1:ea:30:15:21:8b:89:d5:e2:b6:4c:51:ea:
c8:62:9b:dd:61:2f:8f:2b:4b:dc:a9:47:69:99:62:07:04:25:
3d:90:53:c3:f1:04:3c:9d:81:ed:7d:44:15:e5:3a:3a:14:d4:
ae:df:29:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU39PewU4zipAEFEmfwQwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMGNjZDIzOTFmYTMyYzBhZGUyOTdjNWZjODgzMDkwYjM5
OTEzOTUwHhcNMjUwODIzMDMwMTM1WhcNMjUwODI0MDMwMTM1WjAzMTEwLwYDVQQD
EygzNzg5MGVkMmRkODNhNjYwM2M5MjVmYmYxN2ViODQwY2NjZjg5OWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvU5vgB+blfCJ76ssBp2p2YnRbw1
oww1/MZwGEM9fyWPDeyWYmp3U5eVEXTO4vtVTOVqXI3cCuG7p9xI9lRapnA09Oaa
uyVQui8ifYcaOmF6VX//huHi1H7Omo4c+pNdNJDCdFUa25lWhi+SihOoBuMnkEif
xJK1T+NbrjrKY/iAm6VhlylaIRZwAnixG4iETfkiHc1rjdIKnPlD7Ck3renO7nPO
a0Akj5fzoPd5ys2P7AP/esz8vYjYDcCq4IV880eDKtvMG1pTM6CE+cifj53Eo7xL
d+yEXNaH9dqihf7iVllno8Cw56+XUcAzKyefdJYydP2a2d+98LMfGrkcoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeJDtLdg6ZgPJJfvxfrhAzM+JnKMB8GA1UdIwQY
MBaAFN4MzSOR+jLAreKXxfyIMJCzmROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQt
NjdjMWE2M2M1MTUwLzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQtNjdjMWE2M2M1MTUw
LzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrzpJwlg
WzZ6+IMUVnOpVMguSrwOr2S6sh2qbX06bh1SzLUKV2QAzyct86mzx1F0X8Z1eeCn
pYq25vexRxzN0FSVKC+aGgfqL6ttBmSZKfC57eAFsXJFL3mZDSCD4R9bZWvvrzTv
mEBQZRbSan5/wMpnMvcylz+IHHlDmiMwi3SFagLGst+wLgdiiYhzAMN5CH08zoAt
53qej7QiatyievBEoMbR6pWNIIk3dO1sQLW1L+PG1beS5b32EekbOGAlbLCy9IV+
K1B7vhSh6jAVIYuJ1eK2TFHqyGKb3WEvjytL3KlHaZliBwQlPZBTw/EEPJ2B7X1E
FeU6OhTUrt8pyA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:46 2025 by rpki-client