Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json)
Hash identifier: gBMaco7s8x7hKoV+5vv0n0pGoZ6YsEDkuMz3j7w+p5s=
Subject key identifier: 92:20:E9:AE:0D:69:2B:86:E1:4E:E2:36:90:98:05:CF:65:8A:34:12
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial: 0198D4A79699A35532E37E7177ACBE5A1972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
Manifest number: 02D1
Signing time: Sat 23 Aug 2025 02:00:09 +0000
Manifest this update: Sat 23 Aug 2025 02:00:09 +0000
Manifest next update: Sun 24 Aug 2025 02:00:09 +0000
Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: HzFLfFUsDXEYV3dYxFz7O+GVSxPg1YMvj+awR67XUts=)
2: wSO8Qf5_v1p-oNDifbsTI9tUaPY.roa (hash: t8VFb4R1YuauyoB16s9G5smfDaNXuP879i5idHgDRZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:96:99:a3:55:32:e3:7e:71:77:ac:be:5a:19:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Validity
Not Before: Aug 23 02:00:09 2025 GMT
Not After : Aug 24 02:00:09 2025 GMT
Subject: CN=9220e9ae0d692b86e14ee236909805cf658a3412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:41:6c:8d:df:6f:de:da:08:02:81:ee:20:a1:
f7:a5:72:60:4c:da:cf:ce:d8:75:b4:56:34:d8:4b:
74:6f:62:9b:9f:67:91:b4:d0:b8:3d:45:a9:6a:f1:
63:03:98:6d:ac:fd:17:b2:45:05:cc:be:1b:ac:74:
25:09:c4:eb:c5:93:30:4a:68:0c:d3:2c:f8:24:b0:
7b:52:4b:07:77:ea:b4:d2:0c:86:d0:e1:28:ec:9e:
c7:47:20:13:54:3b:8f:c0:aa:7a:90:aa:c1:7a:71:
b1:32:6b:d2:cc:29:af:ad:e3:8c:47:ce:22:2e:ac:
42:41:8d:74:37:a2:ed:d9:06:ff:66:95:56:0d:c2:
66:a7:20:80:16:a1:65:19:e0:5c:9e:de:1f:ec:1a:
e3:2d:6a:1a:19:93:57:b2:67:a7:ef:65:4f:6a:e9:
64:1a:a4:e2:92:55:21:ca:78:6f:a7:59:f0:91:d6:
ba:73:80:52:af:a2:7a:f5:b9:63:b3:c0:77:9b:a4:
ed:41:0e:3c:3a:c4:37:98:4b:90:be:df:5b:13:78:
7c:9c:fe:83:c8:4e:44:91:0d:6b:b7:31:49:39:38:
d9:43:1b:24:0f:6d:e9:b2:26:3e:9b:7b:9b:93:b9:
5a:52:5e:d4:1b:8e:e6:52:53:07:55:ef:b2:08:3c:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:20:E9:AE:0D:69:2B:86:E1:4E:E2:36:90:98:05:CF:65:8A:34:12
X509v3 Authority Key Identifier:
keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:51:a6:40:12:36:19:2b:02:97:bf:cf:9b:28:68:ad:a6:61:
5d:4d:88:9b:c5:cb:3f:77:b9:89:f3:fb:c4:8f:ff:a7:5e:44:
68:8d:bb:a1:6f:88:92:a9:33:ae:0a:6a:e6:fd:7e:5a:1c:ee:
b6:8c:47:2f:38:16:db:98:22:1e:3f:54:78:c0:ae:39:aa:93:
23:d8:d5:64:0f:27:f5:d6:0b:a8:76:78:fd:ce:c6:3a:19:5e:
3e:f0:32:63:35:25:b9:73:e8:7f:96:37:4e:17:6a:26:80:99:
a0:93:f5:b6:4a:8a:0a:00:90:b0:b3:9d:5f:fd:ee:9c:8a:28:
10:0d:ee:c2:65:ff:c6:c4:e5:83:32:ea:67:fd:ad:2f:76:fc:
f8:be:71:71:a0:3d:14:e9:21:85:a0:fe:7f:37:9d:1f:2d:a5:
a5:13:63:80:67:9e:e4:58:5d:34:56:bf:1e:95:4e:89:ee:58:
28:9d:60:3a:5f:e9:dc:f7:22:c6:11:5e:ac:1c:1b:f4:f8:4e:
f1:c6:2d:5c:96:0d:84:1d:24:a6:77:8c:32:15:85:32:01:9a:
ac:e3:ee:8d:f9:f1:f6:29:86:4c:27:09:7b:91:fb:cc:4f:50:
00:c7:31:be:a1:2b:fc:4a:8f:77:29:30:a9:77:68:37:9a:44:
06:e2:6d:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp5aZo1Uy435xd6y+WhlyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOGUzODE4N2FlNzBjYmM3YmVkNjk1NzU5ZjBlMDMyOTlm
YmIzMDIwHhcNMjUwODIzMDIwMDA5WhcNMjUwODI0MDIwMDA5WjAzMTEwLwYDVQQD
Eyg5MjIwZTlhZTBkNjkyYjg2ZTE0ZWUyMzY5MDk4MDVjZjY1OGEzNDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UFsjd9v3toIAoHuIKH3pXJgTNrP
zth1tFY02Et0b2Kbn2eRtNC4PUWpavFjA5htrP0XskUFzL4brHQlCcTrxZMwSmgM
0yz4JLB7UksHd+q00gyG0OEo7J7HRyATVDuPwKp6kKrBenGxMmvSzCmvreOMR84i
LqxCQY10N6Lt2Qb/ZpVWDcJmpyCAFqFlGeBcnt4f7BrjLWoaGZNXsmen72VPaulk
GqTiklUhynhvp1nwkda6c4BSr6J69bljs8B3m6TtQQ48OsQ3mEuQvt9bE3h8nP6D
yE5EkQ1rtzFJOTjZQxskD23psiY+m3ubk7laUl7UG47mUlMHVe+yCDyIRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIg6a4NaSuG4U7iNpCYBc9lijQSMB8GA1UdIwQY
MBaAFN6OOBh65wy8e+1pV1nw4DKZ+7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ODBjMTEtMzkxMy00NDc5LWJlYTMt
NWIxZjQ4YjNlMjE0LzEvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81ODBjMTEtMzkxMy00NDc5LWJlYTMtNWIxZjQ4YjNlMjE0
LzEvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVGmQBI2
GSsCl7/PmyhoraZhXU2Im8XLP3e5ifP7xI//p15EaI27oW+Ikqkzrgpq5v1+Whzu
toxHLzgW25giHj9UeMCuOaqTI9jVZA8n9dYLqHZ4/c7GOhlePvAyYzUluXPof5Y3
ThdqJoCZoJP1tkqKCgCQsLOdX/3unIooEA3uwmX/xsTlgzLqZ/2tL3b8+L5xcaA9
FOkhhaD+fzedHy2lpRNjgGee5FhdNFa/HpVOie5YKJ1gOl/p3PcixhFerBwb9PhO
8cYtXJYNhB0kpneMMhWFMgGarOPujfnx9imGTCcJe5H7zE9QAMcxvqEr/EqPdykw
qXdoN5pEBuJteg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:23 2025 by rpki-client