Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: vPVKy8geVeAQMfhHDf+01sntD1cQ9twbnCKut4SiK7o=
Subject key identifier: FD:BE:FF:5F:3C:37:3B:E6:82:43:E5:49:C7:A7:89:0F:BB:97:34:15
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 0198D7E17FFF73AEE3594E7C4304ACE66062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 17:02:16 +0000
Manifest this update: Sat 23 Aug 2025 17:02:16 +0000
Manifest next update: Sun 24 Aug 2025 17:02:16 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: fC/7141c4jZJZEBUYsaZWT3g2gDxLKePQOUOWUk8eKU=)
2: urKpUlRihT17e4-sYhWpyMcE8Ac.roa (hash: OKr8BwUnDAnQRh/fja/ALDyKIeKec2Yi0x2apcZhAec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:7f:ff:73:ae:e3:59:4e:7c:43:04:ac:e6:60:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Aug 23 17:02:16 2025 GMT
Not After : Aug 24 17:02:16 2025 GMT
Subject: CN=fdbeff5f3c373be68243e549c7a7890fbb973415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9a:0d:b8:d0:aa:e7:80:f7:19:cf:5f:f7:01:
44:0e:ab:c7:af:13:a6:b0:0e:cd:2b:88:eb:d6:6b:
0f:7b:05:3b:b7:80:4e:d0:77:f1:40:bf:2c:99:f3:
ca:aa:70:ce:93:42:c3:ca:46:64:dc:91:d5:87:ff:
54:69:16:0d:95:26:52:c2:88:50:1e:2d:0d:d9:d9:
14:b4:c5:99:35:fd:bc:ef:fd:d4:ae:5a:26:69:33:
44:4b:31:86:7d:8d:19:2f:b8:dd:ee:ae:40:9f:2d:
9a:4c:27:aa:75:46:f5:a9:66:3a:a3:01:3f:c3:e1:
dd:e0:67:b2:25:ae:66:a1:2d:9e:99:ea:e5:1b:6f:
5a:b1:10:1c:7f:a8:13:ba:54:37:59:12:9c:66:2d:
b6:fb:78:d0:75:d5:8c:82:d9:cc:f4:bf:2a:24:c9:
15:f8:a4:a8:68:db:fd:56:81:1f:d2:8c:e8:d6:a0:
16:e1:94:9b:be:df:42:70:4b:1d:25:c7:1e:f7:78:
65:0a:45:06:d2:59:ef:53:be:9e:14:0f:05:14:92:
a3:0d:47:d7:f0:b4:d4:b8:2d:d3:20:52:2e:33:4f:
a4:0f:80:a2:ba:43:3d:0c:31:5a:84:f6:fc:fe:10:
0b:e0:92:0b:1e:22:df:c4:9a:5f:d3:9e:0a:92:3e:
6a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BE:FF:5F:3C:37:3B:E6:82:43:E5:49:C7:A7:89:0F:BB:97:34:15
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ad:70:75:7b:00:88:34:52:ac:30:2e:9c:36:ec:92:0d:64:
81:bf:a8:da:28:e6:d9:82:53:1a:46:af:9d:17:38:3c:4f:b1:
e1:aa:22:29:8e:d0:77:12:ec:5c:6a:67:b3:23:d1:51:a6:7b:
7d:d9:43:49:4d:b1:f8:9b:fa:d7:2d:a8:84:4b:70:01:74:76:
1f:f7:2b:26:2c:da:fb:83:e2:01:eb:0e:b6:88:51:b6:fc:e2:
2f:c0:02:61:63:a5:92:8a:c6:db:8c:f4:9f:f9:f5:44:3f:1c:
65:b8:3f:c1:92:67:ac:a1:54:49:67:10:65:93:0c:c9:7e:b0:
0f:9f:46:41:66:43:ce:78:cf:d1:1b:37:cd:dd:9d:21:79:19:
36:46:cb:6b:b6:83:9f:d8:ef:79:d1:74:da:8d:f6:b3:01:10:
12:4e:ee:96:59:b0:6a:1b:08:9f:0c:37:20:98:db:e4:f8:9b:
4f:cd:ac:b3:34:81:56:a6:16:0b:98:fa:41:00:c5:fc:70:b1:
38:96:a2:c3:b5:17:93:fc:9c:f5:b4:49:e8:49:05:c7:b9:b8:
33:1c:44:63:d9:4a:25:8f:15:e2:ea:7f:7d:0d:30:1a:f2:bc:
40:79:f2:91:b8:32:e9:f9:9e:f9:0e:1d:13:7f:7e:48:4a:67:
d1:81:16:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4X//c67jWU58QwSs5mBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOWYyYTkyNzM3OGJkMTQ1NWRhOGJkZjg1YmIxYWI4Njdl
MWY1MjgwHhcNMjUwODIzMTcwMjE2WhcNMjUwODI0MTcwMjE2WjAzMTEwLwYDVQQD
EyhmZGJlZmY1ZjNjMzczYmU2ODI0M2U1NDljN2E3ODkwZmJiOTczNDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5oNuNCq54D3Gc9f9wFEDqvHrxOm
sA7NK4jr1msPewU7t4BO0HfxQL8smfPKqnDOk0LDykZk3JHVh/9UaRYNlSZSwohQ
Hi0N2dkUtMWZNf287/3UrlomaTNESzGGfY0ZL7jd7q5Any2aTCeqdUb1qWY6owE/
w+Hd4GeyJa5moS2emerlG29asRAcf6gTulQ3WRKcZi22+3jQddWMgtnM9L8qJMkV
+KSoaNv9VoEf0ozo1qAW4ZSbvt9CcEsdJcce93hlCkUG0lnvU76eFA8FFJKjDUfX
8LTUuC3TIFIuM0+kD4CiukM9DDFahPb8/hAL4JILHiLfxJpf054Kkj5qEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2+/188NzvmgkPlSceniQ+7lzQVMB8GA1UdIwQY
MBaAFN6fKpJzeL0UVdqL34W7Grhn4fUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQt
NmRiMDkwMjE0MDM1LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQtNmRiMDkwMjE0MDM1
LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKq1wdXsA
iDRSrDAunDbskg1kgb+o2ijm2YJTGkavnRc4PE+x4aoiKY7QdxLsXGpnsyPRUaZ7
fdlDSU2x+Jv61y2ohEtwAXR2H/crJiza+4PiAesOtohRtvziL8ACYWOlkorG24z0
n/n1RD8cZbg/wZJnrKFUSWcQZZMMyX6wD59GQWZDznjP0Rs3zd2dIXkZNkbLa7aD
n9jvedF02o32swEQEk7ullmwahsInww3IJjb5PibT82sszSBVqYWC5j6QQDF/HCx
OJaiw7UXk/yc9bRJ6EkFx7m4MxxEY9lKJY8V4up/fQ0wGvK8QHnykbgy6fme+Q4d
E39+SEpn0YEWvw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:07 2025 by rpki-client