Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: S5s46NGVsf02r5Nv2HlJSxlGM+zP/gFn6BPTLHFjRfs=
Subject key identifier: 79:72:BE:BF:8F:AE:CF:DE:B8:7C:54:3A:36:13:3B:EA:83:D7:6D:C5
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 0198D65F2E96AA3E0CAA16F1F0CB33C393E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 0FBB
Signing time: Sat 23 Aug 2025 10:00:18 +0000
Manifest this update: Sat 23 Aug 2025 10:00:18 +0000
Manifest next update: Sun 24 Aug 2025 10:00:18 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: iXjRwL1Zpe2TDciabWU/8IbhfiWNzj1nectOZtf3A0o=)
2: i8FpzgugtZcFKDdMebgRZ16RoIg.roa (hash: Z0Wnkrs5xvwFBERJB5wvtxVMhqH4ul49O/mmtU48/Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:2e:96:aa:3e:0c:aa:16:f1:f0:cb:33:c3:93:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Aug 23 10:00:18 2025 GMT
Not After : Aug 24 10:00:18 2025 GMT
Subject: CN=7972bebf8faecfdeb87c543a36133bea83d76dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:2e:3a:a5:31:98:28:0f:96:4a:73:14:71:
a1:b1:7f:07:a2:7b:db:c9:2d:f7:d8:db:77:d1:4e:
b9:ff:62:da:6b:ea:66:60:40:c6:ca:e4:14:91:d0:
2b:d9:43:26:b4:00:98:66:4a:c8:6e:4f:70:dd:11:
97:59:79:93:31:45:75:fd:ff:f4:3f:39:83:4d:9a:
19:7d:cd:46:f9:57:9a:88:7b:da:eb:24:62:6e:2a:
c4:1e:0d:88:68:4b:a5:04:bf:70:9c:04:10:27:5e:
e1:bb:37:55:42:c2:f0:c5:69:f7:3a:c5:82:21:4c:
f0:de:5f:69:16:0f:d7:25:1f:ad:0d:04:fa:5e:ed:
16:9d:0a:f3:b8:d4:85:c6:ce:0a:51:ee:54:4b:83:
66:18:cf:54:12:dd:18:d3:71:50:ea:1f:5b:ed:83:
8b:41:83:58:41:61:5c:be:e4:48:ca:da:ef:27:e1:
d0:d4:45:b7:40:8f:a1:1c:21:ad:70:04:56:ef:03:
83:ee:c5:50:76:b5:d9:e0:e7:8d:67:da:bf:03:81:
49:dd:0b:c1:bd:91:9b:6a:de:c7:8c:36:2b:bc:01:
f8:80:fc:c2:18:59:eb:f8:45:74:46:a3:b2:bb:8d:
56:c1:03:84:83:e7:91:11:6e:a5:37:4c:de:c5:d8:
1f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:72:BE:BF:8F:AE:CF:DE:B8:7C:54:3A:36:13:3B:EA:83:D7:6D:C5
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a7:f8:02:50:7d:07:8d:9b:6d:28:bb:64:b4:d5:ea:c6:f8:
1f:5c:01:17:64:66:61:4f:5f:b6:88:6e:4c:a8:74:7d:0e:80:
e1:0d:ca:89:e7:05:f8:0b:c4:13:64:20:69:c1:c0:9c:72:95:
97:c1:0c:a2:a8:d1:30:9d:e1:98:aa:2c:b0:66:01:49:11:79:
c2:a8:69:b2:f9:3d:44:9a:70:04:30:13:f5:2a:70:16:70:25:
d5:88:a8:ba:0b:40:ad:19:ba:0c:d1:3a:d3:26:ac:35:d3:61:
33:71:b6:4d:d4:5b:95:7a:a3:d8:19:15:5d:35:91:82:3b:a3:
de:8f:cc:bd:7c:bf:06:25:5d:ab:ef:10:20:d1:8a:f3:3a:cc:
13:b3:04:79:13:7f:02:a0:d2:18:12:13:e9:6d:cb:95:25:35:
11:e2:90:a1:bc:a1:6d:52:ee:f8:71:02:9f:4f:76:2f:b8:e4:
5e:8a:fa:d6:bc:ea:db:c9:19:67:ee:4d:57:b9:b5:16:de:c8:
56:6c:20:18:20:3d:f4:f4:26:84:f7:8c:3b:0f:a3:2f:be:e2:
06:59:24:69:54:09:3e:7d:a8:eb:6b:be:21:7e:b5:ac:34:93:
04:f7:cc:a1:0e:05:48:c3:f3:d4:41:fb:d6:38:7d:16:59:14:
c7:78:a0:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXy6Wqj4Mqhbx8Mszw5PhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGUzODkyZjQ2YjEwNzg1MmMzZWFlMWIyN2RjY2Y2MGZh
Yjk5YmQwHhcNMjUwODIzMTAwMDE4WhcNMjUwODI0MTAwMDE4WjAzMTEwLwYDVQQD
Eyg3OTcyYmViZjhmYWVjZmRlYjg3YzU0M2EzNjEzM2JlYTgzZDc2ZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5ouOqUxmCgPlkpzFHGhsX8Honvb
yS332Nt30U65/2Laa+pmYEDGyuQUkdAr2UMmtACYZkrIbk9w3RGXWXmTMUV1/f/0
PzmDTZoZfc1G+VeaiHva6yRibirEHg2IaEulBL9wnAQQJ17huzdVQsLwxWn3OsWC
IUzw3l9pFg/XJR+tDQT6Xu0WnQrzuNSFxs4KUe5US4NmGM9UEt0Y03FQ6h9b7YOL
QYNYQWFcvuRIytrvJ+HQ1EW3QI+hHCGtcARW7wOD7sVQdrXZ4OeNZ9q/A4FJ3QvB
vZGbat7HjDYrvAH4gPzCGFnr+EV0RqOyu41WwQOEg+eREW6lN0zexdgflwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlyvr+Prs/euHxUOjYTO+qD123FMB8GA1UdIwQY
MBaAFN1OOJL0axB4UsPq4bJ9zPYPq5m9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTkt
M2I1YjcxY2JiMzIyLzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTktM2I1YjcxY2JiMzIy
LzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqf4AlB9
B42bbSi7ZLTV6sb4H1wBF2RmYU9ftohuTKh0fQ6A4Q3KiecF+AvEE2QgacHAnHKV
l8EMoqjRMJ3hmKossGYBSRF5wqhpsvk9RJpwBDAT9SpwFnAl1YiougtArRm6DNE6
0yasNdNhM3G2TdRblXqj2BkVXTWRgjuj3o/MvXy/BiVdq+8QINGK8zrME7MEeRN/
AqDSGBIT6W3LlSU1EeKQobyhbVLu+HECn092L7jkXor61rzq28kZZ+5NV7m1Ft7I
VmwgGCA99PQmhPeMOw+jL77iBlkkaVQJPn2o62u+IX61rDSTBPfMoQ4FSMPz1EH7
1jh9FlkUx3igRQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:41 2025 by rpki-client