Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
File: c3gm9t2lQDSR5IfKTut9fNdvoT4.mft (raw, json)
Hash identifier: qzZtt96k1fw2T0BSirWqQAj1xQ1uSgYKvQCr0KsRuew=
Subject key identifier: 41:76:31:FE:18:0B:0A:67:4D:5A:E1:C3:A4:C4:30:D7:CC:14:F5:58
Authority key identifier: 73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E
Certificate issuer: /CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e
Certificate serial: 0198D4A842997A877DCC6E59E0963CC6BFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
Manifest number: 04
Signing time: Sat 23 Aug 2025 02:00:53 +0000
Manifest this update: Sat 23 Aug 2025 02:00:53 +0000
Manifest next update: Sun 24 Aug 2025 02:00:53 +0000
Files and hashes: 1: c3gm9t2lQDSR5IfKTut9fNdvoT4.crl (hash: lozMj9/g9Lmoce15NAA/Y1CNBsEQlzW5QXlF9pOMkBk=)
2: mazPj7cdRL1I04pr_YJNNETJccU.roa (hash: 3OsJUxkMYMMTIuXPRezuzfI9FZxZPBdn1qkD0aOjzGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:42:99:7a:87:7d:cc:6e:59:e0:96:3c:c6:bf:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737826f6dda5403491e487ca4eeb7d7cd76fa13e
Validity
Not Before: Aug 23 02:00:53 2025 GMT
Not After : Aug 24 02:00:53 2025 GMT
Subject: CN=417631fe180b0a674d5ae1c3a4c430d7cc14f558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:28:7b:0f:e5:f0:bb:c5:59:1b:10:93:ff:fa:
da:7f:0d:06:d2:29:8a:44:a6:3d:e1:15:d7:1c:c6:
4e:9e:d8:21:e5:1d:35:fe:ec:0b:d0:76:5e:62:7e:
77:24:e0:1a:4c:1f:02:31:f5:28:c7:c5:09:c8:42:
44:ef:b3:a0:78:c7:6b:50:1b:2b:73:7d:3b:f0:50:
84:21:dd:f1:59:51:d1:d5:e6:aa:6e:96:ae:bc:e4:
97:e0:88:df:20:30:d5:34:a2:41:48:f3:20:43:85:
8a:d8:71:b4:5a:1e:07:0c:2c:e6:3f:c1:7a:7d:d4:
51:b2:9f:24:2e:2c:ff:9d:59:22:22:34:e7:51:0a:
cc:7a:dd:ef:40:21:b0:8b:04:0b:a4:52:5a:49:66:
33:72:65:99:63:59:5f:e2:cf:d4:6b:06:15:37:36:
e4:24:7c:bd:5c:d7:5e:07:ad:b8:4f:25:e4:de:80:
be:2e:d7:7d:e6:53:15:56:92:89:d8:15:73:f4:a8:
26:8b:37:b5:a5:0b:4b:ba:43:89:b9:2d:3c:66:aa:
f0:c5:46:62:4b:8c:42:f2:d9:8b:65:bb:58:89:8b:
22:45:fe:79:35:ae:f8:a7:27:c7:f8:48:3e:e7:6a:
4b:78:98:7a:8b:ec:15:87:29:03:0f:bc:63:74:08:
ee:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:76:31:FE:18:0B:0A:67:4D:5A:E1:C3:A4:C4:30:D7:CC:14:F5:58
X509v3 Authority Key Identifier:
keyid:73:78:26:F6:DD:A5:40:34:91:E4:87:CA:4E:EB:7D:7C:D7:6F:A1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3gm9t2lQDSR5IfKTut9fNdvoT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cd448d-6470-4601-9e89-13fa412a17cf/1/c3gm9t2lQDSR5IfKTut9fNdvoT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:7f:54:af:82:52:74:2a:47:11:84:0f:d3:13:92:60:2e:eb:
74:b6:f4:1c:10:c3:6d:a2:45:fe:90:aa:07:01:33:ba:e3:cf:
cd:e8:15:3a:7b:a0:21:f0:47:5c:ca:a5:6f:a0:0d:ed:e4:ae:
a3:a4:67:ef:6b:7b:d3:df:6c:21:d4:9a:0e:26:a5:e5:49:ed:
00:6e:38:5d:9b:8a:8b:f7:73:d9:ae:df:b2:b6:7e:4f:fd:33:
d6:20:8a:9d:b7:cf:98:ab:27:3a:77:7a:db:1c:61:61:63:8d:
91:1d:d2:0d:06:76:95:d1:b3:92:70:52:74:19:28:05:3f:ae:
c3:6d:3a:ce:b6:96:7d:85:79:74:3f:fb:38:c4:92:78:a9:77:
eb:87:e4:b8:af:ba:f8:ed:ae:2f:9d:0a:38:42:17:8d:a9:95:
96:05:da:20:1c:93:e9:8d:42:d1:ba:25:dc:1e:9e:5f:67:4e:
a7:ec:fa:50:22:87:67:88:34:4d:71:6c:ee:c1:99:4e:4c:19:
e0:50:8b:12:3c:cf:43:52:5e:4b:df:43:08:9d:7c:c5:a7:61:
c2:49:52:5e:a6:06:a8:c0:18:87:3f:76:86:43:f5:2d:17:ad:
3a:5a:b3:b8:53:e3:3c:c4:05:aa:12:d7:33:d1:fd:78:c3:5a:
ff:9c:20:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqEKZeod9zG5Z4JY8xr/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNzgyNmY2ZGRhNTQwMzQ5MWU0ODdjYTRlZWI3ZDdjZDc2
ZmExM2UwHhcNMjUwODIzMDIwMDUzWhcNMjUwODI0MDIwMDUzWjAzMTEwLwYDVQQD
Eyg0MTc2MzFmZTE4MGIwYTY3NGQ1YWUxYzNhNGM0MzBkN2NjMTRmNTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yh7D+Xwu8VZGxCT//rafw0G0imK
RKY94RXXHMZOntgh5R01/uwL0HZeYn53JOAaTB8CMfUox8UJyEJE77OgeMdrUBsr
c3078FCEId3xWVHR1eaqbpauvOSX4IjfIDDVNKJBSPMgQ4WK2HG0Wh4HDCzmP8F6
fdRRsp8kLiz/nVkiIjTnUQrMet3vQCGwiwQLpFJaSWYzcmWZY1lf4s/UawYVNzbk
JHy9XNdeB624TyXk3oC+Ltd95lMVVpKJ2BVz9Kgmize1pQtLukOJuS08ZqrwxUZi
S4xC8tmLZbtYiYsiRf55Na74pyfH+Eg+52pLeJh6i+wVhykDD7xjdAjuhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEF2Mf4YCwpnTVrhw6TEMNfMFPVYMB8GA1UdIwQY
MBaAFHN4JvbdpUA0keSHyk7rfXzXb6E+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzNnbTl0MmxRRFNSNUlmS1R1dDlmTmR2b1Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jZDQ0OGQtNjQ3MC00NjAxLTllODkt
MTNmYTQxMmExN2NmLzEvYzNnbTl0MmxRRFNSNUlmS1R1dDlmTmR2b1Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jZDQ0OGQtNjQ3MC00NjAxLTllODktMTNmYTQxMmExN2Nm
LzEvYzNnbTl0MmxRRFNSNUlmS1R1dDlmTmR2b1Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv39Ur4JS
dCpHEYQP0xOSYC7rdLb0HBDDbaJF/pCqBwEzuuPPzegVOnugIfBHXMqlb6AN7eSu
o6Rn72t7099sIdSaDial5UntAG44XZuKi/dz2a7fsrZ+T/0z1iCKnbfPmKsnOnd6
2xxhYWONkR3SDQZ2ldGzknBSdBkoBT+uw206zraWfYV5dD/7OMSSeKl364fkuK+6
+O2uL50KOEIXjamVlgXaIByT6Y1C0bol3B6eX2dOp+z6UCKHZ4g0TXFs7sGZTkwZ
4FCLEjzPQ1JeS99DCJ18xadhwklSXqYGqMAYhz92hkP1LRetOlqzuFPjPMQFqhLX
M9H9eMNa/5wgPg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:49 2025 by rpki-client