Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File: 3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier: mb7R7UG4TKSwKM+vmIjtGiFhWOQTyp9xey7ljtp33ZM=
Subject key identifier: 08:BF:10:7C:82:3B:64:26:C7:B0:AB:B2:E6:06:2C:0C:89:2B:D8:65
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial: 0198D65F3C1F78E0974BFEED064E16BD3CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number: 1292
Signing time: Sat 23 Aug 2025 10:00:22 +0000
Manifest this update: Sat 23 Aug 2025 10:00:22 +0000
Manifest next update: Sun 24 Aug 2025 10:00:22 +0000
Files and hashes: 1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: 3LMVy+YUPJ/Ex3VHzZ+1aWrsOcHCWVeyKE1YRJU3mQ0=)
2: qlMHdAg_ZeG5jpZEikZxyiq5rOM.roa (hash: r9NbCVDLWns0v6U+hfflkmDI70L6VCrJW0Q5+div1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:3c:1f:78:e0:97:4b:fe:ed:06:4e:16:bd:3c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Validity
Not Before: Aug 23 10:00:22 2025 GMT
Not After : Aug 24 10:00:22 2025 GMT
Subject: CN=08bf107c823b6426c7b0abb2e6062c0c892bd865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:01:96:75:3f:b3:ac:ae:7d:34:ff:57:35:30:
39:77:2b:8c:7e:10:6c:6b:f5:81:19:aa:41:14:0f:
2d:48:c7:7b:e6:97:f7:d2:66:c6:67:4d:f3:2a:ea:
f8:3a:df:e0:89:3f:f0:92:8d:a8:6b:0f:6f:ec:60:
d3:e4:b7:aa:34:95:8b:9e:60:58:2b:04:be:13:ea:
85:1b:9f:f0:b3:38:c2:fa:62:b7:79:88:16:37:e9:
78:df:d7:a3:9c:d9:f9:4f:b4:ef:61:7b:72:70:f5:
be:31:6f:8f:00:ac:47:f9:78:2f:59:9d:80:a2:0f:
36:01:87:82:df:5f:54:fb:44:e8:ea:88:1f:2c:7e:
47:7e:a7:09:1b:42:93:b0:40:09:28:1d:90:42:79:
c2:5e:54:ff:dc:ca:29:b3:bb:1b:37:e6:49:5f:90:
2a:63:4c:56:60:7a:d1:f2:ff:32:ac:b8:9b:88:93:
79:71:f0:e4:4a:8b:a9:e3:10:c3:51:cf:ee:63:60:
73:4b:cb:4d:6e:af:ce:26:df:ce:c1:33:8f:be:1e:
19:48:45:a3:42:eb:86:87:c8:10:d4:a5:0c:45:a7:
1d:d7:0b:98:6d:22:47:99:b4:da:25:8c:81:0e:3e:
b4:7c:a7:ea:20:e7:13:5b:a2:00:8a:2e:45:3a:ef:
2f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BF:10:7C:82:3B:64:26:C7:B0:AB:B2:E6:06:2C:0C:89:2B:D8:65
X509v3 Authority Key Identifier:
keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:16:0d:48:ca:e3:d8:3d:7c:a8:44:8c:55:61:1a:7e:7e:84:
60:21:ac:b7:26:0a:b9:a4:f6:b4:88:e3:52:c0:cf:42:3d:e1:
d0:13:e0:eb:12:4f:05:ca:9d:2f:03:18:ae:63:8d:bc:9a:eb:
c3:3b:46:9a:30:07:b5:22:78:d5:ec:9c:2f:a6:9a:79:59:61:
25:87:49:89:ed:e6:6e:70:4e:11:3e:b6:80:90:09:97:ac:c3:
d8:9c:c4:f5:3f:ad:86:89:1e:f1:37:bb:8f:06:4e:b2:2f:3f:
2d:59:7d:26:4f:1f:e5:08:3d:e5:b0:ad:f3:0c:91:6e:d3:0d:
7a:63:75:c9:e0:8d:0d:a3:64:b8:0e:4e:69:1d:9f:a1:e2:59:
7f:0e:20:5d:b4:8e:97:f7:b1:ad:a1:29:81:d9:0b:a6:07:b2:
23:80:a9:be:02:c9:b0:8e:5a:ff:2c:c5:4b:94:67:d0:15:92:
33:c8:09:f5:ed:61:e3:f5:66:ce:61:2e:41:63:57:74:c1:9c:
6b:80:61:16:23:c6:f4:86:99:a6:cf:78:d6:9f:e7:5f:c4:cb:
bf:09:25:3f:53:87:29:3a:b9:94:a2:ff:5f:01:7d:cd:7e:6c:
b3:d0:e6:ac:c4:7d:ac:78:9f:05:f8:03:57:ae:eb:70:79:d3:
a3:51:fd:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXzwfeOCXS/7tBk4WvTzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNmM2MDM1MDQyY2M1MzI1MTZlYmMxOTY4ZjQxYmZmZjRi
ODUzN2UwHhcNMjUwODIzMTAwMDIyWhcNMjUwODI0MTAwMDIyWjAzMTEwLwYDVQQD
EygwOGJmMTA3YzgyM2I2NDI2YzdiMGFiYjJlNjA2MmMwYzg5MmJkODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwGWdT+zrK59NP9XNTA5dyuMfhBs
a/WBGapBFA8tSMd75pf30mbGZ03zKur4Ot/giT/wko2oaw9v7GDT5LeqNJWLnmBY
KwS+E+qFG5/wszjC+mK3eYgWN+l439ejnNn5T7TvYXtycPW+MW+PAKxH+XgvWZ2A
og82AYeC319U+0To6ogfLH5HfqcJG0KTsEAJKB2QQnnCXlT/3Mops7sbN+ZJX5Aq
Y0xWYHrR8v8yrLibiJN5cfDkSoup4xDDUc/uY2BzS8tNbq/OJt/OwTOPvh4ZSEWj
QuuGh8gQ1KUMRacd1wuYbSJHmbTaJYyBDj60fKfqIOcTW6IAii5FOu8vbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAi/EHyCO2Qmx7CrsuYGLAyJK9hlMB8GA1UdIwQY
MBaAFN5sYDUELMUyUW68GWj0G//0uFN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM214Z05RUXN4VEpSYnJ3WmFQUWJfX1M0VTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jMmJiNGQtODQ4My00N2NlLWJiMGEt
ZjVmNDkwZDJjMTYzLzEvM214Z05RUXN4VEpSYnJ3WmFQUWJfX1M0VTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9jMmJiNGQtODQ4My00N2NlLWJiMGEtZjVmNDkwZDJjMTYz
LzEvM214Z05RUXN4VEpSYnJ3WmFQUWJfX1M0VTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRYNSMrj
2D18qESMVWEafn6EYCGstyYKuaT2tIjjUsDPQj3h0BPg6xJPBcqdLwMYrmONvJrr
wztGmjAHtSJ41eycL6aaeVlhJYdJie3mbnBOET62gJAJl6zD2JzE9T+thoke8Te7
jwZOsi8/LVl9Jk8f5Qg95bCt8wyRbtMNemN1yeCNDaNkuA5OaR2foeJZfw4gXbSO
l/exraEpgdkLpgeyI4CpvgLJsI5a/yzFS5Rn0BWSM8gJ9e1h4/VmzmEuQWNXdMGc
a4BhFiPG9IaZps941p/nX8TLvwklP1OHKTq5lKL/XwF9zX5ss9DmrMR9rHifBfgD
V67rcHnTo1H9kA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:53 2025 by rpki-client