Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier: irK7pnogFtbeQL6/0VHIPYzkB9azNwMZN6FsSbgp8v8=
Subject key identifier: 46:67:3C:4D:94:14:F7:7B:60:FF:20:74:6A:5D:1D:05:E7:4B:D0:FC
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer: /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial: 0198D65FA3854549A96CCEE6D7CDA9D3BB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:48 +0000
Manifest this update: Sat 23 Aug 2025 10:00:48 +0000
Manifest next update: Sun 24 Aug 2025 10:00:48 +0000
Files and hashes: 1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: jjm76foWRdCGLq7nmN4jziIlV+vfxfX+9Ef13DAobUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a3:85:45:49:a9:6c:ce:e6:d7:cd:a9:d3:bb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Validity
Not Before: Aug 23 10:00:48 2025 GMT
Not After : Aug 24 10:00:48 2025 GMT
Subject: CN=46673c4d9414f77b60ff20746a5d1d05e74bd0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:e7:fe:7b:71:a8:d1:ba:b8:28:25:28:72:
e0:ba:8a:d4:6d:2b:08:03:cd:e0:bd:40:c5:f4:e0:
f1:93:93:7d:e4:4e:ed:cb:4c:2f:bb:f8:e3:bd:8c:
0f:e0:71:ed:87:92:79:89:3d:35:cd:68:c5:01:e3:
f6:c5:e4:06:8d:30:eb:ac:a3:36:a5:6f:fc:c3:db:
37:6d:e6:3a:28:f4:18:8b:27:4e:88:65:c6:6a:11:
fb:09:e0:dc:92:52:66:1e:08:2f:b9:ad:8d:2c:80:
9c:66:37:90:c0:f5:c3:67:8b:d2:62:bb:11:55:b3:
c3:a9:c2:02:a0:ba:ba:c3:17:d8:9b:58:8b:fb:f2:
0a:ff:6b:47:3a:d6:b5:6a:4f:c3:83:bb:5a:52:c1:
27:88:4c:b1:db:46:5b:14:81:5b:34:1e:0a:85:9c:
c8:f6:13:c4:f9:02:86:0b:c2:05:e8:d0:d6:43:de:
fc:9c:69:f0:a5:26:09:1d:13:f5:ae:78:45:5f:69:
a7:5d:7e:f1:c2:2a:88:8a:7a:c3:ee:c3:ba:08:77:
b2:e4:b5:b9:5b:7a:aa:1e:e6:e7:08:e3:b0:db:e8:
60:90:bd:68:3a:13:ae:6a:3d:7c:bb:95:ff:5b:de:
c7:c3:01:65:89:ba:b5:7b:c0:72:96:45:f3:5c:c6:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:67:3C:4D:94:14:F7:7B:60:FF:20:74:6A:5D:1D:05:E7:4B:D0:FC
X509v3 Authority Key Identifier:
keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e9:1b:75:dc:76:d9:a6:5f:de:b9:d0:ed:ce:64:fa:52:ff:
3e:7b:26:49:0f:1c:d1:6a:98:5c:7c:ce:df:76:4a:78:18:5d:
e2:85:ee:c1:4b:d8:4e:e2:f6:c4:1a:85:4c:bd:7f:69:d2:69:
cb:b8:c6:b0:14:d0:0f:16:9b:a6:ae:86:46:f1:64:3f:64:1f:
74:13:6e:3f:28:77:0e:da:20:43:be:c3:cb:89:2a:87:14:9d:
92:be:10:f1:b7:9a:77:7e:1b:32:11:ee:35:5a:41:ed:ba:bf:
d6:4c:12:c7:86:b5:81:cb:fd:6f:3d:12:db:a0:ea:a1:f7:a4:
d0:25:92:e2:ed:db:ac:28:bc:47:d4:df:a5:8d:80:74:73:1f:
73:62:f9:e6:3e:11:8f:62:0a:37:93:1c:03:6d:f8:d6:84:87:
fa:2e:3b:72:e3:4c:3e:87:32:34:8e:52:ba:f3:2f:38:78:61:
a2:1b:05:27:40:e9:b2:3c:5b:af:e8:5b:6b:c5:44:e5:4f:f0:
d0:a4:64:5f:f2:9e:63:90:57:37:4e:9c:a0:f1:41:36:6d:ae:
05:3d:ee:e8:fe:ce:18:2e:96:cf:20:33:1c:02:72:3f:90:05:
95:ec:60:f7:37:6c:c0:ff:41:af:b6:86:03:d8:58:90:d7:df:
f6:80:f2:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX6OFRUmpbM7m182p07tZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTJhNWJjNTAwOGY0ODI0ODI2NWZkMmVkNjBmZmZjMmMz
ZTljY2MwHhcNMjUwODIzMTAwMDQ4WhcNMjUwODI0MTAwMDQ4WjAzMTEwLwYDVQQD
Eyg0NjY3M2M0ZDk0MTRmNzdiNjBmZjIwNzQ2YTVkMWQwNWU3NGJkMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL3n/ntxqNG6uCglKHLguorUbSsI
A83gvUDF9ODxk5N95E7ty0wvu/jjvYwP4HHth5J5iT01zWjFAeP2xeQGjTDrrKM2
pW/8w9s3beY6KPQYiydOiGXGahH7CeDcklJmHggvua2NLICcZjeQwPXDZ4vSYrsR
VbPDqcICoLq6wxfYm1iL+/IK/2tHOta1ak/Dg7taUsEniEyx20ZbFIFbNB4KhZzI
9hPE+QKGC8IF6NDWQ978nGnwpSYJHRP1rnhFX2mnXX7xwiqIinrD7sO6CHey5LW5
W3qqHubnCOOw2+hgkL1oOhOuaj18u5X/W97HwwFlibq1e8BylkXzXMbh4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZnPE2UFPd7YP8gdGpdHQXnS9D8MB8GA1UdIwQY
MBaAFN8SpbxQCPSCSCZf0u1g//wsPpzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hLbHZGQUk5SUpJSmxfUzdXRF9fQ3ctbk13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84YTBkY2UtOWRmNi00M2RhLTk5ZDYt
OTA0NTZmMWVhNzU3LzEvM3hLbHZGQUk5SUpJSmxfUzdXRF9fQ3ctbk13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC84YTBkY2UtOWRmNi00M2RhLTk5ZDYtOTA0NTZmMWVhNzU3
LzEvM3hLbHZGQUk5SUpJSmxfUzdXRF9fQ3ctbk13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+kbddx2
2aZf3rnQ7c5k+lL/PnsmSQ8c0WqYXHzO33ZKeBhd4oXuwUvYTuL2xBqFTL1/adJp
y7jGsBTQDxabpq6GRvFkP2QfdBNuPyh3DtogQ77Dy4kqhxSdkr4Q8bead34bMhHu
NVpB7bq/1kwSx4a1gcv9bz0S26Dqofek0CWS4u3brCi8R9TfpY2AdHMfc2L55j4R
j2IKN5McA2341oSH+i47cuNMPocyNI5SuvMvOHhhohsFJ0Dpsjxbr+hba8VE5U/w
0KRkX/KeY5BXN06coPFBNm2uBT3u6P7OGC6WzyAzHAJyP5AFlexg9zdswP9Br7aG
A9hYkNff9oDySQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:04 2025 by rpki-client