Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
File: 03o_Gc-XFmpEQiB-Em8qA7bL65g.mft (raw, json)
Hash identifier: ms6B+aSTF9eKOgN8tnOGGjTDBbhn9xEDe7Y8GqDs7Yw=
Subject key identifier: 08:87:4E:84:27:55:AC:35:88:F8:A0:0F:AB:E5:9F:BB:EF:EA:BE:70
Authority key identifier: D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
Certificate issuer: /CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
Certificate serial: 0198D65FF5B28073DEFBC1A050BBF121D47C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:09 +0000
Manifest this update: Sat 23 Aug 2025 10:01:09 +0000
Manifest next update: Sun 24 Aug 2025 10:01:09 +0000
Files and hashes: 1: 03o_Gc-XFmpEQiB-Em8qA7bL65g.crl (hash: IZQWtFn/MJksylZ9dLzhWoY4Sz9OWPsmiWkyx2HnA94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f5:b2:80:73:de:fb:c1:a0:50:bb:f1:21:d4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
Validity
Not Before: Aug 23 10:01:09 2025 GMT
Not After : Aug 24 10:01:09 2025 GMT
Subject: CN=08874e842755ac3588f8a00fabe59fbbefeabe70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:6f:09:9e:c3:a2:d8:9b:da:03:fe:ea:91:
61:e7:09:4f:3e:e5:0a:96:a6:fb:85:14:b2:cf:f1:
5e:bd:96:2f:37:7a:78:0e:40:0a:a2:2a:c7:35:ef:
5b:4a:00:c4:3a:3f:27:71:03:55:1a:c5:62:80:ba:
fa:21:99:73:98:3b:59:47:a5:17:d7:85:20:b3:42:
da:5c:52:91:40:66:ba:c6:38:d7:37:dd:f3:e7:d1:
a1:ee:52:33:74:f2:27:3d:69:c0:59:90:63:a9:d0:
fa:da:9c:31:88:6a:37:28:db:ba:95:47:ff:b6:81:
e0:5c:33:e0:2a:a9:7d:80:97:78:b1:03:55:a7:13:
35:80:27:d1:9a:81:c3:7a:61:26:f2:a4:fc:7d:a3:
67:6b:37:b1:ab:fd:10:de:b1:ac:83:dc:c1:4b:c1:
1a:e4:ff:03:b5:e6:b9:96:c5:71:62:7f:83:95:57:
48:fe:6a:dd:ed:bd:86:de:f8:8b:27:a1:c0:ab:76:
eb:ea:97:53:ac:2e:6a:0e:00:2e:4d:f1:52:04:12:
7f:eb:d4:d5:13:70:e2:ff:36:bb:a1:a6:67:0d:e9:
9a:9e:e6:ea:27:ea:79:de:69:eb:34:12:fd:ba:58:
80:e4:4a:2e:59:70:69:0f:ef:6f:91:b7:55:2c:0f:
12:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:87:4E:84:27:55:AC:35:88:F8:A0:0F:AB:E5:9F:BB:EF:EA:BE:70
X509v3 Authority Key Identifier:
keyid:D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f6:74:61:0e:da:1f:c5:b7:7f:f6:b6:99:86:a5:83:b2:03:
ab:01:c6:08:04:f2:48:74:01:cb:a5:84:04:53:b8:2f:7b:44:
6a:17:d0:a4:1f:ae:01:37:5d:68:20:61:ec:0d:54:bf:b6:77:
54:5b:28:41:d7:01:0c:4e:fe:b3:87:9a:65:cd:9c:38:bd:4a:
e6:c1:c6:94:03:18:6b:e2:ba:d9:c3:38:cd:89:08:90:20:72:
9d:6e:09:49:f0:a9:8d:90:d6:0d:cb:26:9f:c1:a3:86:b9:2a:
5a:06:3b:4d:91:ab:15:41:a2:d2:a2:40:48:87:f8:ff:a7:5b:
dc:7c:a7:f5:a6:fb:51:ea:83:2d:7e:ce:aa:05:65:69:89:64:
bf:5f:88:d2:30:e4:0d:96:18:3c:88:46:53:c5:78:dc:32:77:
83:f0:c7:2a:86:f3:7e:8b:b0:30:77:21:6d:b0:ea:03:23:da:
3d:1d:4b:7b:05:fc:19:70:c0:e2:53:0c:d4:eb:38:26:8e:33:
37:9e:fc:ed:b6:18:6a:72:d0:4d:b0:d7:aa:5b:53:c3:ce:43:
a0:23:e8:d8:e1:df:84:a0:75:07:26:6c:f2:dc:9d:f3:39:74:
ed:61:fa:82:12:db:ca:de:da:89:15:b3:03:b1:47:d3:47:68:
2a:b0:37:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX/WygHPe+8GgULvxIdR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzN2EzZjE5Y2Y5NzE2NmE0NDQyMjA3ZTEyNmYyYTAzYjZj
YmViOTgwHhcNMjUwODIzMTAwMTA5WhcNMjUwODI0MTAwMTA5WjAzMTEwLwYDVQQD
EygwODg3NGU4NDI3NTVhYzM1ODhmOGEwMGZhYmU1OWZiYmVmZWFiZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngxvCZ7Dotib2gP+6pFh5wlPPuUK
lqb7hRSyz/FevZYvN3p4DkAKoirHNe9bSgDEOj8ncQNVGsVigLr6IZlzmDtZR6UX
14Ugs0LaXFKRQGa6xjjXN93z59Gh7lIzdPInPWnAWZBjqdD62pwxiGo3KNu6lUf/
toHgXDPgKql9gJd4sQNVpxM1gCfRmoHDemEm8qT8faNnazexq/0Q3rGsg9zBS8Ea
5P8Dtea5lsVxYn+DlVdI/mrd7b2G3viLJ6HAq3br6pdTrC5qDgAuTfFSBBJ/69TV
E3Di/za7oaZnDemanubqJ+p53mnrNBL9uliA5EouWXBpD+9vkbdVLA8SiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiHToQnVaw1iPigD6vln7vv6r5wMB8GA1UdIwQY
MBaAFNN6PxnPlxZqREIgfhJvKgO2y+uYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDNvX0djLVhGbXBFUWlCLUVtOHFBN2JMNjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xMjE1MzctNGMyZi00MjQ4LWFkMzMt
MjZhNzc2NjBjYzI3LzEvMDNvX0djLVhGbXBFUWlCLUVtOHFBN2JMNjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xMjE1MzctNGMyZi00MjQ4LWFkMzMtMjZhNzc2NjBjYzI3
LzEvMDNvX0djLVhGbXBFUWlCLUVtOHFBN2JMNjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/Z0YQ7a
H8W3f/a2mYalg7IDqwHGCATySHQBy6WEBFO4L3tEahfQpB+uATddaCBh7A1Uv7Z3
VFsoQdcBDE7+s4eaZc2cOL1K5sHGlAMYa+K62cM4zYkIkCBynW4JSfCpjZDWDcsm
n8GjhrkqWgY7TZGrFUGi0qJASIf4/6db3Hyn9ab7UeqDLX7OqgVlaYlkv1+I0jDk
DZYYPIhGU8V43DJ3g/DHKobzfouwMHchbbDqAyPaPR1LewX8GXDA4lMM1Os4Jo4z
N5787bYYanLQTbDXqltTw85DoCPo2OHfhKB1ByZs8tyd8zl07WH6ghLbyt7aiRWz
A7FH00doKrA3LA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:07:20 2025 by rpki-client