Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
File: A3hj3DwlnmCyyYaALdYCERXovx8.mft (raw, json)
Hash identifier: s1IpsMNUkiEMormQ1YkNjzAVdqOzDATH68ZFc1btdRI=
Subject key identifier: 8F:9A:20:9B:3A:E2:A4:6F:A2:69:C4:3A:8F:25:D6:E9:95:03:D5:83
Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
Certificate issuer: /CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Certificate serial: 0198D5F17551DE193A7A1B391CB2E4FAE4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 08:00:27 +0000
Manifest this update: Sat 23 Aug 2025 08:00:27 +0000
Manifest next update: Sun 24 Aug 2025 08:00:27 +0000
Files and hashes: 1: 0VtcIuxUGMiSf51ESt2U0ZJJN3I.roa (hash: pnzB/pCC1PdPD6bGcX+A1+WWtoVI4A2/GkUREyGlYVs=)
2: A3hj3DwlnmCyyYaALdYCERXovx8.crl (hash: dEE9AdoYT7FC0P9GMkTW84WF6i9kH9LJkWIYDf3GjRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:75:51:de:19:3a:7a:1b:39:1c:b2:e4:fa:e4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Validity
Not Before: Aug 23 08:00:27 2025 GMT
Not After : Aug 24 08:00:27 2025 GMT
Subject: CN=8f9a209b3ae2a46fa269c43a8f25d6e99503d583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:9c:8a:a7:ca:3f:af:f4:76:de:93:65:97:
b7:75:f3:d5:66:a0:5d:93:ac:c6:8a:10:ed:f0:9c:
0b:31:37:7b:5d:cb:f8:c6:a5:dc:a2:0d:72:f2:1d:
a6:af:0c:f1:d3:68:c7:eb:fc:29:3f:27:cd:a1:52:
48:81:6b:41:de:d7:da:4e:ad:b2:08:8c:9c:8b:c6:
76:ae:19:f3:b9:d5:fa:d5:04:ec:f0:bc:0b:d6:fd:
a5:21:aa:18:07:a4:32:e1:c3:a7:56:f9:55:16:c2:
65:4e:68:23:75:dd:f9:f1:eb:2a:98:d0:37:d2:df:
ff:ca:23:63:09:15:2c:03:0d:53:87:2f:3c:43:b3:
e5:43:cb:70:54:fb:26:b2:ef:91:b3:ce:88:59:1c:
27:da:06:ea:e4:03:9a:0a:98:8e:22:e9:99:f3:94:
c3:cb:fa:c5:7b:9d:8e:b0:ad:6e:1f:78:d7:80:40:
55:c2:bb:80:00:56:c8:46:d8:71:19:3a:22:58:f6:
b4:5b:d7:a4:8b:bf:7a:75:8a:79:3f:38:77:67:ef:
f8:20:c5:d1:cb:6f:1c:bb:ca:6d:36:1b:98:58:02:
a2:af:7a:4c:a3:d3:b6:80:60:20:4f:c3:bb:9e:af:
bb:c2:c2:ad:3c:03:54:42:2c:0c:04:17:92:59:7d:
eb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9A:20:9B:3A:E2:A4:6F:A2:69:C4:3A:8F:25:D6:E9:95:03:D5:83
X509v3 Authority Key Identifier:
keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9c:2a:53:da:40:c4:98:5f:78:97:88:b2:02:96:aa:5a:e1:
f4:8a:32:7f:73:d6:7f:ca:09:c5:4e:89:ea:a0:35:e6:f2:b1:
22:fb:13:58:da:f8:5d:d8:db:77:6b:d2:56:96:c7:f4:bf:74:
19:40:03:62:91:4b:f8:93:15:50:39:31:67:cd:59:67:d4:0b:
ba:6a:79:21:fe:11:5f:ce:e2:47:68:9d:04:b4:06:7d:2b:ba:
bd:b8:65:de:bc:81:7d:45:05:0c:09:ec:f9:44:bc:70:5b:52:
5d:e6:8e:e1:3b:5c:21:17:bd:5d:b1:53:56:7b:90:46:f5:62:
34:89:d5:d1:59:0a:6a:09:c0:2c:5e:50:b0:ce:e0:0c:47:a8:
af:b3:fd:f6:d9:73:a6:9a:a5:33:43:36:11:56:50:a3:b0:39:
95:1b:cf:67:11:04:eb:db:98:d1:d0:44:42:75:6d:b7:fa:dd:
0b:46:10:86:2f:a6:3b:ac:8f:85:9a:38:ae:06:20:2c:52:ca:
df:88:da:97:02:d9:19:4f:61:43:ee:0d:74:0a:1c:a3:60:d3:
f8:d4:fd:07:31:a3:f8:ea:ae:28:fa:1d:d7:68:45:9b:f6:a6:
e5:b7:61:3c:de:77:17:f1:9f:db:a6:4f:89:b9:49:eb:f3:cd:
5d:51:36:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8XVR3hk6ehs5HLLk+uT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNzg2M2RjM2MyNTllNjBiMmM5ODY4MDJkZDYwMjExMTVl
OGJmMWYwHhcNMjUwODIzMDgwMDI3WhcNMjUwODI0MDgwMDI3WjAzMTEwLwYDVQQD
Eyg4ZjlhMjA5YjNhZTJhNDZmYTI2OWM0M2E4ZjI1ZDZlOTk1MDNkNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgCciqfKP6/0dt6TZZe3dfPVZqBd
k6zGihDt8JwLMTd7Xcv4xqXcog1y8h2mrwzx02jH6/wpPyfNoVJIgWtB3tfaTq2y
CIyci8Z2rhnzudX61QTs8LwL1v2lIaoYB6Qy4cOnVvlVFsJlTmgjdd358esqmNA3
0t//yiNjCRUsAw1Thy88Q7PlQ8twVPsmsu+Rs86IWRwn2gbq5AOaCpiOIumZ85TD
y/rFe52OsK1uH3jXgEBVwruAAFbIRthxGToiWPa0W9eki796dYp5Pzh3Z+/4IMXR
y28cu8ptNhuYWAKir3pMo9O2gGAgT8O7nq+7wsKtPANUQiwMBBeSWX3rfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+aIJs64qRvomnEOo8l1umVA9WDMB8GA1UdIwQY
MBaAFAN4Y9w8JZ5gssmGgC3WAhEV6L8fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTNoajNEd2xubUN5eVlhQUxkWUNFUlhvdng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kNzgyOTMtNTBjNS00NzFlLWI5MWIt
ZDlmMzAxODY4ZWYzLzEvQTNoajNEd2xubUN5eVlhQUxkWUNFUlhvdng4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kNzgyOTMtNTBjNS00NzFlLWI5MWItZDlmMzAxODY4ZWYz
LzEvQTNoajNEd2xubUN5eVlhQUxkWUNFUlhvdng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5wqU9pA
xJhfeJeIsgKWqlrh9Ioyf3PWf8oJxU6J6qA15vKxIvsTWNr4Xdjbd2vSVpbH9L90
GUADYpFL+JMVUDkxZ81ZZ9QLump5If4RX87iR2idBLQGfSu6vbhl3ryBfUUFDAns
+US8cFtSXeaO4TtcIRe9XbFTVnuQRvViNInV0VkKagnALF5QsM7gDEeor7P99tlz
ppqlM0M2EVZQo7A5lRvPZxEE69uY0dBEQnVtt/rdC0YQhi+mO6yPhZo4rgYgLFLK
34jalwLZGU9hQ+4NdAoco2DT+NT9BzGj+OquKPod12hFm/am5bdhPN53F/Gf26ZP
iblJ6/PNXVE29g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:20 2025 by rpki-client