Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier: I3i/Vj5GEENmvPtNIrsWDBNV/EioGLy6F68C+HLu77s=
Subject key identifier: 42:B5:4A:C5:61:A0:96:A1:EA:BC:2C:96:30:A3:C5:4C:31:C1:01:DF
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial: 0198D66034BC8DB7F7071A5F715E42367776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number: 05E4
Signing time: Sat 23 Aug 2025 10:01:25 +0000
Manifest this update: Sat 23 Aug 2025 10:01:25 +0000
Manifest next update: Sun 24 Aug 2025 10:01:25 +0000
Files and hashes: 1: 5Glc2B08f5NNNCUv9fqw3ZiV604.roa (hash: qKV0O/uQL4URhMfYX9S0ZOufXlqcIe3xRJXIrY3RJwE=)
2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: 7QFLls2XmR8T9fWB3yBbW789LLerNIQ6OmrY7fIcsGM=)
3: wzyOntPyHe2_vob8ftvNa_NHz8Q.roa (hash: jsopFRalC2C1iJbieVLkelaTdE/c46JWYuJBBa2M4iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:34:bc:8d:b7:f7:07:1a:5f:71:5e:42:36:77:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Validity
Not Before: Aug 23 10:01:25 2025 GMT
Not After : Aug 24 10:01:25 2025 GMT
Subject: CN=42b54ac561a096a1eabc2c9630a3c54c31c101df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:a9:76:9f:6d:84:19:47:d7:16:6f:23:c5:
72:71:0e:43:36:ac:52:c3:9e:8a:0a:be:f8:18:88:
8e:d4:aa:37:6f:36:99:02:5a:e7:8c:50:9e:a4:b6:
2e:41:1c:2d:4e:85:44:59:32:ce:be:71:b2:7f:14:
1f:45:05:d1:da:f1:1f:a3:e8:c3:d6:a8:fb:a7:ea:
72:03:b6:81:72:b3:31:6b:51:04:f1:4c:35:6e:5c:
4d:28:72:39:59:5c:89:3c:60:b2:7e:58:2f:1d:40:
28:81:20:01:8d:b4:fc:ec:f0:af:13:72:c2:f5:b4:
e4:7e:12:f3:c1:24:16:05:5d:93:15:8c:42:b3:43:
e0:71:0e:fa:44:8d:69:24:a6:2d:db:3a:ef:18:be:
43:cd:2e:cc:a3:81:11:45:b4:92:4b:d4:6a:1b:65:
91:2b:58:c1:3c:a7:5e:8d:47:f4:29:60:71:0b:7d:
83:52:e3:66:b3:44:a6:aa:34:b5:fd:60:1e:14:71:
b7:d7:69:04:46:bd:e3:fb:aa:7a:7c:d0:46:b0:2b:
eb:cf:77:05:23:99:bb:ea:10:c8:0b:89:64:34:d8:
e2:b3:5f:6d:e2:12:8e:a7:72:70:22:1e:e4:b0:03:
61:2e:1f:05:b2:33:ed:8f:3e:4e:e2:40:b1:c0:62:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B5:4A:C5:61:A0:96:A1:EA:BC:2C:96:30:A3:C5:4C:31:C1:01:DF
X509v3 Authority Key Identifier:
keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c4:65:d7:ad:15:7b:cd:bd:41:fa:46:a3:c8:a6:9a:08:f9:
ab:5d:13:dc:7a:3d:3b:5f:d5:d6:c7:ac:3d:3e:ce:73:c6:d9:
21:86:70:e8:40:4d:bc:53:12:b3:fa:9a:b6:4a:02:c0:0f:db:
89:6d:cf:17:f7:2b:70:00:e6:dc:ee:d7:3f:b2:fb:ac:b6:17:
8d:f7:57:56:cf:e6:43:4f:54:ab:e7:06:f8:3e:4c:4c:ec:d1:
09:c9:5d:03:c9:1c:cf:dd:c4:82:45:56:9a:60:ad:42:33:03:
44:d8:f4:2a:a9:b4:e4:54:35:ce:71:1b:af:d8:d1:c3:ee:c2:
24:50:92:8f:31:75:4b:35:63:d2:e5:86:45:c8:c2:38:4e:5e:
dc:2b:72:58:b9:4a:32:05:f3:b0:ff:dd:6f:38:6b:0e:15:f1:
bf:db:0c:cf:b6:8f:59:a7:f7:8e:16:ad:10:7f:7a:ab:98:61:
2d:0d:c1:a4:dd:0e:fe:cb:c9:9b:f0:0d:19:d1:e3:fb:3c:c5:
cc:4a:ea:5d:83:1a:6e:89:c5:bd:c4:20:c9:b0:26:96:d6:52:
b4:f3:3d:b3:50:e7:df:64:cf:6e:d1:46:80:a0:a3:2e:8a:33:
54:e5:a1:9d:e7:bc:4e:0a:b2:d1:16:9b:19:42:86:07:db:31:
e9:0e:69:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYDS8jbf3BxpfcV5CNnd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZWRjM2E2M2RmMTdiYjRiZjM0NTYwOTU3OTY3ZTU5YThi
M2UzYTEwHhcNMjUwODIzMTAwMTI1WhcNMjUwODI0MTAwMTI1WjAzMTEwLwYDVQQD
Eyg0MmI1NGFjNTYxYTA5NmExZWFiYzJjOTYzMGEzYzU0YzMxYzEwMWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYypdp9thBlH1xZvI8VycQ5DNqxS
w56KCr74GIiO1Ko3bzaZAlrnjFCepLYuQRwtToVEWTLOvnGyfxQfRQXR2vEfo+jD
1qj7p+pyA7aBcrMxa1EE8Uw1blxNKHI5WVyJPGCyflgvHUAogSABjbT87PCvE3LC
9bTkfhLzwSQWBV2TFYxCs0PgcQ76RI1pJKYt2zrvGL5DzS7Mo4ERRbSSS9RqG2WR
K1jBPKdejUf0KWBxC32DUuNms0SmqjS1/WAeFHG312kERr3j+6p6fNBGsCvrz3cF
I5m76hDIC4lkNNjis19t4hKOp3JwIh7ksANhLh8FsjPtjz5O4kCxwGKH8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEK1SsVhoJah6rwsljCjxUwxwQHfMB8GA1UdIwQY
MBaAFK/tw6Y98Xu0vzRWCVeWflmos+OhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci0zRHBqM3hlN1NfTkZZSlY1Wi1XYWl6NDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84MjRkOGQtYjA0Ni00NmY2LTg2Yjgt
OWI4YWNlNDI4MWYzLzEvci0zRHBqM3hlN1NfTkZZSlY1Wi1XYWl6NDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi84MjRkOGQtYjA0Ni00NmY2LTg2YjgtOWI4YWNlNDI4MWYz
LzEvci0zRHBqM3hlN1NfTkZZSlY1Wi1XYWl6NDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMRl160V
e829QfpGo8immgj5q10T3Ho9O1/V1sesPT7Oc8bZIYZw6EBNvFMSs/qatkoCwA/b
iW3PF/crcADm3O7XP7L7rLYXjfdXVs/mQ09Uq+cG+D5MTOzRCcldA8kcz93EgkVW
mmCtQjMDRNj0Kqm05FQ1znEbr9jRw+7CJFCSjzF1SzVj0uWGRcjCOE5e3CtyWLlK
MgXzsP/dbzhrDhXxv9sMz7aPWaf3jhatEH96q5hhLQ3BpN0O/svJm/ANGdHj+zzF
zErqXYMabonFvcQgybAmltZStPM9s1Dn32TPbtFGgKCjLoozVOWhnee8Tgqy0Rab
GUKGB9sx6Q5pbw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:26 2025 by rpki-client