Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json)
Hash identifier: B2zFwZJHFNKWrkdHzeh+KTx70bt/bhB1Nb0SK146l6Y=
Subject key identifier: 34:BD:18:2C:FC:C9:20:9F:09:0B:55:42:22:9F:21:F6:73:D4:A0:20
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 0198D5F11BF2A160D54A529A0D21D5267C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
Manifest number: 0970
Signing time: Sat 23 Aug 2025 08:00:04 +0000
Manifest this update: Sat 23 Aug 2025 08:00:04 +0000
Manifest next update: Sun 24 Aug 2025 08:00:04 +0000
Files and hashes: 1: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: ZOQZ8+rc1UPLDyGPY2tB6oVGQoOaL/1Ug2EIX/1jNKg=)
2: 3jwAJkscmhb8NSw4un_w0ZUqE_E.roa (hash: /Q2oG/fmxx/4QlsXXEqOyxHV9Ye6s1RkScscquc109A=)
3: 4mOa1eiOJdcewQ4JsIW-qskCauo.roa (hash: iU5a4TzwFm2kJsvICm/D9T1ZRQoz++Cq67dw1/HeL2g=)
4: CXGUOccTDu6x1YyIQfa-qjSpPdk.roa (hash: r4qpBtId2VEmuyzWlIPXdikWdV98Yneiil1e7VOsia4=)
5: IlOsEMD7ILB9j5FhhZ10NN6XXx0.roa (hash: gwOuiCu86d+6YjbDxDzDd3u72bl4nQy8FzU+NPDlo3k=)
6: cMeqdhzIVxayTI5Te-oZwPQzjz0.roa (hash: opO/yGSPCMGlHiRXXAkyr0DveRWYRoFkmjqGZrYYDFc=)
7: dsfkSXYJLfZWJjDQMc0Y0owm7FA.roa (hash: W0p5k/KWht0yDd7EzO060gDAd+rVO0Q+Y0m/UDAfM10=)
8: z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa (hash: hGK3SDsyu3nnm6fMnZyOrn3oCumiT/HHk1hSsPcxxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1b:f2:a1:60:d5:4a:52:9a:0d:21:d5:26:7c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Aug 23 08:00:04 2025 GMT
Not After : Aug 24 08:00:04 2025 GMT
Subject: CN=34bd182cfcc9209f090b5542229f21f673d4a020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:26:f7:b7:b0:08:95:84:20:d5:c0:31:b4:
e3:8a:41:0f:8a:dc:3d:e4:de:b0:34:12:fd:d9:39:
6e:e2:d0:4d:47:d4:84:6d:ba:da:14:18:77:50:24:
89:d7:b6:66:c4:77:2d:2a:38:42:4c:f5:e2:be:d7:
6f:35:29:69:f0:4a:7f:65:34:2d:e7:ae:18:30:dc:
a3:67:fd:c3:5d:06:44:26:0a:a4:c6:51:1b:55:9e:
27:46:e8:28:cb:5a:e9:60:f6:9c:06:94:eb:29:b5:
3b:11:2f:9e:e7:d1:02:16:7b:37:84:74:ff:76:2f:
a8:ff:99:e3:e1:fd:54:b1:4c:51:c9:98:d5:e1:d9:
74:11:27:cd:37:87:10:1b:a0:d1:2f:93:7b:73:7e:
09:fa:40:fe:c0:14:53:51:27:33:55:68:63:ef:1d:
b1:85:73:e2:11:2c:1e:2f:cf:a6:52:d8:d8:24:d7:
3d:04:91:94:0b:30:31:33:b7:1e:d2:ea:fc:04:6c:
cf:f2:d6:71:c0:be:08:8d:cd:ef:29:96:7e:ec:03:
b8:11:34:f5:48:4b:1b:bf:ca:bd:7c:85:06:02:29:
96:a1:ab:84:82:e3:5a:ff:04:0e:1c:1f:a8:10:e1:
36:5c:44:7f:d6:30:93:d0:b3:b3:ed:a0:78:a0:2e:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BD:18:2C:FC:C9:20:9F:09:0B:55:42:22:9F:21:F6:73:D4:A0:20
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:33:5a:52:45:50:ad:35:f9:3d:34:bf:08:c1:d8:b3:b6:13:
0a:9f:b3:4e:d9:f2:53:e8:64:a9:46:bb:6e:0d:7e:fc:66:bc:
bd:bd:3b:18:32:56:85:cf:ea:aa:02:2d:4f:9b:62:07:6f:1f:
2c:18:2a:1f:0f:d9:cf:2f:84:7e:00:e8:76:8a:19:81:f1:cb:
f3:32:c0:d0:24:30:1a:e0:36:a2:24:0d:d8:9f:03:8c:bc:32:
7f:8b:2f:92:09:e7:d6:e1:d2:5d:b7:ab:01:a5:57:22:ec:18:
d1:4f:4f:0f:bb:04:d3:41:d5:7f:aa:ab:bd:eb:99:26:2f:d7:
9c:ab:bf:fa:36:e8:67:72:cf:77:be:31:49:22:b8:04:5b:0b:
a1:09:ef:0c:ec:91:79:f0:b7:4a:60:79:42:b4:02:f6:05:f0:
a1:52:ac:09:89:2b:4e:c1:09:71:b5:f8:a5:8a:98:a4:85:31:
a8:81:6e:3a:5b:a3:6e:21:b9:0e:b2:d6:8d:9c:f7:de:2e:0b:
9b:b2:d4:05:c2:fe:95:f5:ad:04:ec:7b:4a:d9:03:09:1b:bf:
23:1c:84:14:b3:5c:c4:27:56:88:e5:10:c6:7d:c9:55:3a:c5:
c9:c8:05:86:fc:93:96:5e:94:3b:b0:5b:d7:00:93:be:29:8d:
2a:44:7c:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8RvyoWDVSlKaDSHVJnyJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMWRhZWNkMzBhZWI3NDY1MmJiZGRhNWRhZDk2NzZjZTQ4
OGFhNDkwHhcNMjUwODIzMDgwMDA0WhcNMjUwODI0MDgwMDA0WjAzMTEwLwYDVQQD
EygzNGJkMTgyY2ZjYzkyMDlmMDkwYjU1NDIyMjlmMjFmNjczZDRhMDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIgm97ewCJWEINXAMbTjikEPitw9
5N6wNBL92Tlu4tBNR9SEbbraFBh3UCSJ17ZmxHctKjhCTPXivtdvNSlp8Ep/ZTQt
564YMNyjZ/3DXQZEJgqkxlEbVZ4nRugoy1rpYPacBpTrKbU7ES+e59ECFns3hHT/
di+o/5nj4f1UsUxRyZjV4dl0ESfNN4cQG6DRL5N7c34J+kD+wBRTUSczVWhj7x2x
hXPiESweL8+mUtjYJNc9BJGUCzAxM7ce0ur8BGzP8tZxwL4Ijc3vKZZ+7AO4ETT1
SEsbv8q9fIUGAimWoauEguNa/wQOHB+oEOE2XER/1jCT0LOz7aB4oC7XhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDS9GCz8ySCfCQtVQiKfIfZz1KAgMB8GA1UdIwQY
MBaAFN0drs0wrrdGUrvdpdrZZ2zkiKpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct
MDYwYWMwODkwOTY2LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTctMDYwYWMwODkwOTY2
LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzNaUkVQ
rTX5PTS/CMHYs7YTCp+zTtnyU+hkqUa7bg1+/Ga8vb07GDJWhc/qqgItT5tiB28f
LBgqHw/Zzy+EfgDodooZgfHL8zLA0CQwGuA2oiQN2J8DjLwyf4svkgnn1uHSXber
AaVXIuwY0U9PD7sE00HVf6qrveuZJi/XnKu/+jboZ3LPd74xSSK4BFsLoQnvDOyR
efC3SmB5QrQC9gXwoVKsCYkrTsEJcbX4pYqYpIUxqIFuOlujbiG5DrLWjZz33i4L
m7LUBcL+lfWtBOx7StkDCRu/IxyEFLNcxCdWiOUQxn3JVTrFycgFhvyTll6UO7Bb
1wCTvimNKkR8rQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:46:43 2025 by rpki-client