Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: wEXFZL8iQRaHoaMfhXGuBWqI7Wh2d0U8wrmBg94AT+Q=
Subject key identifier: 3B:B9:66:25:90:03:69:EA:36:20:13:60:6F:BD:DC:6C:3F:55:A5:9E
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 0198D5F18572A7C1916C369A03F3E8D91501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:31 +0000
Manifest this update: Sat 23 Aug 2025 08:00:31 +0000
Manifest next update: Sun 24 Aug 2025 08:00:31 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: OoafITFKrS33V7+c8O7s9Zn0o6mb00ii58XT2nwg2wA=)
2: TWCQBg2-t-jrjyzWp02-IpHykDE.roa (hash: OzxPmG/iv0ZxRaIlS2kwO8RCX9n3cTZki/wmozkxxLc=)
3: w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa (hash: 5XUytb4Y6hE0gSnX9zthe9SyxMsKZ/nIOoxPG8EDHcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:85:72:a7:c1:91:6c:36:9a:03:f3:e8:d9:15:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Aug 23 08:00:31 2025 GMT
Not After : Aug 24 08:00:31 2025 GMT
Subject: CN=3bb96625900369ea362013606fbddc6c3f55a59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:9d:5a:15:97:8f:e5:bc:e3:93:16:50:27:
bf:28:02:0d:f7:4d:1c:ef:d5:90:6c:1f:e7:6a:52:
66:53:ed:99:01:0f:56:7c:61:c8:58:dc:bd:f2:76:
50:29:02:f7:9d:40:97:6e:57:8b:13:4d:e0:21:90:
a2:8f:03:ad:fd:d2:05:59:15:34:99:fa:af:00:a5:
a7:be:e3:4c:b8:35:c6:57:f1:59:fe:d9:c2:5e:45:
a0:8d:bc:e1:e9:43:90:c0:23:c1:14:0a:15:50:00:
eb:30:6d:f4:7b:06:82:15:19:83:95:33:7f:1a:51:
17:3a:28:e5:5e:62:83:8c:d1:2b:4a:5e:58:87:e7:
cf:f1:0d:7f:33:5e:e9:cd:80:17:40:85:4f:28:87:
3e:61:ad:be:74:67:b1:a4:af:55:8c:f9:86:c2:79:
30:f6:bc:a0:07:2e:5e:72:fc:60:f0:03:3b:76:f5:
f9:1b:66:4e:d9:9c:2f:25:d7:5c:f2:72:58:ad:34:
c0:5d:80:c7:11:96:fe:35:56:8b:be:d2:8f:c3:33:
a0:f5:f7:d1:94:2d:fa:19:55:8e:12:aa:52:b4:14:
50:76:9f:90:4c:38:14:d9:d8:fa:e7:6a:3f:65:78:
4c:da:ed:99:24:d8:3e:43:3b:8d:e2:6f:f0:b4:91:
a6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B9:66:25:90:03:69:EA:36:20:13:60:6F:BD:DC:6C:3F:55:A5:9E
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6c:86:99:67:f8:1e:1e:66:f7:f0:72:d4:b5:f1:66:69:99:
a3:54:03:e1:b1:ca:ae:e9:91:55:81:50:d6:4b:90:56:79:5c:
95:b2:39:1c:15:51:f9:ad:1d:63:cd:bd:94:7b:a5:67:88:8a:
03:ec:52:b4:fc:44:0f:b0:8e:2c:81:2c:ab:92:73:fd:fa:d0:
a0:35:48:0e:1f:3e:95:e4:02:d6:cf:ae:0a:a8:c5:09:80:ae:
ea:09:86:d3:74:7f:87:e1:9f:40:b4:9c:dc:0a:27:1d:4b:c4:
d2:5b:21:4d:b0:2e:9e:15:8d:0d:d8:9f:4d:0a:13:af:ef:15:
f3:16:d1:e9:61:7e:84:60:25:01:d1:06:40:c2:d1:4d:f2:04:
3e:d3:ae:1c:be:00:25:ce:2d:c6:ae:65:0f:50:64:17:c8:f1:
01:e5:b0:f7:83:81:2b:14:d3:c9:d6:e7:20:2f:2a:e8:e1:a3:
55:80:23:59:59:71:7f:cd:56:f1:f5:61:ee:f5:70:5c:d7:aa:
4d:0e:33:24:75:b4:a7:32:21:b1:2a:eb:ee:e3:97:a2:97:ca:
4e:3e:09:dd:ba:a8:85:e8:ad:bb:9d:d1:49:f8:85:4b:a8:b8:
22:e5:98:b0:4e:62:8c:79:a3:57:23:bf:31:2a:85:bb:46:bd:
35:b3:fa:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8YVyp8GRbDaaA/Po2RUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWU0YjA0NzFhNjE4NzJjNDA0MTQyZTFmOTBmNTA3NGYw
ZDZmMTUwHhcNMjUwODIzMDgwMDMxWhcNMjUwODI0MDgwMDMxWjAzMTEwLwYDVQQD
EygzYmI5NjYyNTkwMDM2OWVhMzYyMDEzNjA2ZmJkZGM2YzNmNTVhNTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJydWhWXj+W845MWUCe/KAIN900c
79WQbB/nalJmU+2ZAQ9WfGHIWNy98nZQKQL3nUCXbleLE03gIZCijwOt/dIFWRU0
mfqvAKWnvuNMuDXGV/FZ/tnCXkWgjbzh6UOQwCPBFAoVUADrMG30ewaCFRmDlTN/
GlEXOijlXmKDjNErSl5Yh+fP8Q1/M17pzYAXQIVPKIc+Ya2+dGexpK9VjPmGwnkw
9rygBy5ecvxg8AM7dvX5G2ZO2ZwvJddc8nJYrTTAXYDHEZb+NVaLvtKPwzOg9ffR
lC36GVWOEqpStBRQdp+QTDgU2dj652o/ZXhM2u2ZJNg+QzuN4m/wtJGmBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDu5ZiWQA2nqNiATYG+93Gw/VaWeMB8GA1UdIwQY
MBaAFNyuSwRxphhyxAQULh+Q9QdPDW8VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi82N2Y5YTctYTZlOC00MjZlLWJhYzQt
NGI2OGIxNWQzMDFhLzEvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi82N2Y5YTctYTZlOC00MjZlLWJhYzQtNGI2OGIxNWQzMDFh
LzEvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWyGmWf4
Hh5m9/By1LXxZmmZo1QD4bHKrumRVYFQ1kuQVnlclbI5HBVR+a0dY829lHulZ4iK
A+xStPxED7COLIEsq5Jz/frQoDVIDh8+leQC1s+uCqjFCYCu6gmG03R/h+GfQLSc
3AonHUvE0lshTbAunhWNDdifTQoTr+8V8xbR6WF+hGAlAdEGQMLRTfIEPtOuHL4A
Jc4txq5lD1BkF8jxAeWw94OBKxTTydbnIC8q6OGjVYAjWVlxf81W8fVh7vVwXNeq
TQ4zJHW0pzIhsSrr7uOXopfKTj4J3bqoheitu53RSfiFS6i4IuWYsE5ijHmjVyO/
MSqFu0a9NbP6hg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:03:08 2025 by rpki-client