Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: i7o9+gNQCtEiQwJLax+Za6jC8PmOPck1vsAWHOIuzm8=
Subject key identifier: 59:C2:66:51:78:13:29:3C:4B:F6:2D:4F:E1:EF:37:D3:12:03:45:6C
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 0198D6982D7EA77F12CF805E4CEF2C3FB0E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 152B
Signing time: Sat 23 Aug 2025 11:02:33 +0000
Manifest this update: Sat 23 Aug 2025 11:02:33 +0000
Manifest next update: Sun 24 Aug 2025 11:02:33 +0000
Files and hashes: 1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: PYrHcA0gkLM9tQRsFz8Zw/H1sZeQzSB8xAVveMQDjwo=)
2: EoONLCC0uBU4UnkK6hGEDKnLwOs.roa (hash: BvTXgf3VZmemwuiX/6PvTlFRYmGF/FW7bb7KGQyaCiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:2d:7e:a7:7f:12:cf:80:5e:4c:ef:2c:3f:b0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Aug 23 11:02:33 2025 GMT
Not After : Aug 24 11:02:33 2025 GMT
Subject: CN=59c266517813293c4bf62d4fe1ef37d31203456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:c0:92:bd:58:3a:53:71:12:92:20:4d:e5:
22:9f:6f:65:8b:4f:2f:58:3f:3f:d4:17:b1:64:30:
ff:c5:54:2f:bc:51:9c:b4:9f:cc:e2:03:3c:3b:e6:
e4:36:23:b1:7c:0c:63:e1:75:24:78:bb:42:c3:47:
e4:1e:12:1d:df:10:e3:af:56:b7:7a:e9:0b:34:97:
f9:d5:51:7c:82:00:80:1b:ae:5a:47:10:d8:52:02:
20:23:08:7c:18:b3:60:93:a9:73:7c:e4:ab:48:4c:
34:98:1e:63:bc:2b:b4:8f:90:e5:fd:25:9d:7c:51:
d0:c7:e6:01:90:66:1b:fa:b8:92:c6:aa:e3:98:50:
f4:b3:ff:74:7b:a9:8c:a6:c3:f4:67:6c:20:24:b6:
27:43:5f:54:d9:99:f2:35:20:9e:81:12:96:77:4e:
be:23:a3:31:96:76:41:d5:ac:3f:8b:00:89:cb:e2:
23:6e:1a:bf:c2:85:2f:10:49:06:b5:bb:a2:fb:3a:
12:c0:77:a3:3f:3a:16:e6:69:68:0d:a7:05:10:da:
b1:c1:d1:55:f8:7f:40:9e:35:d0:bb:60:ab:7d:15:
60:75:22:7b:0c:59:85:c2:98:60:1c:fe:67:69:1f:
45:db:3f:aa:88:d7:08:c5:c4:bb:10:75:38:29:18:
9a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C2:66:51:78:13:29:3C:4B:F6:2D:4F:E1:EF:37:D3:12:03:45:6C
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c3:25:35:9c:16:63:00:dd:4b:17:be:af:79:be:d5:9f:9e:
a6:2f:c5:ef:01:41:b0:24:c7:06:d6:04:4d:eb:d6:97:52:0c:
67:29:a1:28:96:1d:22:c4:3b:26:9e:7f:3f:63:83:be:8d:eb:
61:58:13:40:bf:ac:01:41:39:88:1b:50:3a:de:00:3c:df:50:
62:41:4e:45:d4:67:8f:a7:61:4b:71:76:7f:f5:47:95:59:98:
f4:09:1c:4a:c7:cf:19:c5:86:b4:b0:30:5b:98:63:b2:85:e1:
66:da:e8:9c:95:62:8b:bb:84:81:6c:d7:f1:3e:81:3e:a5:9f:
78:69:a7:89:37:78:43:3b:72:ab:1e:55:e6:58:2b:04:d9:6a:
6d:e1:d3:45:8f:0f:bb:e4:05:86:b9:23:01:00:01:b1:23:0f:
05:c0:4b:b3:8a:8d:ca:95:7e:6e:73:11:1a:ce:a0:a3:a8:52:
e5:e3:a3:6f:7e:66:38:c8:de:42:f3:9d:86:a6:a7:35:a8:35:
43:5b:7e:5e:6a:e4:7c:9a:a5:d5:5c:c4:ff:8c:e0:6b:08:db:
66:ec:d6:d6:24:55:8a:43:86:e0:f4:b9:39:ae:44:8c:dc:19:
36:25:ed:b0:74:0b:c7:19:86:bb:1d:34:8f:9a:53:2a:26:26:
ef:e3:10:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmC1+p38Sz4BeTO8sP7DiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDY3MGMyYTZmZDcyMjMzMjdmNjhiYWRiZTZkMDgzMjJi
NzgwNTgwHhcNMjUwODIzMTEwMjMzWhcNMjUwODI0MTEwMjMzWjAzMTEwLwYDVQQD
Eyg1OWMyNjY1MTc4MTMyOTNjNGJmNjJkNGZlMWVmMzdkMzEyMDM0NTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0XAkr1YOlNxEpIgTeUin29li08v
WD8/1BexZDD/xVQvvFGctJ/M4gM8O+bkNiOxfAxj4XUkeLtCw0fkHhId3xDjr1a3
eukLNJf51VF8ggCAG65aRxDYUgIgIwh8GLNgk6lzfOSrSEw0mB5jvCu0j5Dl/SWd
fFHQx+YBkGYb+riSxqrjmFD0s/90e6mMpsP0Z2wgJLYnQ19U2ZnyNSCegRKWd06+
I6MxlnZB1aw/iwCJy+Ijbhq/woUvEEkGtbui+zoSwHejPzoW5mloDacFENqxwdFV
+H9AnjXQu2CrfRVgdSJ7DFmFwphgHP5naR9F2z+qiNcIxcS7EHU4KRiaNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnCZlF4Eyk8S/YtT+HvN9MSA0VsMB8GA1UdIwQY
MBaAFN1GcMKm/XIjMn9outvm0IMit4BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUt
OWNkM2M2YTE4ODY2LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUtOWNkM2M2YTE4ODY2
LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesMlNZwW
YwDdSxe+r3m+1Z+epi/F7wFBsCTHBtYETevWl1IMZymhKJYdIsQ7Jp5/P2ODvo3r
YVgTQL+sAUE5iBtQOt4APN9QYkFORdRnj6dhS3F2f/VHlVmY9AkcSsfPGcWGtLAw
W5hjsoXhZtronJVii7uEgWzX8T6BPqWfeGmniTd4Qztyqx5V5lgrBNlqbeHTRY8P
u+QFhrkjAQABsSMPBcBLs4qNypV+bnMRGs6go6hS5eOjb35mOMjeQvOdhqanNag1
Q1t+XmrkfJql1VzE/4zgawjbZuzW1iRVikOG4PS5Oa5EjNwZNiXtsHQLxxmGux00
j5pTKiYm7+MQYA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:51 2025 by rpki-client