Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: RxN3kWS5MNEQ6y2J0O6j63mMz5vEjSpQE9ntsKj+tgc=
Subject key identifier: 9E:BD:31:03:4E:6F:A5:A7:AA:1A:60:A4:C6:A5:1E:C3:30:C4:85:FB
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 0197CC15F4BCE70A428F2BD8A5CCBDD388EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 14A1
Signing time: Wed 02 Jul 2025 17:01:20 +0000
Manifest this update: Wed 02 Jul 2025 17:01:20 +0000
Manifest next update: Thu 03 Jul 2025 17:01:20 +0000
Files and hashes: 1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: aPX96F2oL9h5Dr04WrWOA36hpPLPyfzWcxMxZpSUTNo=)
2: EoONLCC0uBU4UnkK6hGEDKnLwOs.roa (hash: BvTXgf3VZmemwuiX/6PvTlFRYmGF/FW7bb7KGQyaCiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:15:f4:bc:e7:0a:42:8f:2b:d8:a5:cc:bd:d3:88:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Jul 2 17:01:20 2025 GMT
Not After : Jul 3 17:01:20 2025 GMT
Subject: CN=9ebd31034e6fa5a7aa1a60a4c6a51ec330c485fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:ae:64:f5:b1:d6:42:c5:d2:e6:62:37:a5:
82:7b:bc:3c:8a:05:7e:0b:20:b4:a2:a7:c2:55:43:
12:11:88:f2:ff:a8:fb:a0:da:e2:1f:90:61:bc:85:
bc:5f:9d:81:58:e6:dc:36:9a:0d:4e:02:bc:29:fb:
e7:32:12:71:01:b4:8c:48:67:3d:6d:e3:ef:75:37:
1e:48:9f:49:22:f0:40:02:97:a7:7e:3d:3f:9d:57:
ba:09:40:ec:b7:6f:4c:cf:2a:e4:35:5f:56:3a:5e:
4a:ea:69:6b:ae:50:92:1a:b2:81:75:bc:38:af:98:
0b:c4:44:5a:ed:7f:6a:4c:e4:51:74:3c:b1:20:54:
00:e0:f3:11:83:78:60:81:d9:53:e5:97:b4:0f:2c:
9b:6c:fb:22:8b:12:9d:87:b8:7d:7c:28:81:b2:23:
07:74:18:01:14:e3:52:fc:03:92:af:69:69:36:4f:
45:3e:f5:c4:7a:a0:15:47:5f:2b:81:58:27:c5:ca:
01:91:09:c8:7b:a1:54:68:79:a7:bd:76:ce:6a:b8:
86:e8:64:34:35:8c:03:8a:ea:8c:86:6b:c9:41:96:
0a:5d:d3:37:00:e7:9d:58:f1:49:96:14:14:63:9c:
9d:5a:fc:2c:cd:f1:48:58:07:fd:14:b7:3b:1d:6b:
7b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BD:31:03:4E:6F:A5:A7:AA:1A:60:A4:C6:A5:1E:C3:30:C4:85:FB
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:92:e6:4b:ad:a5:a1:60:ad:1e:2a:c1:9a:fc:3f:75:06:84:
0c:ad:a8:3e:01:56:56:2f:6b:86:5d:4b:af:0c:ba:17:e0:ab:
1f:7f:14:1c:81:65:1c:eb:aa:63:2d:39:95:38:2e:a9:3d:22:
d7:ac:e8:92:19:59:49:99:cf:aa:bd:8f:34:79:e3:8c:31:86:
4e:17:fe:a9:53:3c:9d:a1:88:db:91:0f:2e:b9:12:36:d7:cb:
50:86:33:b6:88:26:07:3b:3e:a3:48:63:da:1a:1b:35:24:02:
01:7e:dc:9b:d8:01:7f:31:ce:67:2b:c3:74:d2:d1:ad:c6:a2:
ed:a3:4c:cc:fc:a0:2a:cf:22:0b:fb:0f:2f:62:91:bf:2b:88:
86:e8:42:17:03:e3:60:bb:60:80:74:a6:97:a5:e7:24:a1:5c:
81:5d:13:a8:df:18:27:95:f4:6a:4e:f4:3d:c6:58:da:39:32:
a5:f7:97:9d:1a:4a:b8:db:82:62:62:8b:25:7b:1f:5c:9d:56:
34:0a:3c:37:7f:21:bc:b9:dc:44:5a:51:db:65:20:3b:af:80:
3d:cb:b2:72:51:f0:ff:1a:c8:2b:ac:92:43:5f:01:79:fc:48:
40:fc:ba:0d:32:c3:ce:2c:47:e4:04:c3:00:a8:6d:b6:ff:cd:
fb:8a:56:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMFfS85wpCjyvYpcy904jqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDY3MGMyYTZmZDcyMjMzMjdmNjhiYWRiZTZkMDgzMjJi
NzgwNTgwHhcNMjUwNzAyMTcwMTIwWhcNMjUwNzAzMTcwMTIwWjAzMTEwLwYDVQQD
Eyg5ZWJkMzEwMzRlNmZhNWE3YWExYTYwYTRjNmE1MWVjMzMwYzQ4NWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwteuZPWx1kLF0uZiN6WCe7w8igV+
CyC0oqfCVUMSEYjy/6j7oNriH5BhvIW8X52BWObcNpoNTgK8KfvnMhJxAbSMSGc9
bePvdTceSJ9JIvBAApenfj0/nVe6CUDst29MzyrkNV9WOl5K6mlrrlCSGrKBdbw4
r5gLxERa7X9qTORRdDyxIFQA4PMRg3hggdlT5Ze0DyybbPsiixKdh7h9fCiBsiMH
dBgBFONS/AOSr2lpNk9FPvXEeqAVR18rgVgnxcoBkQnIe6FUaHmnvXbOariG6GQ0
NYwDiuqMhmvJQZYKXdM3AOedWPFJlhQUY5ydWvwszfFIWAf9FLc7HWt7OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ69MQNOb6WnqhpgpMalHsMwxIX7MB8GA1UdIwQY
MBaAFN1GcMKm/XIjMn9outvm0IMit4BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUt
OWNkM2M2YTE4ODY2LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUtOWNkM2M2YTE4ODY2
LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5LmS62l
oWCtHirBmvw/dQaEDK2oPgFWVi9rhl1Lrwy6F+CrH38UHIFlHOuqYy05lTguqT0i
16zokhlZSZnPqr2PNHnjjDGGThf+qVM8naGI25EPLrkSNtfLUIYztogmBzs+o0hj
2hobNSQCAX7cm9gBfzHOZyvDdNLRrcai7aNMzPygKs8iC/sPL2KRvyuIhuhCFwPj
YLtggHSml6XnJKFcgV0TqN8YJ5X0ak70PcZY2jkypfeXnRpKuNuCYmKLJXsfXJ1W
NAo8N38hvLncRFpR22UgO6+APcuyclHw/xrIK6ySQ18BefxIQPy6DTLDzixH5ATD
AKhttv/N+4pWsQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 20:17:25 2025 by rpki-client