Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier: KiIRFeQ84wYV5O2O7TTYD/f5Hh1gq58HuZUpT0snGuA=
Subject key identifier: 71:72:10:36:F0:AC:C0:DC:FB:2B:9C:6D:B8:89:63:72:83:8A:81:E4
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 0198D6983C29EB8370E6B9507C560552BA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:37 +0000
Manifest this update: Sat 23 Aug 2025 11:02:37 +0000
Manifest next update: Sun 24 Aug 2025 11:02:37 +0000
Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: P0UCY2GG2psL5M9/9YgzTnsURob8sqU9ezNIF3BTTgU=)
2: b5tCOGfZlXjj3Rp4LI2wyRIwTZc.roa (hash: Ux81ccFaPxD7MPa+kjPcqatGWLTvR5GEGbxi2D0f0BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:3c:29:eb:83:70:e6:b9:50:7c:56:05:52:ba:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: Aug 23 11:02:37 2025 GMT
Not After : Aug 24 11:02:37 2025 GMT
Subject: CN=71721036f0acc0dcfb2b9c6db8896372838a81e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:bb:95:6b:26:0e:09:14:cd:ad:fa:71:04:
8a:33:b3:cf:b7:8f:ac:50:fe:f5:5c:6f:68:75:bc:
a2:50:3e:2e:0b:12:91:c7:4c:d2:06:c8:ee:08:dd:
58:b1:0a:a8:79:58:62:bc:46:ca:fb:fe:25:2e:b4:
7b:49:51:56:e1:af:38:cd:d0:83:ca:b6:95:e0:83:
48:d4:d6:83:41:8d:78:9f:50:fa:f1:3c:19:d9:d5:
d2:44:5f:c6:e9:99:ea:6c:55:e0:dd:bc:3a:d0:5c:
ca:7f:2e:11:01:e5:fc:10:e1:a3:41:30:d0:e7:e3:
46:c6:00:ab:38:c7:ca:8b:f2:b6:61:76:16:b7:09:
6c:67:f3:a3:80:7b:6b:25:d0:f0:41:d6:c5:e2:9e:
d5:b9:6e:b3:82:f3:37:ed:d0:f7:4a:84:18:4b:10:
ab:d0:cc:02:ed:d8:38:50:02:be:9b:2b:bf:de:f5:
58:4f:5f:56:93:0f:f1:b3:b7:07:bf:0b:02:d1:5b:
a0:84:36:36:98:4c:f6:06:f5:d8:a3:d8:b5:33:00:
18:a3:6b:04:ca:e5:de:f7:a0:e7:73:8c:b5:e7:51:
f3:0a:7f:51:34:1f:5c:ec:3b:44:bf:05:e0:6c:03:
f1:ac:3b:66:0a:51:bb:38:d6:86:ac:4c:d8:fe:8d:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:72:10:36:F0:AC:C0:DC:FB:2B:9C:6D:B8:89:63:72:83:8A:81:E4
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4d:a0:c8:2a:39:9c:96:5b:50:80:1f:cc:46:fe:94:42:01:
bb:f2:13:1e:f8:9b:ba:f3:18:16:0b:c1:60:74:c5:12:db:cf:
dd:91:40:02:2c:f4:3f:3a:40:b1:0d:df:3b:8e:aa:39:73:a0:
fe:78:71:b6:43:1b:a7:76:41:2c:85:91:01:f7:74:30:06:86:
5d:db:97:ae:af:4b:a6:1d:e6:d3:af:1a:7a:10:d1:7f:57:06:
17:f6:19:25:e0:35:29:f4:5f:99:a2:5f:4a:1a:0b:2a:69:f9:
03:4c:f8:b6:94:b3:9f:b9:38:56:19:f3:c7:e4:62:a0:54:45:
13:1c:4b:16:d7:81:9f:24:2b:20:a0:59:67:19:06:3e:e7:c4:
ea:1f:13:e3:ae:92:a6:52:a7:ed:d6:1a:2b:a5:56:bc:d4:4c:
84:19:92:01:8d:a5:ed:61:ec:d3:4a:50:ba:36:74:07:8e:77:
26:8a:90:85:57:b9:ea:f8:bc:7a:f4:cd:71:99:ac:a8:bf:ec:
2e:df:17:1d:be:54:5a:fa:88:1c:e2:2f:d7:a8:9e:b4:a6:53:
36:13:e1:82:8a:ab:80:59:f6:81:bb:d9:c5:a0:05:1a:b9:5e:
f3:0a:cb:cd:b0:2b:55:69:b1:27:51:4b:a6:4a:00:c1:2b:e1:
f7:86:cd:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmDwp64Nw5rlQfFYFUrpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTU3MmZjYmQ2NjVmNzJlMDBlNWZmZGI4ZGI4MDJkMWNi
ZWM4OTQwHhcNMjUwODIzMTEwMjM3WhcNMjUwODI0MTEwMjM3WjAzMTEwLwYDVQQD
Eyg3MTcyMTAzNmYwYWNjMGRjZmIyYjljNmRiODg5NjM3MjgzOGE4MWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8G7lWsmDgkUza36cQSKM7PPt4+s
UP71XG9odbyiUD4uCxKRx0zSBsjuCN1YsQqoeVhivEbK+/4lLrR7SVFW4a84zdCD
yraV4INI1NaDQY14n1D68TwZ2dXSRF/G6ZnqbFXg3bw60FzKfy4RAeX8EOGjQTDQ
5+NGxgCrOMfKi/K2YXYWtwlsZ/OjgHtrJdDwQdbF4p7VuW6zgvM37dD3SoQYSxCr
0MwC7dg4UAK+myu/3vVYT19Wkw/xs7cHvwsC0VughDY2mEz2BvXYo9i1MwAYo2sE
yuXe96Dnc4y151HzCn9RNB9c7DtEvwXgbAPxrDtmClG7ONaGrEzY/o0dgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFyEDbwrMDc+yucbbiJY3KDioHkMB8GA1UdIwQY
MBaAFN6Vcvy9Zl9y4A5f/bjbgC0cvsiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83OTIyMDAtMmRhMC00MWJmLTg1ODct
YTkyOTM0Y2IxZGU4LzEvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83OTIyMDAtMmRhMC00MWJmLTg1ODctYTkyOTM0Y2IxZGU4
LzEvM3BWeV9MMW1YM0xnRGxfOXVOdUFMUnkteUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApE2gyCo5
nJZbUIAfzEb+lEIBu/ITHvibuvMYFgvBYHTFEtvP3ZFAAiz0PzpAsQ3fO46qOXOg
/nhxtkMbp3ZBLIWRAfd0MAaGXduXrq9Lph3m068aehDRf1cGF/YZJeA1KfRfmaJf
ShoLKmn5A0z4tpSzn7k4Vhnzx+RioFRFExxLFteBnyQrIKBZZxkGPufE6h8T466S
plKn7dYaK6VWvNRMhBmSAY2l7WHs00pQujZ0B453JoqQhVe56vi8evTNcZmsqL/s
Lt8XHb5UWvqIHOIv16ietKZTNhPhgoqrgFn2gbvZxaAFGrle8wrLzbArVWmxJ1FL
pkoAwSvh94bNSQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:37 2025 by rpki-client