Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
File: db3TijiDJA5GxLGsi7-DF96P-IU.mft (raw, json)
Hash identifier: YGL1miOkeCHHI4CaSkHTeemYXf2x2suwu4wVr9CCBew=
Subject key identifier: 60:EE:30:4B:3B:0D:5A:13:66:3E:6E:26:54:48:58:2D:1B:FA:73:0C
Authority key identifier: 75:BD:D3:8A:38:83:24:0E:46:C4:B1:AC:8B:BF:83:17:DE:8F:F8:85
Certificate issuer: /CN=75bdd38a3883240e46c4b1ac8bbf8317de8ff885
Certificate serial: 0198D7A97C53F121FFAFFE83BC003687762E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
Manifest number: 1357
Signing time: Sat 23 Aug 2025 16:01:05 +0000
Manifest this update: Sat 23 Aug 2025 16:01:05 +0000
Manifest next update: Sun 24 Aug 2025 16:01:05 +0000
Files and hashes: 1: db3TijiDJA5GxLGsi7-DF96P-IU.crl (hash: mlaq9dNkDj+cL4kkqGbitZUd0kcyjX/clN5jydZL4NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:7c:53:f1:21:ff:af:fe:83:bc:00:36:87:76:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bdd38a3883240e46c4b1ac8bbf8317de8ff885
Validity
Not Before: Aug 23 16:01:05 2025 GMT
Not After : Aug 24 16:01:05 2025 GMT
Subject: CN=60ee304b3b0d5a13663e6e265448582d1bfa730c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:6b:68:7b:7f:b1:fb:ac:4a:1e:b3:da:42:
62:24:12:a2:0c:b6:38:5d:ad:3c:dd:ec:1b:e3:62:
63:a6:6a:44:c4:31:e5:02:33:09:42:6e:a7:0b:b1:
61:b8:a3:de:36:72:33:37:4d:48:41:39:85:44:11:
74:3e:96:01:e4:98:2d:7c:56:f5:76:49:43:0d:2d:
02:55:15:8d:13:a2:57:13:67:75:ee:88:0c:3c:89:
a9:32:ff:22:30:87:6e:7c:ee:ea:b1:82:e3:f4:77:
9f:9b:83:61:95:73:a2:26:90:aa:f3:a4:20:a5:d8:
0f:1d:ce:54:ad:3e:63:aa:b3:d3:eb:71:c5:89:31:
fd:87:5b:94:a5:8b:ad:23:da:2b:ec:89:ea:b0:0e:
65:00:bd:f4:af:dd:65:ea:48:ff:40:ab:b7:ed:c4:
b2:fb:e7:5a:d1:f0:46:29:c5:42:2e:8a:57:f6:83:
03:e3:47:39:0c:df:bf:18:32:46:b0:d2:5c:55:4a:
7f:af:96:d3:f5:0f:7f:12:95:ec:c3:65:0d:41:03:
41:db:d1:c5:03:4d:fe:69:f5:05:2c:eb:a2:c6:8d:
ad:ca:e7:d1:2a:9c:b8:35:24:98:ea:48:35:01:59:
62:b3:55:8e:c9:0c:d6:12:50:ea:b3:1a:91:4b:cc:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EE:30:4B:3B:0D:5A:13:66:3E:6E:26:54:48:58:2D:1B:FA:73:0C
X509v3 Authority Key Identifier:
keyid:75:BD:D3:8A:38:83:24:0E:46:C4:B1:AC:8B:BF:83:17:DE:8F:F8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7a:d5:86:06:13:8f:bc:3e:a4:c7:54:97:47:6a:61:c6:6c:
f9:d2:55:c7:64:ef:8f:98:6d:a3:bb:90:fc:4d:2b:b1:9b:04:
b1:81:28:4a:86:21:bb:3a:ae:18:58:be:ab:c2:f5:7e:84:36:
8b:04:0f:e9:99:8b:93:30:ee:ba:c9:e7:ae:23:71:ae:a7:9e:
4b:37:49:60:ab:de:2b:c3:7b:8b:ed:f4:21:0e:9a:92:ea:20:
3c:d8:14:b9:c3:fa:1b:c3:a2:60:58:7d:02:7b:27:44:64:1c:
a9:2e:85:22:6e:c8:cc:f6:65:4d:df:3b:2a:92:f7:e7:db:cf:
9a:35:53:fd:6a:54:12:e7:02:e8:5d:a9:da:02:e7:c2:34:5b:
d9:4f:89:0f:e1:c9:03:e9:60:8c:cf:28:0c:7a:7a:46:3e:91:
23:19:e4:94:74:0b:e4:9c:f3:74:33:95:7c:4a:6e:86:6c:24:
5e:38:d2:6d:d0:d4:4b:df:71:54:cd:c5:39:0a:db:89:dd:94:
26:c8:3f:a3:c4:aa:73:7b:5b:d0:90:09:7d:5d:66:92:c1:5c:
b4:07:7e:7a:71:c1:ff:2e:ea:ea:6b:f5:b0:ee:14:43:03:d9:
93:0c:4b:46:72:80:b0:f3:a3:96:2a:c9:cf:80:42:16:ee:7a:
1c:ed:75:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqXxT8SH/r/6DvAA2h3YuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YmRkMzhhMzg4MzI0MGU0NmM0YjFhYzhiYmY4MzE3ZGU4
ZmY4ODUwHhcNMjUwODIzMTYwMTA1WhcNMjUwODI0MTYwMTA1WjAzMTEwLwYDVQQD
Eyg2MGVlMzA0YjNiMGQ1YTEzNjYzZTZlMjY1NDQ4NTgyZDFiZmE3MzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHZraHt/sfusSh6z2kJiJBKiDLY4
Xa083ewb42JjpmpExDHlAjMJQm6nC7FhuKPeNnIzN01IQTmFRBF0PpYB5JgtfFb1
dklDDS0CVRWNE6JXE2d17ogMPImpMv8iMIdufO7qsYLj9Hefm4NhlXOiJpCq86Qg
pdgPHc5UrT5jqrPT63HFiTH9h1uUpYutI9or7InqsA5lAL30r91l6kj/QKu37cSy
++da0fBGKcVCLopX9oMD40c5DN+/GDJGsNJcVUp/r5bT9Q9/EpXsw2UNQQNB29HF
A03+afUFLOuixo2tyufRKpy4NSSY6kg1AVlis1WOyQzWElDqsxqRS8y5DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDuMEs7DVoTZj5uJlRIWC0b+nMMMB8GA1UdIwQY
MBaAFHW904o4gyQORsSxrIu/gxfej/iFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGIzVGlqaURKQTVHeExHc2k3LURGOTZQLUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jM2E0ZjctMmQwYS00OTI0LThjZGIt
OGRhNjA1MzVlNmEwLzEvZGIzVGlqaURKQTVHeExHc2k3LURGOTZQLUlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jM2E0ZjctMmQwYS00OTI0LThjZGItOGRhNjA1MzVlNmEw
LzEvZGIzVGlqaURKQTVHeExHc2k3LURGOTZQLUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHrVhgYT
j7w+pMdUl0dqYcZs+dJVx2Tvj5hto7uQ/E0rsZsEsYEoSoYhuzquGFi+q8L1foQ2
iwQP6ZmLkzDuusnnriNxrqeeSzdJYKveK8N7i+30IQ6akuogPNgUucP6G8OiYFh9
AnsnRGQcqS6FIm7IzPZlTd87KpL359vPmjVT/WpUEucC6F2p2gLnwjRb2U+JD+HJ
A+lgjM8oDHp6Rj6RIxnklHQL5JzzdDOVfEpuhmwkXjjSbdDUS99xVM3FOQrbid2U
Jsg/o8Sqc3tb0JAJfV1mksFctAd+enHB/y7q6mv1sO4UQwPZkwxLRnKAsPOjlirJ
z4BCFu56HO11Tg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:36 2025 by rpki-client