Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
File: 3Mx29__HFoYLOtY56_kdxN1hMAA.mft (raw, json)
Hash identifier: fTId1cOl+zjgY1WgvCjBs3zrfJwbUDgtL1W4sMlARXU=
Subject key identifier: 75:71:08:70:6D:21:BC:68:9A:15:F0:B5:CF:6B:4C:76:55:2C:66:24
Authority key identifier: DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00
Certificate issuer: /CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000
Certificate serial: 0198D65F0BCFB54F0CD40FC67E7A489ECB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
Manifest number: 0A0D
Signing time: Sat 23 Aug 2025 10:00:09 +0000
Manifest this update: Sat 23 Aug 2025 10:00:09 +0000
Manifest next update: Sun 24 Aug 2025 10:00:09 +0000
Files and hashes: 1: 3Mx29__HFoYLOtY56_kdxN1hMAA.crl (hash: blwKLnedyknYZiTuF/fMmyEewES7EHiQfzJkHSMjS+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:0b:cf:b5:4f:0c:d4:0f:c6:7e:7a:48:9e:cb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000
Validity
Not Before: Aug 23 10:00:09 2025 GMT
Not After : Aug 24 10:00:09 2025 GMT
Subject: CN=757108706d21bc689a15f0b5cf6b4c76552c6624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9d:a9:51:82:9f:db:ef:f6:f9:8a:f4:f0:64:
5b:ca:bc:01:26:22:04:9f:53:6e:e2:b2:2f:70:5c:
e2:98:75:a4:01:5d:93:ad:09:ed:29:37:70:6a:6c:
53:00:a0:7d:4f:7a:76:59:e1:39:b2:46:84:ce:d1:
bb:62:7b:94:0a:44:1a:9a:8f:f8:b9:0e:dd:32:63:
cf:ad:a3:fb:b7:ad:51:5c:41:41:ce:1f:33:9e:90:
92:8c:98:80:7e:d3:6a:17:19:19:f2:1a:22:42:4e:
b0:0b:8f:cc:ae:76:85:cd:5f:9a:1f:d4:5a:da:d2:
65:61:fa:08:53:fb:cb:81:90:7a:c0:fa:80:9d:00:
82:ea:62:f7:43:83:91:f2:e8:e9:d3:62:90:c9:4b:
0b:08:70:43:13:17:4f:4f:65:c8:40:17:cb:13:7f:
b0:e0:d7:50:e6:51:95:ac:73:e8:8a:21:91:a5:76:
81:c0:98:fc:ff:de:08:e6:90:d8:97:a4:db:82:41:
9a:16:8d:12:0f:c2:37:2f:6a:c5:85:4c:42:db:f4:
fb:e2:ce:f5:f8:aa:97:d4:82:62:59:99:ce:ac:ec:
1a:c6:bf:2c:0e:9d:1d:ce:08:92:1c:ee:a8:f6:fd:
54:c3:68:0d:1a:96:53:7a:e1:6f:31:bd:d9:37:71:
97:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:71:08:70:6D:21:BC:68:9A:15:F0:B5:CF:6B:4C:76:55:2C:66:24
X509v3 Authority Key Identifier:
keyid:DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:60:8d:19:a5:6c:b2:b1:a4:ed:67:09:95:bb:4c:00:6b:3b:
68:ba:ab:aa:15:a4:0c:df:27:d5:8f:6d:b9:f9:1d:98:99:51:
fe:ec:f4:80:bc:a4:75:50:22:33:3e:b2:b3:dc:bd:47:5a:1f:
9c:fc:68:32:ac:a5:9e:3c:9e:fa:94:f4:19:0b:50:f4:59:18:
64:ee:4f:f4:38:34:d5:be:54:e7:d4:af:76:bf:11:51:99:86:
36:35:05:c0:2e:1d:96:a9:e6:32:3f:80:72:33:da:84:91:49:
7c:58:17:25:79:99:bf:9d:b1:72:40:8c:a2:a7:6e:39:a6:4b:
df:24:38:29:d7:97:60:f5:cb:5a:41:49:0e:cb:f0:55:a3:f0:
40:16:3e:58:cb:75:5b:7f:2a:9b:e0:b3:67:e3:f4:5b:2f:9c:
14:66:1e:66:a7:69:4b:0a:77:e4:4e:62:c1:23:44:03:b0:1d:
b6:45:bf:a4:e5:65:ec:94:1a:e3:c6:29:d1:db:bb:b0:4a:0a:
a5:d7:ed:69:e8:db:4b:27:fd:c8:1f:34:9d:67:ec:82:30:f0:
c0:d2:83:88:56:f9:e6:e2:23:7e:a3:d1:d0:6d:c3:cc:51:42:
c0:3b:d8:13:70:c0:f9:85:a8:7e:a9:85:9f:61:fb:51:50:3e:
16:e4:dc:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXwvPtU8M1A/GfnpInst4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjY2M3NmY3ZmZjNzE2ODYwYjNhZDYzOWViZjkxZGM0ZGQ2
MTMwMDAwHhcNMjUwODIzMTAwMDA5WhcNMjUwODI0MTAwMDA5WjAzMTEwLwYDVQQD
Eyg3NTcxMDg3MDZkMjFiYzY4OWExNWYwYjVjZjZiNGM3NjU1MmM2NjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip2pUYKf2+/2+Yr08GRbyrwBJiIE
n1Nu4rIvcFzimHWkAV2TrQntKTdwamxTAKB9T3p2WeE5skaEztG7YnuUCkQamo/4
uQ7dMmPPraP7t61RXEFBzh8znpCSjJiAftNqFxkZ8hoiQk6wC4/MrnaFzV+aH9Ra
2tJlYfoIU/vLgZB6wPqAnQCC6mL3Q4OR8ujp02KQyUsLCHBDExdPT2XIQBfLE3+w
4NdQ5lGVrHPoiiGRpXaBwJj8/94I5pDYl6TbgkGaFo0SD8I3L2rFhUxC2/T74s71
+KqX1IJiWZnOrOwaxr8sDp0dzgiSHO6o9v1Uw2gNGpZTeuFvMb3ZN3GXfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVxCHBtIbxomhXwtc9rTHZVLGYkMB8GA1UdIwQY
MBaAFNzMdvf/xxaGCzrWOev5HcTdYTAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM014MjlfX0hGb1lMT3RZNTZfa2R4TjFoTUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xOGE2N2UtN2NiZC00YzQ1LTg4OWMt
YWU3Yjg5MTc0NzEwLzEvM014MjlfX0hGb1lMT3RZNTZfa2R4TjFoTUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xOGE2N2UtN2NiZC00YzQ1LTg4OWMtYWU3Yjg5MTc0NzEw
LzEvM014MjlfX0hGb1lMT3RZNTZfa2R4TjFoTUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGCNGaVs
srGk7WcJlbtMAGs7aLqrqhWkDN8n1Y9tufkdmJlR/uz0gLykdVAiMz6ys9y9R1of
nPxoMqylnjye+pT0GQtQ9FkYZO5P9Dg01b5U59Svdr8RUZmGNjUFwC4dlqnmMj+A
cjPahJFJfFgXJXmZv52xckCMoqduOaZL3yQ4KdeXYPXLWkFJDsvwVaPwQBY+WMt1
W38qm+CzZ+P0Wy+cFGYeZqdpSwp35E5iwSNEA7AdtkW/pOVl7JQa48Yp0du7sEoK
pdftaejbSyf9yB80nWfsgjDwwNKDiFb55uIjfqPR0G3DzFFCwDvYE3DA+YWofqmF
n2H7UVA+FuTctg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:51 2025 by rpki-client