Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
File: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft (raw, json)
Hash identifier: RwQTiHaqVlBCME3bsCHfFdOEXNLdt6qUAUvZnPZYXrk=
Subject key identifier: 9D:89:90:A8:42:75:F8:E7:89:E3:42:5B:58:29:9E:11:B1:DD:83:BB
Authority key identifier: DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
Certificate issuer: /CN=df0f32e5f098b86a8794825c81122da953466284
Certificate serial: 0198D58372A837D0450F6C4501699B79528D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
Manifest number: 06BD
Signing time: Sat 23 Aug 2025 06:00:18 +0000
Manifest this update: Sat 23 Aug 2025 06:00:18 +0000
Manifest next update: Sun 24 Aug 2025 06:00:18 +0000
Files and hashes: 1: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl (hash: rW0XRvxPFF23q2X55CMRs0K50kBgNS7ZnWLO7YBrNKw=)
2: gBjKKqKZuEY4WvRauB7caOw1S-0.roa (hash: KcvP3QvpprIZ7nrbS5q17f/tcN31DqhQB7sqPQGvSG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:72:a8:37:d0:45:0f:6c:45:01:69:9b:79:52:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0f32e5f098b86a8794825c81122da953466284
Validity
Not Before: Aug 23 06:00:18 2025 GMT
Not After : Aug 24 06:00:18 2025 GMT
Subject: CN=9d8990a84275f8e789e3425b58299e11b1dd83bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:b1:f1:94:e0:70:61:e8:1c:11:20:bd:7a:
4d:52:8d:0d:5f:f6:9b:3b:87:35:14:89:7d:fe:9c:
f7:d3:22:c7:5f:04:a0:9c:a0:d1:40:4a:f0:6f:e4:
70:bd:af:27:f2:1f:14:dd:7f:c1:e4:cb:2d:47:98:
8f:84:eb:67:c4:9a:5b:29:2c:8f:85:61:cd:6b:4e:
75:c5:ad:71:08:95:94:5a:be:06:88:3f:a2:8f:42:
62:0e:8f:94:98:08:d4:f6:f7:d0:a3:0c:24:50:77:
b4:99:af:9c:7c:b6:21:79:ec:28:98:5c:f4:ca:35:
06:3a:65:62:13:43:a8:16:67:21:f0:a8:21:ee:38:
df:c5:42:c3:cf:d3:58:b7:1c:28:79:49:2c:29:b7:
8e:a4:97:0e:dc:55:76:22:c2:c4:2a:3f:21:5b:1d:
58:39:5f:9b:dc:e0:45:82:57:3f:aa:65:a1:ba:d6:
19:25:46:6e:db:e1:69:0a:7a:9c:23:01:32:16:a7:
76:e4:19:cb:99:14:e2:ac:7a:91:21:ce:39:2c:e6:
87:3c:a3:e2:e6:a4:ca:f2:6f:8a:8a:be:83:d9:12:
80:35:5a:45:84:c1:8b:b5:a6:e5:68:2b:2a:9c:fa:
b6:17:97:29:8f:87:c4:29:b2:1c:aa:dd:db:69:18:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:89:90:A8:42:75:F8:E7:89:E3:42:5B:58:29:9E:11:B1:DD:83:BB
X509v3 Authority Key Identifier:
keyid:DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:31:8f:8d:f1:0d:65:0d:22:1d:a7:f6:cc:00:1c:3d:9d:d8:
62:7c:3c:0a:14:80:dd:ef:00:2a:22:ed:8a:f7:c4:8f:35:32:
10:da:b7:ee:10:37:e6:49:b8:2d:08:5c:35:00:cc:ec:37:0e:
cc:79:e6:78:a4:2a:7c:18:32:41:91:b1:c3:1f:8d:d0:f2:5b:
e7:d2:6b:e8:12:11:23:24:27:52:6f:1f:f1:9d:52:b2:11:35:
0b:63:80:f9:01:b0:03:d0:de:06:cc:db:06:06:82:1b:b3:3e:
c2:08:ab:2d:5b:9f:56:ed:7e:e4:0c:5c:9f:af:93:c5:d4:40:
b0:43:0f:16:f5:ff:e7:83:14:bd:55:6b:26:8e:a1:0d:55:66:
81:fa:16:8e:f9:9b:75:d3:0f:ca:36:1f:9b:57:21:4f:80:e6:
28:9e:52:c8:99:cd:a1:ef:b4:a0:15:ff:7e:89:54:99:d9:78:
d9:af:06:90:74:04:91:37:57:2f:2f:93:63:9b:45:d5:3a:7b:
7c:18:55:0d:ca:e1:b8:ba:b1:71:d6:24:fb:c4:be:66:d6:87:
2a:66:15:99:b7:dc:9b:c2:2a:49:ab:93:84:b5:de:c2:82:8c:
cc:f8:e7:16:7b:17:75:eb:cb:84:65:be:9f:d6:19:af:00:7e:
1d:13:41:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg3KoN9BFD2xFAWmbeVKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMGYzMmU1ZjA5OGI4NmE4Nzk0ODI1YzgxMTIyZGE5NTM0
NjYyODQwHhcNMjUwODIzMDYwMDE4WhcNMjUwODI0MDYwMDE4WjAzMTEwLwYDVQQD
Eyg5ZDg5OTBhODQyNzVmOGU3ODllMzQyNWI1ODI5OWUxMWIxZGQ4M2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq++x8ZTgcGHoHBEgvXpNUo0NX/ab
O4c1FIl9/pz30yLHXwSgnKDRQErwb+Rwva8n8h8U3X/B5MstR5iPhOtnxJpbKSyP
hWHNa051xa1xCJWUWr4GiD+ij0JiDo+UmAjU9vfQowwkUHe0ma+cfLYheewomFz0
yjUGOmViE0OoFmch8Kgh7jjfxULDz9NYtxwoeUksKbeOpJcO3FV2IsLEKj8hWx1Y
OV+b3OBFglc/qmWhutYZJUZu2+FpCnqcIwEyFqd25BnLmRTirHqRIc45LOaHPKPi
5qTK8m+Kir6D2RKANVpFhMGLtablaCsqnPq2F5cpj4fEKbIcqt3baRjbdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2JkKhCdfjnieNCW1gpnhGx3YO7MB8GA1UdIwQY
MBaAFN8PMuXwmLhqh5SCXIESLalTRmKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3c4eTVmQ1l1R3FIbElKY2dSSXRxVk5HWW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTE2MDctOGVmMC00ZWQ1LWE2OGIt
OGIxMmIxZjFiNWFlLzEvM3c4eTVmQ1l1R3FIbElKY2dSSXRxVk5HWW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wZTE2MDctOGVmMC00ZWQ1LWE2OGItOGIxMmIxZjFiNWFl
LzEvM3c4eTVmQ1l1R3FIbElKY2dSSXRxVk5HWW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTGPjfEN
ZQ0iHaf2zAAcPZ3YYnw8ChSA3e8AKiLtivfEjzUyENq37hA35km4LQhcNQDM7DcO
zHnmeKQqfBgyQZGxwx+N0PJb59Jr6BIRIyQnUm8f8Z1SshE1C2OA+QGwA9DeBszb
BgaCG7M+wgirLVufVu1+5Axcn6+TxdRAsEMPFvX/54MUvVVrJo6hDVVmgfoWjvmb
ddMPyjYfm1chT4DmKJ5SyJnNoe+0oBX/folUmdl42a8GkHQEkTdXLy+TY5tF1Tp7
fBhVDcrhuLqxcdYk+8S+ZtaHKmYVmbfcm8IqSauThLXewoKMzPjnFnsXdevLhGW+
n9YZrwB+HRNBnw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:37 2025 by rpki-client