Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
File: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft (raw, json)
Hash identifier: gGgJS4Zca9NWmYTsvQ6KNVfXy/BD83JZ1wyJj4+IFO0=
Subject key identifier: 4C:03:D8:81:B3:75:1E:9E:DE:66:15:AB:20:9A:0B:F0:75:5B:0D:90
Authority key identifier: A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
Certificate issuer: /CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Certificate serial: 0198D516099C7DFC725A2465DD4ECE24849C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
Manifest number: 0D01
Signing time: Sat 23 Aug 2025 04:00:47 +0000
Manifest this update: Sat 23 Aug 2025 04:00:47 +0000
Manifest next update: Sun 24 Aug 2025 04:00:47 +0000
Files and hashes: 1: Z94Es0pJzdNNFG_pvtxbCrg0w94.roa (hash: uXR+OJPAQJAMUd3RxLmxlHyff75ZTmhyAoVDvTJyktM=)
2: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl (hash: NzpX340Trj/AXW0GKNd+iqIjkSlFfHBJwiULvtN5ca0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:09:9c:7d:fc:72:5a:24:65:dd:4e:ce:24:84:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Validity
Not Before: Aug 23 04:00:47 2025 GMT
Not After : Aug 24 04:00:47 2025 GMT
Subject: CN=4c03d881b3751e9ede6615ab209a0bf0755b0d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:83:2c:6b:4f:1b:8d:92:f8:9a:8b:8f:d5:4d:
34:58:fd:5b:15:3e:b5:99:b9:97:2f:c2:94:66:5e:
f7:26:82:33:f2:2e:46:a7:61:68:8e:b0:2b:27:43:
0d:88:90:11:13:9c:8d:d3:ca:92:46:dc:55:75:5b:
6d:0b:4c:6c:21:05:33:b9:8d:6f:88:d9:86:66:00:
1c:9b:84:f4:27:4b:1d:ef:04:fd:ef:67:81:5b:1d:
b2:e4:0c:a5:0b:81:4b:85:24:6d:f3:0c:b3:2a:f8:
d0:82:aa:1d:e0:27:dd:7c:1c:28:c4:ab:27:a1:80:
ac:83:b3:83:5c:71:81:c8:5f:1f:f4:40:cd:7d:78:
c3:81:02:3d:1b:d8:55:6b:5f:34:50:d5:16:dc:90:
90:c8:a1:ca:62:c3:76:91:be:da:e5:1f:33:92:b8:
b8:58:92:f2:b7:87:a9:42:4c:50:a1:0a:e7:5c:6e:
23:9c:03:ee:94:40:e4:71:f6:bf:72:72:33:14:e3:
f5:a3:74:46:16:c3:d4:0d:10:43:7f:90:8b:77:75:
f3:4b:db:74:ad:5b:99:f5:13:21:ec:3d:7c:df:f0:
c8:80:a0:cd:e6:d7:70:29:50:81:e6:30:48:11:5d:
49:7e:39:4e:0f:7f:22:49:66:3c:49:38:d3:c8:8a:
30:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:03:D8:81:B3:75:1E:9E:DE:66:15:AB:20:9A:0B:F0:75:5B:0D:90
X509v3 Authority Key Identifier:
keyid:A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:dd:b5:dd:24:6b:27:07:a7:22:93:3c:57:c5:28:37:1b:38:
c3:31:58:40:cb:1a:57:91:ec:36:5a:91:2c:f9:0e:a4:27:b9:
07:ee:75:12:96:86:b0:b4:a7:79:41:21:91:f5:57:53:b7:4d:
fb:22:9c:d7:c3:c6:60:13:28:f8:64:32:07:b2:ff:6c:71:62:
2f:99:c3:0f:a6:fd:f0:56:80:d7:8c:5c:87:bb:ba:c6:e1:3d:
ca:60:6d:82:7d:48:51:cb:89:52:21:8b:9c:12:8a:67:60:25:
84:64:bb:a7:aa:94:c3:c8:eb:6d:38:70:94:72:80:cf:36:c1:
1b:56:a5:f3:85:29:d3:87:c6:38:f1:c7:bc:81:cb:55:92:f4:
91:98:dc:96:9c:92:f8:71:8f:c8:79:9d:22:1b:77:e7:94:73:
52:85:64:65:f3:39:7f:d9:ea:89:52:77:2a:64:1e:85:a1:2f:
70:c3:fa:7e:ed:d3:36:18:6f:18:9c:13:55:59:c3:d3:1a:01:
f9:89:81:e5:bd:93:54:1c:f3:69:a9:43:78:c6:14:a9:74:02:
b4:0b:18:c6:b2:c4:98:2c:c1:5c:eb:4b:3a:3e:ab:f8:f8:21:
38:87:10:92:9a:f7:ee:a0:13:6d:df:06:25:d1:b5:ff:4e:0d:
71:de:57:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFgmcffxyWiRl3U7OJIScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NzMyNWU0OTVjYjAxNTAyMDNiNzlmMjQ2ZjRjZDRjMGZl
YzI0ZmYwHhcNMjUwODIzMDQwMDQ3WhcNMjUwODI0MDQwMDQ3WjAzMTEwLwYDVQQD
Eyg0YzAzZDg4MWIzNzUxZTllZGU2NjE1YWIyMDlhMGJmMDc1NWIwZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54Msa08bjZL4mouP1U00WP1bFT61
mbmXL8KUZl73JoIz8i5Gp2FojrArJ0MNiJARE5yN08qSRtxVdVttC0xsIQUzuY1v
iNmGZgAcm4T0J0sd7wT972eBWx2y5AylC4FLhSRt8wyzKvjQgqod4CfdfBwoxKsn
oYCsg7ODXHGByF8f9EDNfXjDgQI9G9hVa180UNUW3JCQyKHKYsN2kb7a5R8zkri4
WJLyt4epQkxQoQrnXG4jnAPulEDkcfa/cnIzFOP1o3RGFsPUDRBDf5CLd3XzS9t0
rVuZ9RMh7D183/DIgKDN5tdwKVCB5jBIEV1JfjlOD38iSWY8STjTyIowuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwD2IGzdR6e3mYVqyCaC/B1Ww2QMB8GA1UdIwQY
MBaAFKdzJeSVywFQIDt58kb0zUwP7CT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iZjg0MTEtNjk2MC00Y2VmLTkxZjkt
MTNiNmE2ZDcxYTQxLzEvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9iZjg0MTEtNjk2MC00Y2VmLTkxZjktMTNiNmE2ZDcxYTQx
LzEvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMt213SRr
JwenIpM8V8UoNxs4wzFYQMsaV5HsNlqRLPkOpCe5B+51EpaGsLSneUEhkfVXU7dN
+yKc18PGYBMo+GQyB7L/bHFiL5nDD6b98FaA14xch7u6xuE9ymBtgn1IUcuJUiGL
nBKKZ2AlhGS7p6qUw8jrbThwlHKAzzbBG1al84Up04fGOPHHvIHLVZL0kZjclpyS
+HGPyHmdIht355RzUoVkZfM5f9nqiVJ3KmQehaEvcMP6fu3TNhhvGJwTVVnD0xoB
+YmB5b2TVBzzaalDeMYUqXQCtAsYxrLEmCzBXOtLOj6r+PghOIcQkpr37qATbd8G
JdG1/04Ncd5XZw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:40 2025 by rpki-client