Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: i3Lmk4W7nSjuNw12p0zuvyTYeJbKD2yfeaSl6ri0IdY=
Subject key identifier: DB:14:9B:E3:54:C3:A8:A6:CA:F6:2A:AC:74:A7:D7:BA:94:A0:65:BA
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 0198D6CCD755470D9B20157BCAE5C4444F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 0FFE
Signing time: Sat 23 Aug 2025 12:00:05 +0000
Manifest this update: Sat 23 Aug 2025 12:00:05 +0000
Manifest next update: Sun 24 Aug 2025 12:00:05 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: sQXcdmGOMHsV8Kb5KD1CDKaTG6IIlEiBgAgpNakYNNw=)
2: c9o5omZ6L0iy-4hOihQzK8OPns4.roa (hash: 1kJZAp6d0yNMzeCujPn+gVtlVbLTFpBiKQFw2wsKEIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:d7:55:47:0d:9b:20:15:7b:ca:e5:c4:44:4f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Aug 23 12:00:05 2025 GMT
Not After : Aug 24 12:00:05 2025 GMT
Subject: CN=db149be354c3a8a6caf62aac74a7d7ba94a065ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:a0:d1:f0:c0:b6:c6:65:a7:b9:b7:2a:70:
ae:fd:f5:cf:3c:82:d2:5d:a4:c6:48:37:6a:60:aa:
46:a9:8f:19:61:a1:9e:6b:bd:47:00:f5:ef:ff:0b:
a8:38:a1:61:2e:93:80:b9:43:79:70:6c:31:93:a6:
73:66:da:da:df:95:05:bd:19:11:1b:e4:d3:99:ed:
53:a4:92:7a:bf:7a:cd:1f:a1:0e:a4:4b:ff:f3:b8:
82:fb:8d:f5:a7:2d:23:d7:f9:f3:36:33:f2:3f:e2:
d6:e8:9f:7f:d9:ce:d3:8c:c9:9a:8a:25:52:4a:33:
ee:99:ec:2a:cd:23:62:f4:53:dc:5b:14:7e:5a:df:
8d:ff:90:bf:64:55:85:3c:f5:a6:ee:4d:3a:b0:71:
63:9a:c3:d4:93:b7:c3:45:b2:ed:5f:ab:2f:56:a6:
22:a7:e0:7a:6a:74:f1:ca:ff:fb:9c:46:d6:98:f7:
7c:9c:8e:05:c8:18:51:f4:c4:86:b0:aa:2f:9a:00:
be:97:6a:2e:e7:88:30:ab:22:84:0f:46:78:78:65:
ab:45:6b:5a:2a:1b:8e:14:68:aa:ae:f5:88:31:91:
b2:48:36:2f:c3:05:ff:73:5b:69:4a:af:ed:ca:ff:
0c:d4:ac:c1:a5:ed:7e:7c:ec:24:66:17:46:39:1a:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:14:9B:E3:54:C3:A8:A6:CA:F6:2A:AC:74:A7:D7:BA:94:A0:65:BA
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:68:32:d9:1a:12:48:48:ed:2c:11:cd:a3:d7:72:ac:6d:c1:
28:26:3b:65:21:2c:ce:12:63:1b:63:c1:76:b9:0b:ee:52:6d:
44:7d:af:4e:be:ad:79:d1:0f:67:9a:80:da:39:1b:ea:f7:c0:
c6:5c:76:51:8c:d0:ca:7a:56:7e:3d:e5:fe:05:60:36:eb:88:
96:16:d3:e4:e7:79:34:4a:8b:1a:7c:8d:e8:32:35:d3:9b:2f:
b2:24:8c:de:e9:07:8e:00:c6:93:4f:eb:1d:ba:8f:d4:7c:a3:
33:1e:49:43:b0:d8:23:8b:f1:ff:cc:b8:ff:e2:1e:0a:20:95:
f9:53:e2:1f:ef:b6:4f:2f:a8:98:95:e3:80:5b:3d:cc:41:5e:
68:fa:2f:f7:ea:7d:1a:32:a2:07:4b:a0:a6:49:23:df:f4:38:
ed:48:95:10:0f:ff:09:ee:47:0b:b5:08:64:33:3a:43:64:53:
ef:98:4f:47:01:ca:09:7b:0d:38:ed:62:a4:cd:1d:5e:b3:d3:
96:09:e8:b0:25:cd:4d:64:0c:3f:eb:33:4c:2a:35:12:01:e2:
27:61:f6:b8:25:e6:dd:d9:20:24:a3:08:64:8e:8e:9c:32:81:
93:b7:c5:72:1d:93:f7:8e:8d:e0:47:47:4e:cc:2a:d4:da:d3:
0a:aa:e5:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzNdVRw2bIBV7yuXERE9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZWM1Yzk0NWQwMzUzNWQ5NjczMDk1MTEwNTQ2YjFjOThl
NjE4NjAwHhcNMjUwODIzMTIwMDA1WhcNMjUwODI0MTIwMDA1WjAzMTEwLwYDVQQD
EyhkYjE0OWJlMzU0YzNhOGE2Y2FmNjJhYWM3NGE3ZDdiYTk0YTA2NWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJKg0fDAtsZlp7m3KnCu/fXPPILS
XaTGSDdqYKpGqY8ZYaGea71HAPXv/wuoOKFhLpOAuUN5cGwxk6ZzZtra35UFvRkR
G+TTme1TpJJ6v3rNH6EOpEv/87iC+431py0j1/nzNjPyP+LW6J9/2c7TjMmaiiVS
SjPumewqzSNi9FPcWxR+Wt+N/5C/ZFWFPPWm7k06sHFjmsPUk7fDRbLtX6svVqYi
p+B6anTxyv/7nEbWmPd8nI4FyBhR9MSGsKovmgC+l2ou54gwqyKED0Z4eGWrRWta
KhuOFGiqrvWIMZGySDYvwwX/c1tpSq/tyv8M1KzBpe1+fOwkZhdGORrDFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsUm+NUw6imyvYqrHSn17qUoGW6MB8GA1UdIwQY
MBaAFN/sXJRdA1NdlnMJURBUaxyY5hhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYt
ZGRkZGVmMjQxMjE2LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mNDA2YzMtMjc4OS00M2E1LWIxZDYtZGRkZGVmMjQxMjE2
LzEvMy14Y2xGMERVMTJXY3dsUkVGUnJISmptR0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2gy2RoS
SEjtLBHNo9dyrG3BKCY7ZSEszhJjG2PBdrkL7lJtRH2vTr6tedEPZ5qA2jkb6vfA
xlx2UYzQynpWfj3l/gVgNuuIlhbT5Od5NEqLGnyN6DI105svsiSM3ukHjgDGk0/r
HbqP1HyjMx5JQ7DYI4vx/8y4/+IeCiCV+VPiH++2Ty+omJXjgFs9zEFeaPov9+p9
GjKiB0ugpkkj3/Q47UiVEA//Ce5HC7UIZDM6Q2RT75hPRwHKCXsNOO1ipM0dXrPT
lgnosCXNTWQMP+szTCo1EgHiJ2H2uCXm3dkgJKMIZI6OnDKBk7fFch2T946N4EdH
Tswq1NrTCqrlrA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:17:17 2025 by rpki-client