Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: aEwdiQ0BIrcbMX98DdmtGEbJmX8sHA0QQt5xG7Xi0BQ=
Subject key identifier: 7E:F4:C7:76:1A:16:A2:84:26:78:53:94:DB:48:49:AD:5C:87:E6:74
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 0198D583777C3DC1032D705FEAE8742586C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 06:00:19 +0000
Manifest this update: Sat 23 Aug 2025 06:00:19 +0000
Manifest next update: Sun 24 Aug 2025 06:00:19 +0000
Files and hashes: 1: 1-r8ngTnAMIWnigi3kZKRlPxzAEg.roa (hash: 4upInjfh8BMDhZW1GMRFLRcUKFy4sgss61UjVbuCcN4=)
2: 3bHFI98fNrO-AI7iYMdoY6Cy4Ec.roa (hash: jNavEGcWKNfNKB84/MmKoUJXT5oHj4PAQhOkM5ErTv4=)
3: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: PDIneJr4iQqbotN+M1rtZSK0TIyAH7RqIWh5h6gPpMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:77:7c:3d:c1:03:2d:70:5f:ea:e8:74:25:86:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Aug 23 06:00:19 2025 GMT
Not After : Aug 24 06:00:19 2025 GMT
Subject: CN=7ef4c7761a16a28426785394db4849ad5c87e674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:11:2c:1a:bc:a6:4a:0c:05:5d:b2:f7:97:
5a:c1:e0:22:cf:af:55:fb:e3:7e:a3:9b:ba:c3:03:
1b:b9:8a:71:c6:42:fd:55:56:1d:f9:14:58:da:2b:
61:05:82:bd:ea:e2:12:01:d3:1f:45:10:bb:5e:27:
2a:65:63:0a:a9:21:41:7f:59:71:9e:80:5c:68:fc:
06:42:18:39:56:3e:61:27:9a:8e:0c:49:9c:29:f9:
92:7f:89:34:82:1a:68:76:fa:75:04:48:fc:4c:ac:
75:09:86:31:93:c1:15:59:83:3a:a5:0c:3c:c9:ff:
97:e3:99:95:b3:f6:d8:54:b1:71:db:75:1c:56:78:
30:05:f9:ea:7b:f7:10:aa:5b:ea:c4:e1:49:bd:df:
d6:2d:cb:da:6a:bc:ba:04:4f:7b:22:3d:9e:8a:b6:
e3:8f:15:86:9a:67:52:98:b0:8d:e0:9b:8d:43:fb:
53:29:bf:4b:a9:3b:27:86:a6:b5:74:c5:ba:e8:02:
28:06:b4:82:ef:aa:c4:78:f7:4f:ac:7d:54:f9:a6:
87:a5:db:7a:56:12:fa:9b:92:22:60:8e:19:cf:a3:
c1:54:57:0e:32:c4:87:9c:3f:5e:b1:e5:75:24:3b:
a6:81:ad:48:56:53:8e:c4:76:4f:17:37:fe:54:6b:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F4:C7:76:1A:16:A2:84:26:78:53:94:DB:48:49:AD:5C:87:E6:74
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b7:ad:55:08:bb:2e:08:3d:09:63:89:24:1d:ed:a2:19:32:
15:c7:a5:63:f5:5e:e1:ff:f7:74:ae:3c:df:f5:75:59:f4:f9:
ca:54:67:9a:aa:32:5e:45:70:21:b3:cf:c7:4d:e6:4f:30:53:
84:cb:a1:5c:c2:b9:52:29:06:ab:da:86:4f:93:eb:01:f6:31:
2a:9d:ce:45:f9:97:cf:fa:0a:6c:86:85:4a:b2:75:c3:9a:ce:
5c:46:3c:57:f4:75:da:60:f0:1e:55:8a:5c:f6:19:33:b7:45:
be:0d:fb:3d:15:d8:af:c2:ca:a5:68:5c:56:eb:83:23:5b:65:
a1:e9:c3:2d:24:c1:a2:bf:0c:bc:e6:4f:41:84:43:4c:34:ac:
5c:c7:9c:cb:ab:d4:f4:0e:9a:70:d4:d5:a9:df:91:a1:2e:70:
2e:43:80:a1:cb:97:96:ec:4e:2e:51:48:31:39:b7:d2:5c:65:
c9:33:67:93:2e:81:4e:6e:7e:1a:15:30:58:6d:75:69:88:e3:
ef:ce:72:a0:c9:e3:7b:7b:b9:70:20:f4:87:2d:d0:96:64:cd:
05:f2:57:97:f8:ce:b8:ca:4e:50:fa:bf:3b:8b:5b:55:fa:89:
8c:6d:66:e8:04:3d:44:d8:3b:43:45:0f:d3:16:ac:97:90:76:
9a:7a:af:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg3d8PcEDLXBf6uh0JYbDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTBkNDMyOTNjZmViZjg3ZTdlYWIyYjBkNTUzZmQyMWE2
ZTk2NDEwHhcNMjUwODIzMDYwMDE5WhcNMjUwODI0MDYwMDE5WjAzMTEwLwYDVQQD
Eyg3ZWY0Yzc3NjFhMTZhMjg0MjY3ODUzOTRkYjQ4NDlhZDVjODdlNjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosERLBq8pkoMBV2y95daweAiz69V
++N+o5u6wwMbuYpxxkL9VVYd+RRY2ithBYK96uISAdMfRRC7XicqZWMKqSFBf1lx
noBcaPwGQhg5Vj5hJ5qODEmcKfmSf4k0ghpodvp1BEj8TKx1CYYxk8EVWYM6pQw8
yf+X45mVs/bYVLFx23UcVngwBfnqe/cQqlvqxOFJvd/WLcvaary6BE97Ij2eirbj
jxWGmmdSmLCN4JuNQ/tTKb9LqTsnhqa1dMW66AIoBrSC76rEePdPrH1U+aaHpdt6
VhL6m5IiYI4Zz6PBVFcOMsSHnD9eseV1JDumga1IVlOOxHZPFzf+VGt9WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH70x3YaFqKEJnhTlNtISa1ch+Z0MB8GA1UdIwQY
MBaAFN6Q1DKTz+v4fn6rKw1VP9IabpZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODkt
NTNlZGM2MjZiMjg3LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82NDdlYmEtZDY2Ni00OWM3LWEwODktNTNlZGM2MjZiMjg3
LzEvM3BEVU1wUFA2X2gtZnFzckRWVV8waHB1bGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbetVQi7
Lgg9CWOJJB3tohkyFcelY/Ve4f/3dK483/V1WfT5ylRnmqoyXkVwIbPPx03mTzBT
hMuhXMK5UikGq9qGT5PrAfYxKp3ORfmXz/oKbIaFSrJ1w5rOXEY8V/R12mDwHlWK
XPYZM7dFvg37PRXYr8LKpWhcVuuDI1tloenDLSTBor8MvOZPQYRDTDSsXMecy6vU
9A6acNTVqd+RoS5wLkOAocuXluxOLlFIMTm30lxlyTNnky6BTm5+GhUwWG11aYjj
785yoMnje3u5cCD0hy3QlmTNBfJXl/jOuMpOUPq/O4tbVfqJjG1m6AQ9RNg7Q0UP
0xasl5B2mnqvRQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:32 2025 by rpki-client