Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
File: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json)
Hash identifier: 1p254rJTSoR41ybt7iVXRXJ58UKTxpTQyw3vk8sPwaU=
Subject key identifier: D1:A4:8B:D4:78:F7:78:33:1E:AA:02:54:56:9A:6A:8E:31:7A:28:04
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Certificate issuer: /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial: 0198D4DFCB3E72C185B4D774C3A9C1FC2A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
Manifest number: 156A
Signing time: Sat 23 Aug 2025 03:01:32 +0000
Manifest this update: Sat 23 Aug 2025 03:01:32 +0000
Manifest next update: Sun 24 Aug 2025 03:01:32 +0000
Files and hashes: 1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: f2RAydGKJPw5DD7g9GCddk6DRAs66UZGpZFDVHZzlHo=)
2: LYPvA08Q5up42ir_ROLNJePR6WM.roa (hash: 2Ysa/oCUxmnS7fKzOGdKW8YJA2KVw4PdW/o1jAQ6yws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:cb:3e:72:c1:85:b4:d7:74:c3:a9:c1:fc:2a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Validity
Not Before: Aug 23 03:01:32 2025 GMT
Not After : Aug 24 03:01:32 2025 GMT
Subject: CN=d1a48bd478f778331eaa0254569a6a8e317a2804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:b4:e6:61:a4:ef:d7:2e:91:8e:ee:7a:9e:
4e:a2:c0:cb:e6:cd:91:05:92:37:f2:3a:1d:8e:4a:
47:61:0b:bc:72:18:fb:5f:e4:bc:06:f4:24:ac:a0:
42:68:39:28:3e:ac:29:46:39:a8:c2:8f:03:e4:1d:
d9:ce:2f:4f:64:12:26:92:7e:20:d5:49:43:dd:33:
55:a8:3e:a8:8d:67:f0:1a:11:43:0a:3b:33:ce:82:
b4:d2:3b:67:75:77:f8:6a:89:33:c7:cf:d6:ab:01:
87:03:f0:0e:3f:e4:24:a3:ef:e2:bc:90:f5:58:7f:
4c:c4:3d:c0:48:d9:f8:50:e7:04:cb:3e:0f:bb:1d:
52:5d:b7:86:fe:92:af:f4:c4:98:d0:be:a9:7b:67:
80:13:7b:b9:ac:64:a6:d4:10:71:ab:43:68:33:c6:
5b:d5:0c:b0:f1:ae:19:12:38:52:e5:a1:94:91:f8:
89:88:64:48:30:a6:3a:fc:63:31:95:3a:fe:75:30:
98:46:17:11:cb:aa:27:99:aa:c8:55:8a:dd:f8:4f:
b7:71:c8:6c:d5:f9:3f:2c:3b:a8:82:fe:09:15:c6:
1b:df:bc:f4:6b:0b:77:d9:79:c1:ee:65:5a:74:67:
73:bc:59:76:bf:2b:ca:30:d4:38:5c:c5:9e:1a:ef:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A4:8B:D4:78:F7:78:33:1E:AA:02:54:56:9A:6A:8E:31:7A:28:04
X509v3 Authority Key Identifier:
keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:5a:1c:5c:8d:25:41:74:c2:25:f1:db:f1:60:b0:fe:1f:c7:
69:13:91:c1:51:94:1d:35:68:3c:2d:e6:41:7f:93:12:ca:2e:
47:35:d5:27:73:89:4c:f7:ef:fb:fb:51:68:aa:38:76:fd:bf:
9c:89:f9:4e:36:8d:3d:ed:e7:33:8b:79:1c:06:9e:80:85:21:
92:b9:ac:0c:9c:69:74:1d:41:db:ec:4b:15:a7:4f:b6:95:35:
fd:c7:5b:c0:03:7b:98:c8:db:d3:14:9b:56:63:78:1b:7f:6d:
94:79:54:ec:4c:d2:ca:5a:0b:a2:0e:87:37:65:82:c3:cc:ca:
e8:68:31:a5:26:7f:11:14:28:e1:fb:88:8c:a8:e6:c3:ef:9e:
fb:38:a6:a7:28:72:54:76:81:4f:70:6f:f5:df:16:8a:d4:d7:
61:ee:d9:01:11:95:9d:55:97:c1:53:e3:48:5e:67:43:9c:c0:
ff:64:5e:79:82:85:c9:b4:44:d4:b5:21:d6:9a:b7:2d:72:1c:
09:b5:cd:79:71:e8:dd:59:0b:f7:4e:60:01:8e:a7:37:cc:74:
3d:45:74:ac:0d:46:cd:65:46:ca:26:cb:f8:e7:dc:c7:1d:dc:
a8:68:fb:cb:4b:80:6e:ab:0f:ec:f4:5d:07:40:8a:97:63:13:
6b:00:bb:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU38s+csGFtNd0w6nB/CoRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjM2YyNjM5ZmZjNzg4NzFhZDY0YmZlZDcxYjc5NTRiYzkw
ZGVhYjUwHhcNMjUwODIzMDMwMTMyWhcNMjUwODI0MDMwMTMyWjAzMTEwLwYDVQQD
EyhkMWE0OGJkNDc4Zjc3ODMzMWVhYTAyNTQ1NjlhNmE4ZTMxN2EyODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgW05mGk79cukY7uep5OosDL5s2R
BZI38jodjkpHYQu8chj7X+S8BvQkrKBCaDkoPqwpRjmowo8D5B3Zzi9PZBImkn4g
1UlD3TNVqD6ojWfwGhFDCjszzoK00jtndXf4aokzx8/WqwGHA/AOP+Qko+/ivJD1
WH9MxD3ASNn4UOcEyz4Pux1SXbeG/pKv9MSY0L6pe2eAE3u5rGSm1BBxq0NoM8Zb
1Qyw8a4ZEjhS5aGUkfiJiGRIMKY6/GMxlTr+dTCYRhcRy6onmarIVYrd+E+3cchs
1fk/LDuogv4JFcYb37z0awt32XnB7mVadGdzvFl2vyvKMNQ4XMWeGu92vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGki9R493gzHqoCVFaaao4xeigEMB8GA1UdIwQY
MBaAFNw/Jjn/x4hxrWS/7XG3lUvJDeq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80OGY0OGMtYmFhNS00NGEyLThmMDct
OWNmZjNmZTA1MTgwLzEvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80OGY0OGMtYmFhNS00NGEyLThmMDctOWNmZjNmZTA1MTgw
LzEvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1ocXI0l
QXTCJfHb8WCw/h/HaRORwVGUHTVoPC3mQX+TEsouRzXVJ3OJTPfv+/tRaKo4dv2/
nIn5TjaNPe3nM4t5HAaegIUhkrmsDJxpdB1B2+xLFadPtpU1/cdbwAN7mMjb0xSb
VmN4G39tlHlU7EzSyloLog6HN2WCw8zK6GgxpSZ/ERQo4fuIjKjmw++e+zimpyhy
VHaBT3Bv9d8WitTXYe7ZARGVnVWXwVPjSF5nQ5zA/2ReeYKFybRE1LUh1pq3LXIc
CbXNeXHo3VkL905gAY6nN8x0PUV0rA1GzWVGyibL+Ofcxx3cqGj7y0uAbqsP7PRd
B0CKl2MTawC7TA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:14 2025 by rpki-client