Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: t/H7SeU1bDLZKgf18LLC9z5zc6Ylcl/nf5MyLxbCycE=
Subject key identifier: 62:CD:91:35:A9:93:CC:D4:37:06:9C:8F:B4:E4:B9:BB:D5:EC:4A:79
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 0198D7E194AE8CE775A8CA0E7C61BE256703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 15F7
Signing time: Sat 23 Aug 2025 17:02:21 +0000
Manifest this update: Sat 23 Aug 2025 17:02:21 +0000
Manifest next update: Sun 24 Aug 2025 17:02:21 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: 3RqdGhQ6x19RMaFHpJLDuW/+jz8qm90ftrel9SQYuoI=)
2: 6BKOzeR_jkv8Td7naSCpGwK2cbo.roa (hash: NdsdWgq7FNtTGsjv+sGoOHpLX3rHnRlY3SsmvrWzKc4=)
3: gTmhFIzM7If-kzl01cWeEzcqqns.roa (hash: lUpkvjKsmC5D6MNw62q7fvgUR6asOsGbY3c+E0HzKW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:94:ae:8c:e7:75:a8:ca:0e:7c:61:be:25:67:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Aug 23 17:02:21 2025 GMT
Not After : Aug 24 17:02:21 2025 GMT
Subject: CN=62cd9135a993ccd437069c8fb4e4b9bbd5ec4a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:af:43:2b:2d:21:07:5e:a3:0d:e4:b0:27:
f8:a4:60:ec:d5:78:7c:bb:e0:d1:49:9f:c3:a2:e4:
62:e5:6d:8b:26:61:9c:7c:fa:df:43:37:3d:62:2a:
42:d4:62:03:ad:34:c0:42:df:88:07:eb:52:cf:56:
52:3d:93:dc:8e:6d:8e:36:2b:33:95:93:9c:6c:a4:
05:3d:57:48:2d:43:87:8d:f7:55:e3:bd:82:24:ff:
3e:45:45:cc:ed:45:74:8a:71:56:b9:56:ad:db:30:
d5:f3:bd:05:e0:69:5c:69:82:31:ca:95:03:e3:1b:
c4:34:01:81:aa:68:5b:49:61:03:54:44:a4:d7:e4:
f1:d8:a7:03:d0:54:98:70:ba:c7:03:68:b1:d3:b2:
d7:b0:9a:d4:35:34:63:53:35:9c:ed:fb:e8:a1:ed:
8b:07:46:5e:a1:86:93:63:23:1a:14:54:26:50:9e:
8a:45:68:cd:5a:33:11:58:44:92:08:51:64:d3:77:
e0:15:16:ae:50:33:44:87:68:82:fd:f1:0a:fc:a6:
e2:fa:9c:b0:4e:29:14:6d:b3:bc:7e:df:90:40:d1:
51:7d:d0:4e:f2:7b:ae:39:06:6f:1e:d9:58:af:ca:
b7:86:8c:b8:6e:28:aa:93:53:db:74:82:fc:3d:f6:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CD:91:35:A9:93:CC:D4:37:06:9C:8F:B4:E4:B9:BB:D5:EC:4A:79
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a5:c1:54:c4:25:81:1d:a4:ce:5d:04:6f:c3:a0:dd:c1:d5:
64:fd:33:82:2b:12:aa:69:dd:b6:08:b7:22:ee:7f:ad:d6:00:
ad:92:e5:7c:3e:53:4d:c6:b0:93:2d:e5:09:76:ed:3e:41:e1:
87:d0:35:2c:38:10:24:25:82:b6:1a:ea:d5:c9:80:87:cf:f2:
99:ef:44:9c:3e:8c:8b:f4:95:88:14:fa:a2:bf:be:67:99:3a:
9b:c7:dd:4a:15:40:e8:f4:05:d1:22:11:09:b0:ec:23:ae:de:
e7:29:f9:f5:5a:a5:3c:8b:c1:61:01:9b:ba:b1:af:59:41:34:
ef:aa:ab:e9:9e:4c:7c:6d:a1:12:51:5f:90:fe:de:a6:10:24:
0e:3e:7e:15:37:0b:94:5e:96:2c:6d:6d:2c:d6:02:44:40:a6:
d5:26:ec:61:9d:50:1d:25:3e:dc:7a:4b:f3:1d:7b:b5:6f:7a:
a5:40:30:49:2a:a6:70:b1:79:d2:3f:e5:54:3f:24:72:7a:d8:
f4:c8:96:14:cf:e1:76:0a:4f:73:eb:d7:e6:f7:07:82:0a:32:
e3:45:ca:95:38:69:14:a9:70:64:0c:e7:58:bb:77:30:0d:7f:
82:a0:65:b4:dc:bd:3c:48:6e:ec:4f:39:6d:99:55:7f:f4:9b:
b5:35:60:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4ZSujOd1qMoOfGG+JWcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOTgyZjk3OWEyZDI1ZWJiMmRhYjI2NTRiOGMyN2M5Mjhj
ZjVhYzcwHhcNMjUwODIzMTcwMjIxWhcNMjUwODI0MTcwMjIxWjAzMTEwLwYDVQQD
Eyg2MmNkOTEzNWE5OTNjY2Q0MzcwNjljOGZiNGU0YjliYmQ1ZWM0YTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtemvQystIQdeow3ksCf4pGDs1Xh8
u+DRSZ/DouRi5W2LJmGcfPrfQzc9YipC1GIDrTTAQt+IB+tSz1ZSPZPcjm2ONisz
lZOcbKQFPVdILUOHjfdV472CJP8+RUXM7UV0inFWuVat2zDV870F4GlcaYIxypUD
4xvENAGBqmhbSWEDVESk1+Tx2KcD0FSYcLrHA2ix07LXsJrUNTRjUzWc7fvooe2L
B0ZeoYaTYyMaFFQmUJ6KRWjNWjMRWESSCFFk03fgFRauUDNEh2iC/fEK/Kbi+pyw
TikUbbO8ft+QQNFRfdBO8nuuOQZvHtlYr8q3hoy4biiqk1PbdIL8PfbOiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLNkTWpk8zUNwacj7TkubvV7Ep5MB8GA1UdIwQY
MBaAFN2YL5eaLSXrstqyZUuMJ8koz1rHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8zN2VhMTktNmYyNS00MmJjLWFkMjct
OTg4NmNiMWI2NDBlLzEvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8zN2VhMTktNmYyNS00MmJjLWFkMjctOTg4NmNiMWI2NDBl
LzEvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqXBVMQl
gR2kzl0Eb8Og3cHVZP0zgisSqmndtgi3Iu5/rdYArZLlfD5TTcawky3lCXbtPkHh
h9A1LDgQJCWCthrq1cmAh8/yme9EnD6Mi/SViBT6or++Z5k6m8fdShVA6PQF0SIR
CbDsI67e5yn59VqlPIvBYQGburGvWUE076qr6Z5MfG2hElFfkP7ephAkDj5+FTcL
lF6WLG1tLNYCRECm1SbsYZ1QHSU+3HpL8x17tW96pUAwSSqmcLF50j/lVD8kcnrY
9MiWFM/hdgpPc+vX5vcHggoy40XKlThpFKlwZAznWLt3MA1/gqBltNy9PEhu7E85
bZlVf/SbtTVg2w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:31:58 2025 by rpki-client