Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
File: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json)
Hash identifier: LE8SFk8G20oVbpMnFsqcsdjw4b//uM3Q7+UVs5JVzI8=
Subject key identifier: BF:6F:E7:0A:D8:26:2D:08:9D:44:7C:2D:5E:FF:60:0F:E6:22:BB:8A
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial: 0198D583710EEC55092715D981C021EF435B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
Manifest number: 0CA5
Signing time: Sat 23 Aug 2025 06:00:17 +0000
Manifest this update: Sat 23 Aug 2025 06:00:17 +0000
Manifest next update: Sun 24 Aug 2025 06:00:17 +0000
Files and hashes: 1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: fmS2Tzr5jbunyquMvOa2O3oaB3+1/NxE1BQtpDoPm0c=)
2: bJQvsBvbQPoYZP2_LHbwvNkWsqI.roa (hash: 6bSavq+Amxtx/G0AW8vYM/flHBEJUHj3DU6R3v4xOug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:71:0e:ec:55:09:27:15:d9:81:c0:21:ef:43:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Validity
Not Before: Aug 23 06:00:17 2025 GMT
Not After : Aug 24 06:00:17 2025 GMT
Subject: CN=bf6fe70ad8262d089d447c2d5eff600fe622bb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:e3:42:3c:f8:13:36:4a:81:1d:ba:c4:a2:
c8:81:af:a0:c8:66:ab:de:28:13:90:6e:b4:90:9b:
a9:ca:e7:77:31:7e:6d:ef:c2:86:06:75:d3:86:65:
dc:6d:d4:dd:32:db:ca:1f:d2:b2:9c:39:52:e3:3f:
41:92:95:46:02:02:58:e0:25:3e:2d:3d:94:e5:24:
21:00:05:26:8b:9c:2e:9c:9a:59:83:5f:c5:7e:f9:
e5:ec:78:86:ce:b7:f8:98:90:b2:f9:b8:8b:d7:49:
8d:7d:dd:42:85:d4:d7:81:f1:f1:67:e5:f9:f8:bc:
04:d5:6e:45:c2:ea:a6:f7:73:94:f1:1f:eb:de:8b:
2e:4d:6b:5a:39:8e:22:01:7b:86:e4:1d:c9:6a:df:
91:98:d5:3c:22:47:31:ea:9d:c6:b6:67:57:48:93:
be:6d:ad:41:e2:86:28:6c:25:3a:58:37:fa:f7:2d:
3b:62:03:f7:7e:be:fa:18:fe:1e:7f:70:e3:ba:21:
eb:29:d5:52:eb:8a:8d:8e:4b:6d:7b:e5:da:90:61:
0c:4e:16:f6:53:57:d2:16:0c:00:86:b2:a3:e0:5b:
e2:77:79:d9:e6:75:ec:ff:a6:0b:b3:9e:d5:9c:f1:
b9:8e:a8:8d:c1:e7:c0:84:eb:f0:8f:24:c7:7f:17:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6F:E7:0A:D8:26:2D:08:9D:44:7C:2D:5E:FF:60:0F:E6:22:BB:8A
X509v3 Authority Key Identifier:
keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b9:21:ed:c6:15:9b:3d:1a:77:a5:f4:57:de:77:3d:98:74:
7b:22:99:85:14:6a:8f:26:dc:b7:a6:ad:0d:b9:1e:0e:c4:ff:
ce:68:62:7d:29:1b:2c:39:c4:0c:a5:52:23:7c:16:66:79:0c:
e7:51:66:9c:bc:9d:fe:35:42:ba:f0:5c:8b:c3:13:f9:11:b2:
6e:57:6e:33:dd:dc:31:8b:39:4a:6f:92:0d:a1:02:66:ce:46:
6e:5b:55:02:95:08:d8:bf:a2:3e:70:e0:70:c5:31:b9:b7:a0:
cb:5e:99:0f:bd:6e:b1:4e:2a:29:9d:23:f2:3f:5c:02:98:02:
f6:04:9e:2d:6f:d0:6a:12:bd:26:a0:b6:06:94:8b:e1:8b:6c:
c1:67:d0:38:8a:3c:db:85:87:47:4e:be:55:91:c4:5c:ce:7d:
f4:36:82:6d:b9:f8:4c:8b:5d:fe:f3:12:32:79:53:12:cd:74:
cb:9d:3d:dc:8a:89:35:f6:4c:d4:77:dd:8d:59:84:a2:d2:3c:
48:7b:bf:72:ba:8c:1c:48:3a:d0:46:2b:7d:d4:6c:42:8e:32:
86:fa:e1:2c:75:4e:f3:83:0f:b8:d5:4d:1f:5b:37:40:4d:98:
7f:e7:4b:46:1f:50:66:92:a2:69:aa:c8:83:8e:dc:b5:82:be:
c4:20:e1:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg3EO7FUJJxXZgcAh70NbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmE1NTI2MDFjNDc3YzUyYmZjZTRhODhkYmFiZTFiN2Nk
NzJlMTkwHhcNMjUwODIzMDYwMDE3WhcNMjUwODI0MDYwMDE3WjAzMTEwLwYDVQQD
EyhiZjZmZTcwYWQ4MjYyZDA4OWQ0NDdjMmQ1ZWZmNjAwZmU2MjJiYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHPjQjz4EzZKgR26xKLIga+gyGar
3igTkG60kJupyud3MX5t78KGBnXThmXcbdTdMtvKH9KynDlS4z9BkpVGAgJY4CU+
LT2U5SQhAAUmi5wunJpZg1/Ffvnl7HiGzrf4mJCy+biL10mNfd1ChdTXgfHxZ+X5
+LwE1W5Fwuqm93OU8R/r3osuTWtaOY4iAXuG5B3Jat+RmNU8Ikcx6p3GtmdXSJO+
ba1B4oYobCU6WDf69y07YgP3fr76GP4ef3DjuiHrKdVS64qNjktte+XakGEMThb2
U1fSFgwAhrKj4Fvid3nZ5nXs/6YLs57VnPG5jqiNwefAhOvwjyTHfxdX7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9v5wrYJi0InUR8LV7/YA/mIruKMB8GA1UdIwQY
MBaAFNz6VSYBxHfFK/zkqI26vht81y4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BwVkpnSEVkOFVyX09Tb2picS1HM3pYTGhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NWU4YzUtY2JkMC00MWQ2LWEwYmQt
NDdjNjNjZGZmZDA4LzEvM1BwVkpnSEVkOFVyX09Tb2picS1HM3pYTGhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83NWU4YzUtY2JkMC00MWQ2LWEwYmQtNDdjNjNjZGZmZDA4
LzEvM1BwVkpnSEVkOFVyX09Tb2picS1HM3pYTGhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrkh7cYV
mz0ad6X0V953PZh0eyKZhRRqjybct6atDbkeDsT/zmhifSkbLDnEDKVSI3wWZnkM
51FmnLyd/jVCuvBci8MT+RGyblduM93cMYs5Sm+SDaECZs5GbltVApUI2L+iPnDg
cMUxubegy16ZD71usU4qKZ0j8j9cApgC9gSeLW/QahK9JqC2BpSL4YtswWfQOIo8
24WHR06+VZHEXM599DaCbbn4TItd/vMSMnlTEs10y5093IqJNfZM1HfdjVmEotI8
SHu/crqMHEg60EYrfdRsQo4yhvrhLHVO84MPuNVNH1s3QE2Yf+dLRh9QZpKiaarI
g47ctYK+xCDhMA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:47 2025 by rpki-client