Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
File: 3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json)
Hash identifier: 2RO4ZbiwQCRj2wG2wXb4w7fYE0bZKdWaafGe6RyDWiw=
Subject key identifier: F7:2E:9B:AD:84:66:81:F5:04:D3:15:F1:E7:14:EF:AA:D5:98:94:44
Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
Certificate issuer: /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Certificate serial: 0198D7A95E46539376B4199C33C2879D8F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
Manifest number: 1085
Signing time: Sat 23 Aug 2025 16:00:57 +0000
Manifest this update: Sat 23 Aug 2025 16:00:57 +0000
Manifest next update: Sun 24 Aug 2025 16:00:57 +0000
Files and hashes: 1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: B2qg3qXe36n7daaEHxRD4ovqRHINUm5XCQA8LAB6VLQ=)
2: AuGSVrNkGgUtthLzU1YbunCRJmA.roa (hash: N+p3SVnY5s1RjPh5Td733eJn6W460syQCiw/MVZ+pqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:5e:46:53:93:76:b4:19:9c:33:c2:87:9d:8f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Validity
Not Before: Aug 23 16:00:57 2025 GMT
Not After : Aug 24 16:00:57 2025 GMT
Subject: CN=f72e9bad846681f504d315f1e714efaad5989444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:30:a6:d0:95:0f:4e:ee:42:36:37:4a:64:
0b:f4:9d:53:45:b2:ad:b6:54:01:43:91:14:7a:96:
65:58:ac:aa:f1:eb:98:f5:b9:69:56:f3:2c:02:f7:
ed:36:87:d2:0c:7b:2c:28:d3:a9:a2:93:c6:c7:3f:
3a:1c:1b:24:e1:3d:6d:9e:c1:91:09:73:ef:f0:f8:
67:58:51:c0:88:00:76:2d:cc:98:60:4a:7d:b6:7c:
a2:35:0d:1c:93:9d:5e:e4:56:88:76:94:f7:67:a5:
3e:1b:d9:91:15:41:8e:c4:5b:4a:a3:a7:34:e0:0d:
5a:48:0f:dd:f3:ca:b6:a1:6e:52:25:ae:b6:3d:d1:
c2:d3:a2:3b:6d:08:b3:a2:0e:f4:fe:43:e2:c8:40:
c2:35:aa:57:ca:82:1b:09:fa:2f:e1:61:0b:21:84:
0e:0a:a1:a3:9f:98:7f:59:75:73:d0:12:e8:d8:c0:
5b:4a:87:3b:08:9a:92:4f:ee:35:92:72:26:64:42:
aa:2b:8b:27:4f:f7:bf:bf:61:ad:fa:51:3c:d5:14:
ae:c0:6b:f5:ab:73:a4:1d:b1:31:26:8c:f7:6c:7d:
69:28:1c:ca:d2:8b:33:89:50:20:ee:fe:11:6f:a1:
04:17:0a:c8:9f:f3:7b:09:1c:c1:f1:17:b1:65:3e:
4c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2E:9B:AD:84:66:81:F5:04:D3:15:F1:E7:14:EF:AA:D5:98:94:44
X509v3 Authority Key Identifier:
keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:01:f3:50:91:12:f7:92:fa:df:ba:19:2e:22:3e:bc:1f:1f:
e3:8b:e0:d7:f4:18:0d:51:a0:4f:78:5c:1d:4c:48:31:07:6f:
ae:dc:7f:94:00:a0:71:24:81:4e:01:ad:98:e9:78:59:3b:4e:
5f:69:bd:e9:ff:6c:82:72:cf:e2:86:9b:c3:94:9e:f0:fb:52:
77:ed:87:a2:7b:29:24:b4:a1:4e:0f:8c:0c:5c:1d:a5:48:6d:
44:1c:2f:bf:a2:f5:08:6a:83:9b:46:4d:ce:a9:a3:69:dc:40:
f5:66:13:02:05:f2:fb:ec:11:51:a5:78:d5:17:a1:67:e9:c7:
96:10:4c:82:66:84:52:36:b3:95:10:0e:bf:b1:7d:11:d8:bb:
d6:68:32:56:d7:6d:56:d4:45:2a:4f:71:76:0b:75:8f:4c:d8:
b9:d5:63:67:55:cf:63:4e:07:d6:30:4e:43:6c:68:bd:18:10:
e6:e1:fb:ee:96:9e:2a:7b:a6:69:36:7c:b0:c9:0d:99:4b:f8:
ae:03:56:7e:aa:63:13:57:21:16:d8:1b:88:42:09:59:05:e7:
39:23:a5:31:38:96:18:50:d3:ab:bb:94:52:73:da:20:f7:a7:
5a:7d:28:54:e7:ee:27:5c:90:48:31:a8:e2:08:59:29:4f:96:
77:b1:d4:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqV5GU5N2tBmcM8KHnY8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZjg1YzM2YzY5NmQ1ZGIyY2JiNDhmZDQzZTgyMTczN2Vl
MzQyMjcwHhcNMjUwODIzMTYwMDU3WhcNMjUwODI0MTYwMDU3WjAzMTEwLwYDVQQD
EyhmNzJlOWJhZDg0NjY4MWY1MDRkMzE1ZjFlNzE0ZWZhYWQ1OTg5NDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEYwptCVD07uQjY3SmQL9J1TRbKt
tlQBQ5EUepZlWKyq8euY9blpVvMsAvftNofSDHssKNOpopPGxz86HBsk4T1tnsGR
CXPv8PhnWFHAiAB2LcyYYEp9tnyiNQ0ck51e5FaIdpT3Z6U+G9mRFUGOxFtKo6c0
4A1aSA/d88q2oW5SJa62PdHC06I7bQizog70/kPiyEDCNapXyoIbCfov4WELIYQO
CqGjn5h/WXVz0BLo2MBbSoc7CJqST+41knImZEKqK4snT/e/v2Gt+lE81RSuwGv1
q3OkHbExJoz3bH1pKBzK0osziVAg7v4Rb6EEFwrIn/N7CRzB8RexZT5MDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcum62EZoH1BNMV8ecU76rVmJREMB8GA1UdIwQY
MBaAFNz4XDbGltXbLLtI/UPoIXN+40InMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jZmJjNjItNWQ1NC00MzI3LWIwNzIt
MGY1MmY4NjcxNzhkLzEvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9jZmJjNjItNWQ1NC00MzI3LWIwNzItMGY1MmY4NjcxNzhk
LzEvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwHzUJES
95L637oZLiI+vB8f44vg1/QYDVGgT3hcHUxIMQdvrtx/lACgcSSBTgGtmOl4WTtO
X2m96f9sgnLP4oabw5Se8PtSd+2HonspJLShTg+MDFwdpUhtRBwvv6L1CGqDm0ZN
zqmjadxA9WYTAgXy++wRUaV41RehZ+nHlhBMgmaEUjazlRAOv7F9Edi71mgyVtdt
VtRFKk9xdgt1j0zYudVjZ1XPY04H1jBOQ2xovRgQ5uH77paeKnumaTZ8sMkNmUv4
rgNWfqpjE1chFtgbiEIJWQXnOSOlMTiWGFDTq7uUUnPaIPenWn0oVOfuJ1yQSDGo
4ghZKU+Wd7HUUA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:34:54 2025 by rpki-client