Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File: 3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier: rxUtKcI17S8uEYUaUSdDWUJs9C8ZJKUxh7t9FE79tT4=
Subject key identifier: 26:A9:40:37:65:A1:9B:92:FE:BF:71:79:12:80:99:36:E1:4D:D4:AF
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 0198D5BBE694F467F81468F51E3AB80FB34C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number: 05C2
Signing time: Sat 23 Aug 2025 07:01:57 +0000
Manifest this update: Sat 23 Aug 2025 07:01:57 +0000
Manifest next update: Sun 24 Aug 2025 07:01:57 +0000
Files and hashes: 1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: 5I3N+uW0a6uKz1MC3qPaKOZOkLW9RgtbTyGelcnVwVs=)
2: LhFRmWbupiZRrTcY1BMgZx0XNm0.roa (hash: 1sSu4Xw0ICcOgnrgocU5c3W/gRE/T8H+tT4ltd3ayqM=)
3: RVm4PleqV8m6zGkcPiKBRGWO1cI.roa (hash: 3p0hXdk+JmHhQEiq1MExor2f3lGKmZyobEJTxOu9buE=)
4: ZqlSlV8xEjtTIPrwJS75wdXWNMY.roa (hash: IHSrkovQ51TOwmRPUF5AIxkAHRZYZBJiA4cpIYri+jU=)
5: eHnC0ZqJNqxv3y7mak9QRJMJw-o.roa (hash: +LqAwsdmA3jPuO+2IgsX5kZHBO+HuvNtjbjVsU8ziig=)
6: f25v4uVZY4JbTyMqNXKXGA35WKk.roa (hash: Cmqw5364kiAvR31aujca3rQebhgV1WXm34C80bI/lTU=)
7: q13-9N0ob4EuZWCOBMGdrrmovYs.roa (hash: eeKbIgwTI3WJxgPRBQEnAOsOn9kelg3Nk/9eNVvZbRQ=)
8: xJ0_FRg6EplS-mzoDbYvP1y_mUw.roa (hash: 7evtOJQCPXqekbIigyPzPGbzquzgJixLY3c438GOL/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e6:94:f4:67:f8:14:68:f5:1e:3a:b8:0f:b3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Aug 23 07:01:57 2025 GMT
Not After : Aug 24 07:01:57 2025 GMT
Subject: CN=26a9403765a19b92febf717912809936e14dd4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:71:48:ac:f8:00:ba:8f:86:a7:8f:2f:1b:66:
8a:61:90:cf:e4:6f:49:04:4e:9d:50:00:5a:d6:0b:
70:81:dd:66:e0:35:bb:2a:58:81:b4:4c:2e:4b:f0:
26:f3:0c:31:5a:77:02:dd:25:77:ad:86:c9:d4:f6:
d9:8c:71:e8:30:fe:81:4f:2a:b2:4c:2c:59:73:95:
0b:00:dd:fd:c7:b9:03:86:d1:0e:e4:21:5d:f5:da:
67:07:68:4c:7e:b7:6f:fb:0f:30:f4:3e:4f:d1:78:
05:04:72:ef:fd:03:72:a7:12:56:5c:9f:61:3e:09:
40:d3:cd:9e:b6:52:7b:8a:ae:71:de:14:6c:56:c6:
f1:ae:27:bb:5c:56:d6:e1:1b:db:15:ef:03:c3:06:
62:c4:53:7a:9c:c5:20:d3:3a:43:c4:ff:74:13:75:
4d:0a:20:77:aa:64:de:de:c3:a1:8a:ad:b8:74:ed:
08:7e:db:ca:33:55:89:7a:28:31:d4:61:03:f8:c4:
f2:8a:77:10:87:d3:7e:ea:0b:92:6b:19:0e:3a:b7:
7e:50:2a:f2:52:7e:61:26:d9:98:6f:4b:d9:fe:e4:
0a:74:dc:9d:43:26:21:98:1f:e1:2c:38:a3:04:86:
59:4f:71:74:bf:28:3f:5a:9c:d8:57:bf:0f:a2:88:
35:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A9:40:37:65:A1:9B:92:FE:BF:71:79:12:80:99:36:E1:4D:D4:AF
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f3:f2:2e:f6:b8:49:1e:d0:ca:ed:e2:89:d9:d5:5d:a6:9d:
1f:cb:f3:51:2f:c1:34:59:a3:6b:7e:98:39:50:1d:7d:94:fc:
13:58:80:05:1f:02:2f:70:17:42:5e:40:f9:de:71:4a:db:9c:
9f:e8:2a:58:ac:cd:84:10:b4:ee:61:27:85:5e:e0:b3:93:85:
73:48:7a:8d:37:14:2e:55:da:87:35:93:89:b2:27:3e:4a:dd:
db:bb:4a:36:84:68:57:1c:23:c4:69:a4:f7:8c:ca:31:46:72:
79:d2:86:6d:b4:d4:48:bd:44:b9:4e:42:8d:e3:c0:26:be:63:
27:a2:20:ed:64:38:6c:51:c6:8e:47:17:48:98:22:e6:d6:ab:
d3:66:e7:3c:23:e1:bd:c0:46:8a:9a:b7:1c:db:71:c3:6c:5b:
19:8b:68:76:dc:1d:30:15:ce:df:06:db:d4:96:e4:a5:5f:89:
71:e0:3d:f9:39:76:d1:f4:77:68:a6:2c:ba:2c:0a:8a:fd:ea:
04:8e:60:35:f3:eb:17:c1:7d:ad:73:cd:cb:84:cf:8d:45:cf:
f3:01:0c:aa:97:ba:90:1e:7f:90:3c:fd:59:51:6f:40:da:c2:
13:4a:bb:fc:1a:81:c9:6c:ba:2b:f4:ee:c9:6e:16:f2:27:14:
f8:7e:76:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu+aU9Gf4FGj1Hjq4D7NMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2ZkYzRiZjMzYmQ4MGZlMTI4ZDc1Njg0M2Y2MGIzOWQ1
YmVlZTMwHhcNMjUwODIzMDcwMTU3WhcNMjUwODI0MDcwMTU3WjAzMTEwLwYDVQQD
EygyNmE5NDAzNzY1YTE5YjkyZmViZjcxNzkxMjgwOTkzNmUxNGRkNGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3FIrPgAuo+Gp48vG2aKYZDP5G9J
BE6dUABa1gtwgd1m4DW7KliBtEwuS/Am8wwxWncC3SV3rYbJ1PbZjHHoMP6BTyqy
TCxZc5ULAN39x7kDhtEO5CFd9dpnB2hMfrdv+w8w9D5P0XgFBHLv/QNypxJWXJ9h
PglA082etlJ7iq5x3hRsVsbxrie7XFbW4RvbFe8DwwZixFN6nMUg0zpDxP90E3VN
CiB3qmTe3sOhiq24dO0IftvKM1WJeigx1GED+MTyincQh9N+6guSaxkOOrd+UCry
Un5hJtmYb0vZ/uQKdNydQyYhmB/hLDijBIZZT3F0vyg/WpzYV78Poog1DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCapQDdloZuS/r9xeRKAmTbhTdSvMB8GA1UdIwQY
MBaAFN8/3EvzO9gP4SjXVoQ/YLOdW+7jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMt
YTQ3M2VjNTQxMGMzLzEvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zMjVjZDMtN2VkYi00MDI2LTg1ODMtYTQ3M2VjNTQxMGMz
LzEvM3pfY1NfTTcyQV9oS05kV2hEOWdzNTFiN3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPPyLva4
SR7Qyu3iidnVXaadH8vzUS/BNFmja36YOVAdfZT8E1iABR8CL3AXQl5A+d5xStuc
n+gqWKzNhBC07mEnhV7gs5OFc0h6jTcULlXahzWTibInPkrd27tKNoRoVxwjxGmk
94zKMUZyedKGbbTUSL1EuU5CjePAJr5jJ6Ig7WQ4bFHGjkcXSJgi5tar02bnPCPh
vcBGipq3HNtxw2xbGYtodtwdMBXO3wbb1JbkpV+JceA9+Tl20fR3aKYsuiwKiv3q
BI5gNfPrF8F9rXPNy4TPjUXP8wEMqpe6kB5/kDz9WVFvQNrCE0q7/BqByWy6K/Tu
yW4W8icU+H52VA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:08 2025 by rpki-client