Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
File: 3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json)
Hash identifier: LsjEe7rYFR9W+Azp3HjJJKO4iUda2EG+/ATGmeCxCp4=
Subject key identifier: BE:D4:21:37:29:B1:5F:4F:99:7B:7D:5D:40:87:58:6C:C7:6A:E2:E7
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 0198D7735C89B3E001980D021C9E848CDA6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
Manifest number: 05B2
Signing time: Sat 23 Aug 2025 15:01:58 +0000
Manifest this update: Sat 23 Aug 2025 15:01:58 +0000
Manifest next update: Sun 24 Aug 2025 15:01:58 +0000
Files and hashes: 1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: bO1toReFDcf01Hovf7iMJC0fq96iyvxYZWmDmZkPbw8=)
2: S2et9u3-k4c1RbSQYpZyfZKneKE.roa (hash: Ha/+fD6TOAGH3fDS11rGJPIxFiX3z4IR9RxVgbeKPDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:5c:89:b3:e0:01:98:0d:02:1c:9e:84:8c:da:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: Aug 23 15:01:58 2025 GMT
Not After : Aug 24 15:01:58 2025 GMT
Subject: CN=bed4213729b15f4f997b7d5d4087586cc76ae2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:59:50:96:01:ac:5b:13:ca:f2:ca:ab:1e:
96:b0:43:af:d9:be:f7:31:fb:2a:98:b4:b3:47:35:
ec:45:29:36:bd:c5:82:f1:61:b7:37:21:46:9b:37:
72:28:b8:df:42:87:83:1c:11:b0:91:1a:47:7b:3f:
ca:d2:98:93:dc:d7:44:98:ce:de:7d:a0:3d:87:30:
25:1b:3b:55:17:81:5c:7c:f1:f1:ea:9f:3f:0c:8f:
80:85:b5:54:b3:44:67:10:38:f5:e6:36:c0:98:23:
65:24:6f:24:77:e2:2a:b1:06:91:e3:c0:c2:a1:b6:
e8:c6:9d:19:ff:28:5d:40:3a:b0:39:a5:04:4d:c6:
c4:10:53:08:73:be:81:99:bf:58:fd:f3:d8:7f:ad:
c7:95:df:f5:20:db:f3:e8:05:84:03:f8:59:9c:50:
e5:df:51:89:4b:46:29:07:78:27:4f:26:6a:da:e4:
cf:96:d3:5f:6b:a9:2e:b5:8e:e7:4c:97:69:72:7d:
a6:b4:03:5d:44:da:47:c7:24:2e:74:26:29:57:2e:
eb:41:57:3d:cc:41:c2:17:34:eb:3f:f1:5b:9e:ae:
35:5d:3f:c6:5b:d6:dc:16:33:17:29:55:05:9d:3d:
0b:77:03:c8:fb:eb:4c:60:7f:f8:1f:80:ad:c1:d6:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D4:21:37:29:B1:5F:4F:99:7B:7D:5D:40:87:58:6C:C7:6A:E2:E7
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:eb:1d:c1:ff:51:c9:ae:b5:67:d5:49:6c:aa:b1:bf:70:a3:
74:9d:b3:c4:30:f5:55:a7:0b:0d:e3:ae:97:c1:f3:4a:48:fc:
93:ce:c4:fd:a5:c1:51:79:69:3d:ee:ee:73:10:7f:5c:4c:f1:
d3:c0:8d:b2:ef:27:1b:e7:bf:09:79:d7:0f:a3:43:cd:e6:13:
02:8d:2e:81:4b:5c:4e:da:7b:b4:58:80:81:4b:d8:97:ca:02:
04:12:32:06:34:ae:83:94:71:4e:a3:60:9f:9c:53:cc:aa:cc:
cd:f4:4d:0f:33:12:5b:4f:9e:83:e5:0c:24:d7:bf:03:e0:63:
81:c4:0f:a7:6e:18:56:95:bd:fc:6c:ea:13:78:28:42:4e:9b:
7f:ed:a2:f6:bb:82:a0:7c:e3:70:d9:38:34:84:66:9a:e5:1e:
e6:36:bf:b0:1f:ce:ed:27:54:e2:d8:e6:10:a0:f7:2d:58:66:
ce:b0:e8:c7:19:dc:17:70:49:d0:bd:c9:1b:6c:3d:db:d1:bd:
0b:48:67:18:b6:b2:50:85:98:35:a6:1d:d7:42:8e:6c:92:af:
6f:db:04:03:e9:58:77:5e:1e:35:35:89:33:a5:dc:59:67:1b:
1b:f8:62:8b:17:73:1b:63:60:15:51:cf:82:72:49:f7:7e:98:
c8:62:ad:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc1yJs+ABmA0CHJ6EjNpvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTgyNzA3YzQ0NGMzMTA2NGIxODk5YzU5N2U5ZWZkNzM0
MzhmOTIwHhcNMjUwODIzMTUwMTU4WhcNMjUwODI0MTUwMTU4WjAzMTEwLwYDVQQD
EyhiZWQ0MjEzNzI5YjE1ZjRmOTk3YjdkNWQ0MDg3NTg2Y2M3NmFlMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqZZUJYBrFsTyvLKqx6WsEOv2b73
MfsqmLSzRzXsRSk2vcWC8WG3NyFGmzdyKLjfQoeDHBGwkRpHez/K0piT3NdEmM7e
faA9hzAlGztVF4FcfPHx6p8/DI+AhbVUs0RnEDj15jbAmCNlJG8kd+IqsQaR48DC
obboxp0Z/yhdQDqwOaUETcbEEFMIc76Bmb9Y/fPYf63Hld/1INvz6AWEA/hZnFDl
31GJS0YpB3gnTyZq2uTPltNfa6kutY7nTJdpcn2mtANdRNpHxyQudCYpVy7rQVc9
zEHCFzTrP/Fbnq41XT/GW9bcFjMXKVUFnT0LdwPI++tMYH/4H4CtwdazHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7UITcpsV9PmXt9XUCHWGzHauLnMB8GA1UdIwQY
MBaAFN4YJwfERMMQZLGJnFl+nv1zQ4+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hnbkI4UkV3eEJrc1ltY1dYNmVfWE5EajVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zYmYzMDEtZDE4OS00NzVkLTk1ZGMt
ZWFhZTNkZThhYjU4LzEvM2hnbkI4UkV3eEJrc1ltY1dYNmVfWE5EajVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zYmYzMDEtZDE4OS00NzVkLTk1ZGMtZWFhZTNkZThhYjU4
LzEvM2hnbkI4UkV3eEJrc1ltY1dYNmVfWE5EajVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOusdwf9R
ya61Z9VJbKqxv3CjdJ2zxDD1VacLDeOul8HzSkj8k87E/aXBUXlpPe7ucxB/XEzx
08CNsu8nG+e/CXnXD6NDzeYTAo0ugUtcTtp7tFiAgUvYl8oCBBIyBjSug5RxTqNg
n5xTzKrMzfRNDzMSW0+eg+UMJNe/A+BjgcQPp24YVpW9/GzqE3goQk6bf+2i9ruC
oHzjcNk4NIRmmuUe5ja/sB/O7SdU4tjmEKD3LVhmzrDoxxncF3BJ0L3JG2w929G9
C0hnGLayUIWYNaYd10KObJKvb9sEA+lYd14eNTWJM6XcWWcbG/hiixdzG2NgFVHP
gnJJ936YyGKtRw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:31:09 2025 by rpki-client