Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier: a4/mJ9WszFYIZLMrk/K0+kWhKhfIchhQPvYOPrMx6YY=
Subject key identifier: 39:E6:0B:51:15:0C:BF:02:D5:46:35:07:FF:50:82:F6:FD:3C:E0:82
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 01989B26EADA03A909DFBF089BA9C2060911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number: 0C54
Signing time: Mon 11 Aug 2025 22:01:15 +0000
Manifest this update: Mon 11 Aug 2025 22:01:15 +0000
Manifest next update: Tue 12 Aug 2025 22:01:15 +0000
Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: 3tvMUsuHJQr4A5Jw0U1FYCubuKySTZrCJOCRkeKcVvw=)
2: Iq-f1EnfL9Yhl-QlX-qFh7tpN7I.roa (hash: WJuJSZpxmjSdIh4Z1HVT6GKRflZm//sdti8VMNi88hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9b:26:ea:da:03:a9:09:df:bf:08:9b:a9:c2:06:09:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Aug 11 22:01:15 2025 GMT
Not After : Aug 12 22:01:15 2025 GMT
Subject: CN=39e60b51150cbf02d5463507ff5082f6fd3ce082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:1a:71:5f:4b:14:65:33:dd:bb:0a:f2:ce:
fd:9d:7b:e8:14:fa:5c:74:1b:c3:31:53:6e:0f:c8:
31:57:64:2b:08:56:7c:38:f8:7d:66:47:64:79:59:
79:ae:f4:f3:0c:c7:d7:c8:36:c0:2e:97:28:ac:d1:
6e:69:74:f4:c2:64:15:d3:ae:da:d5:2a:83:ae:34:
57:7a:1a:d4:29:04:fd:ca:7f:f7:e8:64:c0:f3:90:
9f:c2:94:99:9d:b7:48:4f:ab:2c:d2:c0:e4:c7:bb:
9d:b4:41:df:dc:bc:a5:01:1d:f3:52:b9:63:2a:5d:
85:97:f9:9a:4f:18:9a:ca:7f:ef:0c:bd:58:ca:b1:
ae:16:10:08:91:6e:44:6c:ae:1b:3b:c5:a6:52:f0:
c0:80:5b:6f:82:cb:af:8b:71:ac:19:91:54:5e:38:
fd:d7:46:2d:e8:33:1a:fc:c2:1b:5b:c8:78:e9:01:
6d:35:11:97:e6:1a:df:9a:b2:b2:a2:a9:fa:7f:c8:
a4:58:d5:c7:fb:ba:c0:dc:28:eb:2b:b8:4d:bc:69:
f0:c8:57:14:8a:88:dc:7c:02:c3:c2:59:75:72:79:
60:2f:6c:f7:40:42:87:a4:29:3e:ac:72:30:cd:b6:
b4:f3:4a:c5:03:a9:bc:8b:a5:84:1b:9c:cf:a0:38:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E6:0B:51:15:0C:BF:02:D5:46:35:07:FF:50:82:F6:FD:3C:E0:82
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:15:57:7b:88:fd:42:62:2b:8c:60:13:66:38:06:c7:84:ba:
91:d9:bf:84:e6:6d:73:cc:48:ae:1b:60:b0:9d:18:4f:ea:30:
dc:14:42:71:6d:44:36:b5:4d:80:92:fa:bd:bc:de:8a:56:69:
aa:cc:1a:d7:5d:c6:c5:3e:b9:f6:7d:7a:21:72:49:06:31:fe:
40:91:2e:bf:b0:26:f4:6d:e0:21:ae:b7:1e:c9:f8:28:0f:83:
d3:7f:71:fd:07:45:e2:33:ad:4a:10:e8:ac:ad:90:24:15:ef:
07:3a:f3:be:31:d6:32:f0:11:65:99:42:7d:01:b1:83:1c:62:
21:0b:38:a9:15:5f:c4:76:d8:d0:39:0c:59:40:fe:25:9f:5d:
ff:db:8c:7c:96:c2:2e:72:f4:82:ea:83:eb:aa:5e:1a:4e:6e:
fa:b5:af:02:2c:75:fd:e1:15:17:c2:86:ee:cf:b2:87:03:68:
3b:e8:6a:1e:27:bc:7d:16:70:89:88:d4:01:0a:e1:8f:ae:cb:
84:23:05:14:a3:7c:6f:7c:0b:f4:4d:ca:89:a4:58:70:c7:80:
3c:da:22:72:fd:c9:46:42:3a:64:72:eb:d0:cf:79:d7:6f:1e:
2a:5e:5c:30:59:76:c2:ff:81:d8:dc:24:4e:1e:61:7a:3c:2f:
82:54:fc:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZibJuraA6kJ378Im6nCBgkRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGRjYjU2Zjc5ZjRhMWRlZDhkOTU0ODIzMzM5NjFkMDI2
NGZhYTUwHhcNMjUwODExMjIwMTE1WhcNMjUwODEyMjIwMTE1WjAzMTEwLwYDVQQD
EygzOWU2MGI1MTE1MGNiZjAyZDU0NjM1MDdmZjUwODJmNmZkM2NlMDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKIacV9LFGUz3bsK8s79nXvoFPpc
dBvDMVNuD8gxV2QrCFZ8OPh9ZkdkeVl5rvTzDMfXyDbALpcorNFuaXT0wmQV067a
1SqDrjRXehrUKQT9yn/36GTA85CfwpSZnbdIT6ss0sDkx7udtEHf3LylAR3zUrlj
Kl2Fl/maTxiayn/vDL1YyrGuFhAIkW5EbK4bO8WmUvDAgFtvgsuvi3GsGZFUXjj9
10Yt6DMa/MIbW8h46QFtNRGX5hrfmrKyoqn6f8ikWNXH+7rA3CjrK7hNvGnwyFcU
iojcfALDwll1cnlgL2z3QEKHpCk+rHIwzba080rFA6m8i6WEG5zPoDgRKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnmC1EVDL8C1UY1B/9Qgvb9POCCMB8GA1UdIwQY
MBaAFN1Ny1b3n0od7Y2VSCMzlh0CZPqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2Yt
MTc3YjViYTMyMzI3LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2YtMTc3YjViYTMyMzI3
LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBVXe4j9
QmIrjGATZjgGx4S6kdm/hOZtc8xIrhtgsJ0YT+ow3BRCcW1ENrVNgJL6vbzeilZp
qswa113GxT659n16IXJJBjH+QJEuv7Am9G3gIa63Hsn4KA+D039x/QdF4jOtShDo
rK2QJBXvBzrzvjHWMvARZZlCfQGxgxxiIQs4qRVfxHbY0DkMWUD+JZ9d/9uMfJbC
LnL0guqD66peGk5u+rWvAix1/eEVF8KG7s+yhwNoO+hqHie8fRZwiYjUAQrhj67L
hCMFFKN8b3wL9E3KiaRYcMeAPNoicv3JRkI6ZHLr0M95128eKl5cMFl2wv+B2Nwk
Th5hejwvglT8Sg==
-----END CERTIFICATE-----
Generated at Tue Aug 12 04:24:06 2025 by rpki-client