Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier: wddAK35VxVzJxPpvjCtqPmxP+lx64gPRELPXBf/5M/o=
Subject key identifier: DD:EA:A7:52:DA:6A:5D:46:4E:D5:CD:F3:0E:B9:D7:43:85:FD:86:4E
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 01987DF846115070E956E118963958052C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number: 0C1C
Signing time: Wed 06 Aug 2025 06:01:19 +0000
Manifest this update: Wed 06 Aug 2025 06:01:19 +0000
Manifest next update: Thu 07 Aug 2025 06:01:19 +0000
Files and hashes: 1: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: bfL5jtnWIB1x+oUEhKezG35z5FpHCxLzVCdeGtCRJf8=)
2: hfSj4Acr0ZdBdVZF-bmfhSWxDR0.roa (hash: qMvzKdtsac1CrAS5/GB10mnE0HZEb+d2b/OglfbpJc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:46:11:50:70:e9:56:e1:18:96:39:58:05:2c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: Aug 6 06:01:19 2025 GMT
Not After : Aug 7 06:01:19 2025 GMT
Subject: CN=ddeaa752da6a5d464ed5cdf30eb9d74385fd864e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:b3:14:85:4d:46:27:4b:4e:ac:9e:68:06:
d4:79:c7:9c:26:2c:be:5f:c0:96:c3:3f:a5:c0:9c:
39:02:c7:14:ca:d8:c6:bb:78:dd:81:f1:49:3c:df:
07:71:10:48:13:95:32:b1:a0:ae:c4:c2:85:f8:c8:
87:9f:31:8f:37:6a:12:dd:8d:5d:17:b5:e3:55:20:
6e:a0:f0:34:9f:de:42:51:3a:e0:f3:8f:ff:23:60:
f2:e3:2c:a0:ee:89:7c:ea:d3:0a:7e:3c:ce:8f:50:
ce:91:b8:0e:69:bd:3c:46:76:28:68:9b:2b:68:52:
19:3b:9c:62:f5:57:6e:3b:29:3b:30:66:cc:f6:b9:
05:6c:b7:1b:5e:83:7f:d9:64:71:ad:60:50:43:4a:
9d:7b:97:69:61:8d:28:d7:6f:05:6b:3c:1a:22:32:
45:5e:0e:8f:e0:8e:6f:6f:93:99:6d:70:c4:35:8d:
dc:d8:ee:06:6c:90:00:0b:1f:18:0c:3c:d7:ce:5e:
23:55:4d:2b:db:ef:89:68:8b:b4:bd:0c:e9:80:e2:
5f:fd:e3:ac:2f:7b:41:f8:a9:67:5b:c9:7b:a4:a2:
e2:35:a5:c2:a4:d9:55:c0:07:97:b3:70:b7:0e:e5:
d2:15:a7:3a:53:f9:3c:a6:17:c0:ab:ee:48:d6:02:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EA:A7:52:DA:6A:5D:46:4E:D5:CD:F3:0E:B9:D7:43:85:FD:86:4E
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b9:5b:8b:29:8c:86:e2:e4:81:74:08:18:87:17:a9:13:55:
53:a9:99:6c:99:05:bd:7d:3e:8a:0e:a9:74:21:b5:90:6b:67:
0c:23:5b:83:12:61:79:d0:7c:a9:15:2a:35:7f:54:c2:65:1c:
e0:6e:de:85:86:3b:74:a0:79:fd:5d:23:9d:6b:de:63:0c:e8:
5b:1c:66:7b:63:e4:b2:c8:6e:cd:db:b4:25:cf:38:a9:24:dc:
f3:f2:be:6b:80:fa:39:a6:94:a2:4a:cb:1f:71:b3:21:42:65:
ec:ed:8c:c8:1f:a1:d9:6e:02:a6:10:ab:62:0e:d3:0d:95:dc:
c5:a6:1a:5c:10:59:a6:29:00:e4:aa:8b:c0:d9:33:9f:09:a0:
b2:09:22:e8:e9:2a:2d:25:0a:b0:40:25:7f:94:fb:fc:8a:d1:
6a:c0:a9:83:b2:4b:33:7b:25:e4:90:b0:59:02:4a:4d:93:4e:
a3:77:e0:d2:a3:34:e0:cd:0e:39:d3:a8:6b:a9:4b:d3:f9:fe:
51:37:f0:44:6a:7d:a6:f5:47:0e:4f:36:c5:0d:be:cd:83:e3:
b3:75:4e:c2:34:80:6a:f0:89:c2:96:fa:fc:22:34:c9:05:c1:
ef:48:f6:5b:af:09:99:08:6d:ca:b5:df:9f:8d:48:e8:be:cf:
fd:7c:2b:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9+EYRUHDpVuEYljlYBSw4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTJhZDA5MGI1NDY3OGUwOTY4ZTY5OTU1YzI1MDQ5NDM0
ZDk2YzgwHhcNMjUwODA2MDYwMTE5WhcNMjUwODA3MDYwMTE5WjAzMTEwLwYDVQQD
EyhkZGVhYTc1MmRhNmE1ZDQ2NGVkNWNkZjMwZWI5ZDc0Mzg1ZmQ4NjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6OzFIVNRidLTqyeaAbUececJiy+
X8CWwz+lwJw5AscUytjGu3jdgfFJPN8HcRBIE5UysaCuxMKF+MiHnzGPN2oS3Y1d
F7XjVSBuoPA0n95CUTrg84//I2Dy4yyg7ol86tMKfjzOj1DOkbgOab08RnYoaJsr
aFIZO5xi9VduOyk7MGbM9rkFbLcbXoN/2WRxrWBQQ0qde5dpYY0o128FazwaIjJF
Xg6P4I5vb5OZbXDENY3c2O4GbJAACx8YDDzXzl4jVU0r2++JaIu0vQzpgOJf/eOs
L3tB+KlnW8l7pKLiNaXCpNlVwAeXs3C3DuXSFac6U/k8phfAq+5I1gKfCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3qp1Laal1GTtXN8w6510OF/YZOMB8GA1UdIwQY
MBaAFN1SrQkLVGeOCWjmmVXCUElDTZbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmIt
ZDMwNTczMGI1MzY4LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmItZDMwNTczMGI1MzY4
LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrlbiymM
huLkgXQIGIcXqRNVU6mZbJkFvX0+ig6pdCG1kGtnDCNbgxJhedB8qRUqNX9UwmUc
4G7ehYY7dKB5/V0jnWveYwzoWxxme2Pksshuzdu0Jc84qSTc8/K+a4D6OaaUokrL
H3GzIUJl7O2MyB+h2W4CphCrYg7TDZXcxaYaXBBZpikA5KqLwNkznwmgsgki6Okq
LSUKsEAlf5T7/IrRasCpg7JLM3sl5JCwWQJKTZNOo3fg0qM04M0OOdOoa6lL0/n+
UTfwRGp9pvVHDk82xQ2+zYPjs3VOwjSAavCJwpb6/CI0yQXB70j2W68JmQhtyrXf
n41I6L7P/Xwrig==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:10:05 2025 by rpki-client