Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier: 9ke0eLs9e+DIG33koGpWc2MfarLpV0H9mV7XA6hmY7g=
Subject key identifier: F1:8A:0D:D6:1A:69:2C:44:C2:28:4C:65:34:DF:D9:74:C3:04:BF:CF
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 019893DAED6FB32AB7B9EFCD2499C2CD2179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number: 12B0
Signing time: Sun 10 Aug 2025 12:00:54 +0000
Manifest this update: Sun 10 Aug 2025 12:00:54 +0000
Manifest next update: Mon 11 Aug 2025 12:00:54 +0000
Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: 6fW6hukz7cGgxtIC3Dfyf4+xDrSl95ICW1FCukJtAU4=)
2: _iwCmsjTAlw634BVcFH9x4y6od0.roa (hash: sGzYd7+zk4VbbBPH9QI8yNwz1RatcjDRVrzAv9yiEMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:ed:6f:b3:2a:b7:b9:ef:cd:24:99:c2:cd:21:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: Aug 10 12:00:54 2025 GMT
Not After : Aug 11 12:00:54 2025 GMT
Subject: CN=f18a0dd61a692c44c2284c6534dfd974c304bfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:c7:3d:68:da:5b:77:6f:66:69:92:e2:73:
dd:eb:61:85:ae:0d:3d:be:30:be:c0:59:46:66:e2:
57:e7:4f:fc:81:ad:a1:cc:00:f8:e3:84:c5:b4:cb:
f4:54:d6:29:07:8e:b0:16:6e:62:d3:8d:77:95:54:
f2:f0:e2:97:a3:ef:60:ef:3b:e2:c2:5b:17:ec:0d:
b8:9b:88:e6:f9:e1:44:f2:e6:4a:d6:e6:9d:4e:22:
b8:a2:50:4c:50:fa:f2:1d:bc:09:09:76:2f:ba:a9:
30:8b:c7:44:63:37:56:82:f6:8f:41:63:fc:61:a0:
88:89:fc:bc:64:ec:c2:12:0e:71:27:b2:c7:ff:24:
87:71:23:5a:24:b9:17:70:50:4e:45:98:44:5f:22:
8e:af:3c:1f:b8:4a:fa:63:5d:7a:99:61:e1:d5:48:
aa:79:31:59:d7:2e:a1:b8:e4:b8:00:ca:5c:05:9b:
f2:73:7b:94:b8:ac:18:6a:21:79:db:04:30:9f:dc:
5b:f9:4e:cd:0a:d0:55:cd:20:9c:76:07:16:8f:cc:
4f:d1:e1:e7:ea:da:d8:0a:0f:59:08:8c:66:97:4b:
ed:8f:e8:4d:3c:28:d9:8a:15:54:fe:0c:e9:bd:9e:
77:d1:17:fb:db:ee:47:7d:21:62:f5:fe:7c:7c:90:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8A:0D:D6:1A:69:2C:44:C2:28:4C:65:34:DF:D9:74:C3:04:BF:CF
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d2:99:91:15:88:48:de:aa:a7:50:dc:37:26:50:26:07:92:
17:b1:4b:da:17:49:8b:08:7f:14:41:78:9f:f7:ab:2d:42:a6:
ed:f8:70:57:cd:a7:b7:b3:61:af:45:eb:fc:1a:ab:ad:4d:5d:
e5:7f:69:b1:3a:0f:6a:16:2a:a7:28:5a:a6:cb:97:47:d0:66:
cb:19:86:7e:1e:b4:44:eb:4e:a7:8f:47:b2:c6:32:ca:1d:1c:
78:dc:58:c4:58:9e:96:fa:60:e2:f1:ab:22:38:5b:76:09:bb:
d0:47:f0:f9:94:df:87:f6:4f:00:15:bc:da:bb:2e:fc:61:72:
55:41:3e:6e:f0:ac:c5:bf:77:b6:00:e8:22:aa:9f:ce:83:5f:
42:b4:6c:80:38:fa:97:26:00:d6:e3:20:86:24:2c:10:38:2c:
b3:30:e2:b8:f0:9c:a1:33:0d:09:36:e2:88:5e:cf:b3:a0:bc:
f3:11:14:93:cd:c6:c5:8e:d9:8c:c7:76:6f:33:1a:4c:69:da:
b9:cc:36:e8:33:84:79:61:9b:3b:72:80:a0:b3:ab:71:f6:54:
ca:5a:d1:f5:72:fe:c3:34:ec:9b:37:ee:7a:ef:d9:d3:70:c2:
72:7b:40:72:0e:35:c7:ea:95:26:c6:d0:c9:ce:05:2b:8e:0c:
4f:01:27:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiT2u1vsyq3ue/NJJnCzSF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZDU1NTY5MTc3YTg4OWQzMzdmMDNmMmU2OThhY2FiY2Nj
YmI1ODkwHhcNMjUwODEwMTIwMDU0WhcNMjUwODExMTIwMDU0WjAzMTEwLwYDVQQD
EyhmMThhMGRkNjFhNjkyYzQ0YzIyODRjNjUzNGRmZDk3NGMzMDRiZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ/HPWjaW3dvZmmS4nPd62GFrg09
vjC+wFlGZuJX50/8ga2hzAD444TFtMv0VNYpB46wFm5i0413lVTy8OKXo+9g7zvi
wlsX7A24m4jm+eFE8uZK1uadTiK4olBMUPryHbwJCXYvuqkwi8dEYzdWgvaPQWP8
YaCIify8ZOzCEg5xJ7LH/ySHcSNaJLkXcFBORZhEXyKOrzwfuEr6Y116mWHh1Uiq
eTFZ1y6huOS4AMpcBZvyc3uUuKwYaiF52wQwn9xb+U7NCtBVzSCcdgcWj8xP0eHn
6trYCg9ZCIxml0vtj+hNPCjZihVU/gzpvZ530Rf72+5HfSFi9f58fJCopQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGKDdYaaSxEwihMZTTf2XTDBL/PMB8GA1UdIwQY
MBaAFN7VVWkXeoidM38D8uaYrKvMy7WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNmFjMmMtYmE2Yy00ZTU1LWIxN2Mt
ODRhMWZlOWQ0Yjc4LzEvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iNmFjMmMtYmE2Yy00ZTU1LWIxN2MtODRhMWZlOWQ0Yjc4
LzEvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9KZkRWI
SN6qp1DcNyZQJgeSF7FL2hdJiwh/FEF4n/erLUKm7fhwV82nt7Nhr0Xr/BqrrU1d
5X9psToPahYqpyhapsuXR9BmyxmGfh60ROtOp49HssYyyh0ceNxYxFielvpg4vGr
Ijhbdgm70Efw+ZTfh/ZPABW82rsu/GFyVUE+bvCsxb93tgDoIqqfzoNfQrRsgDj6
lyYA1uMghiQsEDgsszDiuPCcoTMNCTbiiF7Ps6C88xEUk83GxY7ZjMd2bzMaTGna
ucw26DOEeWGbO3KAoLOrcfZUylrR9XL+wzTsmzfueu/Z03DCcntAcg41x+qVJsbQ
yc4FK44MTwEnew==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:53 2025 by rpki-client