Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
File: MT3NGHEiZlBFhpdnM8ofkvYmH14.mft (raw, json)
Hash identifier: hfaEA406ZGnVp/cl4KYxFrbqsOiOZUuhoLXwBfAoYz8=
Subject key identifier: 77:7E:AD:4A:3C:4F:95:25:4F:7F:E4:5D:19:51:B9:AC:2E:98:4D:62
Authority key identifier: 31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E
Certificate issuer: /CN=313dcd18712266504586976733ca1f92f6261f5e
Certificate serial: 01988B1071FC1BA7F716794C87FD5E4C587A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
Manifest number: 144E
Signing time: Fri 08 Aug 2025 19:02:47 +0000
Manifest this update: Fri 08 Aug 2025 19:02:47 +0000
Manifest next update: Sat 09 Aug 2025 19:02:47 +0000
Files and hashes: 1: MT3NGHEiZlBFhpdnM8ofkvYmH14.crl (hash: Jd0vOVhUJYamN4KNsk9ZQMsvTMITu4JxeY8RsmMsyw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:71:fc:1b:a7:f7:16:79:4c:87:fd:5e:4c:58:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313dcd18712266504586976733ca1f92f6261f5e
Validity
Not Before: Aug 8 19:02:47 2025 GMT
Not After : Aug 9 19:02:47 2025 GMT
Subject: CN=777ead4a3c4f95254f7fe45d1951b9ac2e984d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:72:db:f8:fa:ef:31:da:8d:d4:4a:64:bd:
c3:ff:70:9e:a5:c3:2b:50:38:70:28:48:ca:9f:6e:
00:f9:6c:11:2f:81:c7:67:ce:c0:ef:20:d2:21:42:
8a:f5:52:c1:6d:9e:e0:a0:b9:7e:88:e4:7f:f3:51:
d4:37:0f:21:8b:6b:c0:d8:ab:c1:93:10:d7:4d:05:
3c:02:ad:47:28:37:1a:5a:39:0d:8b:9d:10:ef:8f:
fd:64:67:ad:6a:fa:23:c6:37:38:41:45:81:bc:d1:
83:2b:cd:7a:8d:92:fe:28:be:b7:52:6f:f6:39:69:
30:31:c8:f2:a8:7e:cb:c5:4d:80:cc:d6:ea:0a:5c:
a5:54:19:f0:14:b7:c6:ad:d9:9f:b7:9b:d9:ae:0b:
ab:a9:ec:08:7a:3e:ef:7b:61:92:42:ee:7b:e3:3f:
04:54:ef:a2:e7:66:68:30:80:54:77:7a:dd:fe:b4:
d7:1f:65:09:31:70:6c:60:7e:40:5a:a8:ea:c8:fa:
1f:01:26:97:52:bb:c0:02:d4:79:a8:99:76:ad:5d:
6f:1f:23:a1:88:7b:e4:c4:b8:57:81:39:a5:5a:2c:
a0:53:8b:c8:11:b7:e0:27:29:c4:97:5e:e2:68:ba:
35:e4:7a:db:ea:64:7f:ff:d8:03:c1:f8:d6:be:77:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7E:AD:4A:3C:4F:95:25:4F:7F:E4:5D:19:51:B9:AC:2E:98:4D:62
X509v3 Authority Key Identifier:
keyid:31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:73:6d:a8:09:6a:7c:d6:33:04:b1:c1:b6:6f:98:17:b5:d9:
32:3a:11:db:89:f3:2d:27:da:c4:1f:e1:e6:6d:0f:c6:f3:98:
8f:cf:d0:99:0f:fd:3c:4b:36:a4:0a:04:86:d9:07:15:8c:f3:
5b:85:8e:f1:b9:7a:50:8a:33:3e:00:b0:aa:78:e0:d6:d5:0e:
60:3a:04:e4:1d:07:96:5e:11:12:be:ce:64:dc:55:7e:40:1e:
9b:23:1c:f8:44:90:f4:8f:c7:6a:9c:05:e8:1d:51:92:e2:ec:
f8:cb:55:94:fc:5a:57:14:05:38:07:1a:90:1e:d9:59:50:14:
a8:50:3a:cb:1d:5f:34:cb:24:a4:da:78:cc:d8:7e:74:b0:f4:
56:7c:04:24:06:a8:89:21:a6:d7:da:60:e9:eb:7f:26:15:58:
f0:fc:5a:4c:ee:67:a5:02:23:68:f1:c7:7b:e1:53:cb:5d:dc:
e6:0e:26:d8:d9:75:62:f0:78:3f:24:1e:90:2e:fb:d1:61:13:
47:c1:87:f5:b8:42:fe:52:9b:45:f2:19:9e:15:f1:a9:b7:e0:
9c:9f:87:58:80:04:4a:d6:e5:71:6a:28:6b:29:bd:ed:10:c2:
38:38:46:33:43:1f:ff:03:59:14:b7:71:70:2f:51:97:71:30:
d1:23:48:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLEHH8G6f3FnlMh/1eTFh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxM2RjZDE4NzEyMjY2NTA0NTg2OTc2NzMzY2ExZjkyZjYy
NjFmNWUwHhcNMjUwODA4MTkwMjQ3WhcNMjUwODA5MTkwMjQ3WjAzMTEwLwYDVQQD
Eyg3NzdlYWQ0YTNjNGY5NTI1NGY3ZmU0NWQxOTUxYjlhYzJlOTg0ZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/1y2/j67zHajdRKZL3D/3CepcMr
UDhwKEjKn24A+WwRL4HHZ87A7yDSIUKK9VLBbZ7goLl+iOR/81HUNw8hi2vA2KvB
kxDXTQU8Aq1HKDcaWjkNi50Q74/9ZGetavojxjc4QUWBvNGDK816jZL+KL63Um/2
OWkwMcjyqH7LxU2AzNbqClylVBnwFLfGrdmft5vZrgurqewIej7ve2GSQu574z8E
VO+i52ZoMIBUd3rd/rTXH2UJMXBsYH5AWqjqyPofASaXUrvAAtR5qJl2rV1vHyOh
iHvkxLhXgTmlWiygU4vIEbfgJynEl17iaLo15Hrb6mR//9gDwfjWvndVhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHd+rUo8T5UlT3/kXRlRuawumE1iMB8GA1UdIwQY
MBaAFDE9zRhxImZQRYaXZzPKH5L2Jh9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVQzTkdIRWlabEJGaHBkbk04b2ZrdlltSDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9iOWVjZjktM2JhOC00N2U0LTg5NTQt
YzQxNWE2OGFmMGRkLzEvTVQzTkdIRWlabEJGaHBkbk04b2ZrdlltSDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9iOWVjZjktM2JhOC00N2U0LTg5NTQtYzQxNWE2OGFmMGRk
LzEvTVQzTkdIRWlabEJGaHBkbk04b2ZrdlltSDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHNtqAlq
fNYzBLHBtm+YF7XZMjoR24nzLSfaxB/h5m0PxvOYj8/QmQ/9PEs2pAoEhtkHFYzz
W4WO8bl6UIozPgCwqnjg1tUOYDoE5B0Hll4REr7OZNxVfkAemyMc+ESQ9I/HapwF
6B1RkuLs+MtVlPxaVxQFOAcakB7ZWVAUqFA6yx1fNMskpNp4zNh+dLD0VnwEJAao
iSGm19pg6et/JhVY8PxaTO5npQIjaPHHe+FTy13c5g4m2Nl1YvB4PyQekC770WET
R8GH9bhC/lKbRfIZnhXxqbfgnJ+HWIAEStblcWooaym97RDCODhGM0Mf/wNZFLdx
cC9Rl3Ew0SNIsA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:36 2025 by rpki-client