Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier: UDSOz/EjwmoCxVSUZam83xIKAosJ6NQWkcT4SREv3q0=
Subject key identifier: A8:F6:EE:D3:82:F9:98:51:5B:8E:25:19:67:C2:17:43:6D:30:7D:2F
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 019873E31D9DDAEAF28B690BF40BFA89CB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number: 0CFE
Signing time: Mon 04 Aug 2025 07:02:00 +0000
Manifest this update: Mon 04 Aug 2025 07:02:00 +0000
Manifest next update: Tue 05 Aug 2025 07:02:00 +0000
Files and hashes: 1: QrB38IR31JfmSrfp5ttgTReGTWo.roa (hash: tObzEsfYNmXi9X+/o+rGLlyYSek2LoSQ9N7PVMYEfqA=)
2: n3iPjhImnBjarzP2Rj2tOx0dNiE.roa (hash: lUEC9I8tI5NUjUJh9guJCH2H+g0KkZWinekNZT2+2Io=)
3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: BvV3K+IxUP1fKdCvOUP5fKP5jLYUqZgtz0WZeTM45t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:1d:9d:da:ea:f2:8b:69:0b:f4:0b:fa:89:cb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Aug 4 07:02:00 2025 GMT
Not After : Aug 5 07:02:00 2025 GMT
Subject: CN=a8f6eed382f998515b8e251967c217436d307d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:5f:2b:7f:ee:f8:67:e3:8e:ad:2f:b4:1f:
65:ce:c2:03:43:29:80:33:d6:23:b9:88:e1:44:c7:
62:42:e6:18:9f:34:01:70:1c:5d:bd:02:a8:46:fe:
6f:48:7a:b5:e7:90:1b:f8:0b:47:a7:ce:76:38:6d:
71:f2:10:43:1c:e9:16:50:7b:64:23:f1:9f:6a:d1:
2b:66:8c:59:08:38:9d:c8:81:35:3d:a4:e5:99:f6:
d9:2c:60:98:6c:c0:1e:76:0f:6f:34:19:fa:f2:9c:
a7:0a:0f:1e:a1:b3:1a:bc:d2:64:90:34:5e:dc:2f:
ae:63:26:b5:1c:2d:17:26:78:5f:09:b2:74:0d:67:
b3:98:41:18:79:6c:70:74:0e:5e:6d:dd:70:66:83:
c3:9c:38:ae:4a:d4:c0:76:a3:dd:ba:33:10:1a:80:
a3:00:b4:b5:d2:cf:98:3a:2e:8a:e9:34:25:ba:2a:
59:00:75:c8:56:ff:4e:53:82:4a:d2:82:bf:9f:01:
81:db:4a:d7:3f:1d:b5:29:e8:35:6b:b9:8a:e8:1d:
99:9b:4e:04:61:29:57:36:d4:a3:21:55:77:bb:dd:
35:60:c1:a4:fd:d4:b1:6b:e6:8c:60:57:1d:29:99:
02:81:7a:18:e6:23:5c:52:9d:b3:e0:89:b5:e0:75:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F6:EE:D3:82:F9:98:51:5B:8E:25:19:67:C2:17:43:6D:30:7D:2F
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:8a:6e:f8:f9:ac:90:ec:35:0c:7e:46:b7:ee:30:1c:62:48:
06:c1:3b:4d:b0:84:6e:b1:96:d9:a6:e3:23:eb:76:ee:f1:ee:
85:5c:77:92:98:4c:94:98:ba:a8:ff:f3:77:86:a1:21:fa:62:
75:55:19:20:e7:1e:aa:fe:6b:36:29:cd:a0:96:36:74:e3:47:
e9:7c:fb:29:2b:af:7b:dc:45:a8:ba:96:5c:f5:c5:57:19:b2:
5e:33:a5:4c:a3:89:7f:eb:c4:09:08:1a:0f:c8:cd:cd:ae:ed:
8f:1b:c9:a0:55:20:45:ef:08:3e:f3:cb:fa:40:16:8f:8f:22:
d4:01:7c:0c:9e:1a:6f:57:77:af:26:db:86:89:98:02:71:2b:
94:82:e6:cc:0b:b7:cf:96:3a:a0:30:28:21:9e:2c:36:aa:8c:
e9:6a:f4:22:68:36:73:e3:55:ff:7d:44:48:78:27:a9:71:97:
83:e8:3b:8c:47:73:c2:42:c0:96:6e:38:83:57:24:87:2b:88:
01:7c:bb:19:a8:5d:52:bc:9d:8c:56:69:0a:59:a7:3c:43:94:
45:3a:02:04:c5:60:a8:62:37:66:31:96:76:3a:4c:b1:08:14:
f4:cf:1c:27:f8:fd:f5:0a:aa:96:dc:eb:11:7d:d8:7a:bb:ea:
51:66:24:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4x2d2uryi2kL9Av6ict/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYmRlYWQ0ZjFkMWM4ZGRhOTZkMWNkMTc4OWQ5ZGQzZTIz
YmYxNTMwHhcNMjUwODA0MDcwMjAwWhcNMjUwODA1MDcwMjAwWjAzMTEwLwYDVQQD
EyhhOGY2ZWVkMzgyZjk5ODUxNWI4ZTI1MTk2N2MyMTc0MzZkMzA3ZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJVfK3/u+Gfjjq0vtB9lzsIDQymA
M9YjuYjhRMdiQuYYnzQBcBxdvQKoRv5vSHq155Ab+AtHp852OG1x8hBDHOkWUHtk
I/GfatErZoxZCDidyIE1PaTlmfbZLGCYbMAedg9vNBn68pynCg8eobMavNJkkDRe
3C+uYya1HC0XJnhfCbJ0DWezmEEYeWxwdA5ebd1wZoPDnDiuStTAdqPdujMQGoCj
ALS10s+YOi6K6TQluipZAHXIVv9OU4JK0oK/nwGB20rXPx21Keg1a7mK6B2Zm04E
YSlXNtSjIVV3u901YMGk/dSxa+aMYFcdKZkCgXoY5iNcUp2z4Im14HXouQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKj27tOC+ZhRW44lGWfCF0NtMH0vMB8GA1UdIwQY
MBaAFK696tTx0cjdqW0c0XidndPiO/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjIt
ODgzN2NhNjllMzk2LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjItODgzN2NhNjllMzk2
LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyopu+Pms
kOw1DH5Gt+4wHGJIBsE7TbCEbrGW2abjI+t27vHuhVx3kphMlJi6qP/zd4ahIfpi
dVUZIOceqv5rNinNoJY2dONH6Xz7KSuve9xFqLqWXPXFVxmyXjOlTKOJf+vECQga
D8jNza7tjxvJoFUgRe8IPvPL+kAWj48i1AF8DJ4ab1d3rybbhomYAnErlILmzAu3
z5Y6oDAoIZ4sNqqM6Wr0Img2c+NV/31ESHgnqXGXg+g7jEdzwkLAlm44g1ckhyuI
AXy7GahdUrydjFZpClmnPEOURToCBMVgqGI3ZjGWdjpMsQgU9M8cJ/j99Qqqltzr
EX3YervqUWYk5A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:23 2025 by rpki-client