
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
File: 3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft (raw, json)
Hash identifier: SWXrn0caO/MUn28Zrb8RwipDKdvdP+bclt1ihj9Yi8k=
Subject key identifier: A0:E5:5A:22:C1:06:F8:43:67:35:D3:2A:E9:9A:F3:F2:B1:E2:9E:D4
Authority key identifier: DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6
Certificate issuer: /CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6
Certificate serial: 01988BB37DE4C1ABDD276675A0C2DF446F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
Manifest number: 0158
Signing time: Fri 08 Aug 2025 22:00:52 +0000
Manifest this update: Fri 08 Aug 2025 22:00:52 +0000
Manifest next update: Sat 09 Aug 2025 22:00:52 +0000
Files and hashes: 1: 3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl (hash: 3RNEJGh3cNioSa0ZKj8w/o1ticH5W2Esj9Vs9ALvA7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:7d:e4:c1:ab:dd:27:66:75:a0:c2:df:44:6f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6
Validity
Not Before: Aug 8 22:00:52 2025 GMT
Not After : Aug 9 22:00:52 2025 GMT
Subject: CN=a0e55a22c106f8436735d32ae99af3f2b1e29ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:6a:b8:76:df:eb:d6:b8:03:bc:2e:11:b6:
12:40:0f:6c:d8:a7:aa:c3:5f:d4:b6:31:89:c1:29:
5d:8d:ad:34:a3:34:7b:91:29:86:25:90:14:62:2f:
51:db:7d:5d:ad:76:0c:77:60:5b:f7:f0:24:58:29:
90:dd:00:60:1d:99:d9:7d:68:39:2e:a5:80:6c:d1:
98:b2:8e:b8:a4:27:c8:5d:ed:37:c6:43:60:67:42:
d7:74:a3:53:4b:26:47:87:89:80:0f:f0:4b:d8:06:
79:7f:40:ea:ac:11:44:d0:32:49:fd:76:47:a0:96:
94:60:f4:86:90:d3:c3:84:5c:84:ac:00:d8:d7:1a:
3d:b1:54:38:f8:49:ee:00:af:1b:90:a8:3d:f7:e4:
ed:39:e7:73:e1:a8:98:3b:29:55:0f:0b:2f:51:b1:
ff:fe:4f:68:8a:f7:cc:1a:4b:32:0b:02:49:c2:e1:
6c:25:39:01:5c:9a:33:97:18:7b:f6:57:1f:a9:81:
84:21:ff:3b:f4:dc:83:e0:69:f7:27:86:77:d0:5e:
fc:d2:ae:45:aa:8b:00:24:d5:e9:eb:72:b2:b6:b1:
8c:51:9f:95:b7:91:7b:c4:c3:c9:a0:d3:99:1c:6f:
49:75:9f:15:24:04:ba:be:3d:5a:2d:1e:7b:50:b5:
b8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E5:5A:22:C1:06:F8:43:67:35:D3:2A:E9:9A:F3:F2:B1:E2:9E:D4
X509v3 Authority Key Identifier:
keyid:DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:81:bb:32:4f:09:b9:33:12:28:92:28:9d:68:1f:ef:6f:27:
dd:a7:ca:2b:61:fe:0d:bb:3e:2c:17:dd:23:b6:25:6f:7b:d2:
58:d8:db:9e:5f:e3:c1:98:6c:5b:c4:cd:b0:7f:b7:6b:b7:86:
d2:5e:69:f3:e6:c0:9f:a1:82:cc:a3:4b:5a:78:13:f1:6c:b0:
8a:b3:df:7a:af:d7:6a:e7:c1:1c:38:d2:e1:49:32:cc:ae:cb:
1d:08:87:61:18:28:17:b2:da:95:2c:c0:90:26:62:e4:f0:55:
a7:fa:c3:e6:26:4b:99:58:85:ac:e1:f7:94:1e:36:12:20:6a:
c4:7c:65:b6:67:7a:e3:ce:65:5c:95:e5:6a:f8:f4:59:a4:fa:
28:b3:f5:49:4e:c6:2b:80:ac:20:5f:14:ba:60:9e:07:94:e4:
27:15:92:ac:5f:d2:68:58:14:4c:cd:39:b3:e9:27:b0:36:81:
cd:ff:25:b1:d0:79:5c:f1:05:01:a0:7d:d4:76:32:17:5a:20:
db:f2:e0:34:37:2b:be:71:91:7b:55:f2:23:75:90:2c:15:7b:
54:00:6a:d5:c5:db:40:b6:a1:24:a5:d6:46:3f:91:8b:23:a8:
67:8f:db:2d:75:cc:40:3b:f7:5c:82:5c:ed:08:e4:31:e2:10:
a1:8f:2d:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs33kwavdJ2Z1oMLfRG+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTVkODFmMGE3ZjNkZDM0NDUxODQwYWUzMWNhZmY2Njdj
ZWVhZjYwHhcNMjUwODA4MjIwMDUyWhcNMjUwODA5MjIwMDUyWjAzMTEwLwYDVQQD
EyhhMGU1NWEyMmMxMDZmODQzNjczNWQzMmFlOTlhZjNmMmIxZTI5ZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPtquHbf69a4A7wuEbYSQA9s2Keq
w1/UtjGJwSldja00ozR7kSmGJZAUYi9R231drXYMd2Bb9/AkWCmQ3QBgHZnZfWg5
LqWAbNGYso64pCfIXe03xkNgZ0LXdKNTSyZHh4mAD/BL2AZ5f0DqrBFE0DJJ/XZH
oJaUYPSGkNPDhFyErADY1xo9sVQ4+EnuAK8bkKg99+TtOedz4aiYOylVDwsvUbH/
/k9oivfMGksyCwJJwuFsJTkBXJozlxh79lcfqYGEIf879NyD4Gn3J4Z30F780q5F
qosAJNXp63KytrGMUZ+Vt5F7xMPJoNOZHG9JdZ8VJAS6vj1aLR57ULW4HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDlWiLBBvhDZzXTKuma8/Kx4p7UMB8GA1UdIwQY
MBaAFN4V2B8Kfz3TRFGECuMcr/Znzur2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hYWUh3cF9QZE5FVVlRSzR4eXY5bWZPNnZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84NzY4Y2ItYjQ4YS00NzhiLTk4N2Et
OWNjNzg0NjkzNjY5LzEvM2hYWUh3cF9QZE5FVVlRSzR4eXY5bWZPNnZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84NzY4Y2ItYjQ4YS00NzhiLTk4N2EtOWNjNzg0NjkzNjY5
LzEvM2hYWUh3cF9QZE5FVVlRSzR4eXY5bWZPNnZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4G7Mk8J
uTMSKJIonWgf728n3afKK2H+Dbs+LBfdI7Ylb3vSWNjbnl/jwZhsW8TNsH+3a7eG
0l5p8+bAn6GCzKNLWngT8WywirPfeq/XaufBHDjS4UkyzK7LHQiHYRgoF7LalSzA
kCZi5PBVp/rD5iZLmViFrOH3lB42EiBqxHxltmd6485lXJXlavj0WaT6KLP1SU7G
K4CsIF8UumCeB5TkJxWSrF/SaFgUTM05s+knsDaBzf8lsdB5XPEFAaB91HYyF1og
2/LgNDcrvnGRe1XyI3WQLBV7VABq1cXbQLahJKXWRj+RiyOoZ4/bLXXMQDv3XIJc
7QjkMeIQoY8t3A==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:15 2025 by rpki-client