
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier: cOnFjysAMztMOMb+Lcx9/kSBzept+GwdEwzgQr//ozM=
Subject key identifier: FB:08:51:C2:61:86:EF:26:B4:47:23:DE:07:24:3B:C5:53:86:2B:C3
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer: /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial: 019896A5658D417E3A47982CB25F2612322E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number: 120C
Signing time: Mon 11 Aug 2025 01:01:18 +0000
Manifest this update: Mon 11 Aug 2025 01:01:18 +0000
Manifest next update: Tue 12 Aug 2025 01:01:18 +0000
Files and hashes: 1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: FyxBQJsS7pzQwNhXwXqcKpAh9YG7MA0Eqo0TXXRdpHI=)
2: q36KB3psJEdwM9htMyeD7v_JoOg.roa (hash: TalVhq3AmB2TIBAEtWkTlS4vjvUd3V9bg1ZpQQHry4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:65:8d:41:7e:3a:47:98:2c:b2:5f:26:12:32:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Validity
Not Before: Aug 11 01:01:18 2025 GMT
Not After : Aug 12 01:01:18 2025 GMT
Subject: CN=fb0851c26186ef26b44723de07243bc553862bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:81:26:b1:d3:61:d0:f9:50:d5:0d:96:2f:
33:7f:1a:c2:3a:c8:95:1c:e7:79:e4:80:09:4c:ed:
8c:34:7d:1b:cf:85:89:59:00:7e:f8:80:e8:60:5e:
3f:74:48:ad:8e:3b:ec:80:7d:34:58:93:8c:3e:ef:
ef:1d:ec:5a:52:bd:7e:b1:08:c0:d0:43:48:fc:86:
7f:39:5c:03:62:6d:aa:41:72:cb:b0:dc:63:8c:a8:
72:de:60:31:ed:ca:35:29:d5:54:b4:30:ff:eb:e2:
bd:48:2b:9a:7f:83:6c:9c:62:65:4d:b4:b1:0d:28:
ea:4c:f2:3d:7b:ee:3f:14:3c:29:ce:e1:d9:9d:60:
cd:b4:68:f9:69:27:e7:7c:28:84:5e:0e:78:62:9e:
07:51:17:58:fc:12:bb:bc:a2:4d:01:6a:24:5b:55:
2f:b0:81:0e:12:89:b6:5a:1d:62:76:6f:c8:1d:78:
e2:e3:5c:39:60:0b:48:a1:62:4e:ce:08:41:be:eb:
57:d9:5a:6c:1b:dd:74:4a:15:75:68:5f:31:c0:17:
19:ae:f7:93:f8:a7:53:9b:aa:e8:22:b4:39:96:b2:
50:db:5c:d3:da:d4:38:26:b3:cb:f3:73:75:af:c9:
bc:31:be:63:7d:4e:de:39:c3:ce:20:55:d9:c5:1f:
ec:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:08:51:C2:61:86:EF:26:B4:47:23:DE:07:24:3B:C5:53:86:2B:C3
X509v3 Authority Key Identifier:
keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1b:8b:71:30:f9:b6:02:87:79:84:25:8e:04:62:05:d8:72:
24:28:b5:a9:57:0e:8e:d2:b1:2e:0e:21:c2:36:25:48:0e:71:
bb:8b:12:fc:2f:13:98:fb:44:67:9c:3b:f4:a2:7a:ea:b1:39:
43:1b:14:b5:93:b7:11:ab:67:07:f4:42:00:18:d4:3c:a5:39:
c2:f0:9a:4a:19:1e:87:12:e9:ad:4a:fb:2c:99:d5:09:0e:45:
7e:86:08:9d:23:46:c0:2b:7d:64:6b:a8:f0:fe:dd:74:bb:e8:
3c:94:87:f5:32:d3:27:5d:86:e7:bd:4e:d4:e5:da:b9:a7:ba:
82:07:06:69:89:48:d1:bc:05:13:b0:45:0a:7d:00:7d:fc:ca:
d3:85:0f:73:2f:d3:ef:35:a1:2a:39:58:3a:46:a5:5f:51:f3:
7c:e1:c1:70:8a:49:4c:bf:6c:a7:ea:eb:6f:a7:30:2b:a6:e1:
39:7e:2f:df:e9:ba:b0:d4:d8:89:d3:e1:d3:68:ba:9c:d5:29:
fe:6c:a9:7d:c3:41:18:8d:3e:c6:6d:93:5f:fb:b7:90:e9:52:
b0:76:44:7a:e2:1a:52:9d:98:79:9d:2d:fa:63:45:0a:80:63:
0c:62:cb:b8:4e:58:bd:d8:d5:ef:95:2e:ff:99:fd:f1:b5:d1:
9d:52:22:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpWWNQX46R5gssl8mEjIuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTFiMjVmZDkxYjVmYmMxZmZiMTIxOGM2N2VkNTU4YWU3
NzhjMDQwHhcNMjUwODExMDEwMTE4WhcNMjUwODEyMDEwMTE4WjAzMTEwLwYDVQQD
EyhmYjA4NTFjMjYxODZlZjI2YjQ0NzIzZGUwNzI0M2JjNTUzODYyYmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHGBJrHTYdD5UNUNli8zfxrCOsiV
HOd55IAJTO2MNH0bz4WJWQB++IDoYF4/dEitjjvsgH00WJOMPu/vHexaUr1+sQjA
0ENI/IZ/OVwDYm2qQXLLsNxjjKhy3mAx7co1KdVUtDD/6+K9SCuaf4NsnGJlTbSx
DSjqTPI9e+4/FDwpzuHZnWDNtGj5aSfnfCiEXg54Yp4HURdY/BK7vKJNAWokW1Uv
sIEOEom2Wh1idm/IHXji41w5YAtIoWJOzghBvutX2VpsG910ShV1aF8xwBcZrveT
+KdTm6roIrQ5lrJQ21zT2tQ4JrPL83N1r8m8Mb5jfU7eOcPOIFXZxR/sWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsIUcJhhu8mtEcj3gckO8VThivDMB8GA1UdIwQY
MBaAFNzhsl/ZG1+8H/sSGMZ+1Viud4wEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09HeVg5a2JYN3dmLXhJWXhuN1ZXSzUzakFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zMjUyYzAtNTcyNS00NDlmLTkyYTEt
NjQzYmIyN2Y3ZmJmLzEvM09HeVg5a2JYN3dmLXhJWXhuN1ZXSzUzakFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8zMjUyYzAtNTcyNS00NDlmLTkyYTEtNjQzYmIyN2Y3ZmJm
LzEvM09HeVg5a2JYN3dmLXhJWXhuN1ZXSzUzakFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBuLcTD5
tgKHeYQljgRiBdhyJCi1qVcOjtKxLg4hwjYlSA5xu4sS/C8TmPtEZ5w79KJ66rE5
QxsUtZO3EatnB/RCABjUPKU5wvCaShkehxLprUr7LJnVCQ5FfoYInSNGwCt9ZGuo
8P7ddLvoPJSH9TLTJ12G571O1OXauae6ggcGaYlI0bwFE7BFCn0AffzK04UPcy/T
7zWhKjlYOkalX1HzfOHBcIpJTL9sp+rrb6cwK6bhOX4v3+m6sNTYidPh02i6nNUp
/mypfcNBGI0+xm2TX/u3kOlSsHZEeuIaUp2YeZ0t+mNFCoBjDGLLuE5YvdjV75Uu
/5n98bXRnVIinQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:49:02 2025 by rpki-client