Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: 53eXPR+kcSMXa24aR3FzRjIJd+o2wEB4wUyEPD3MlR8=
Subject key identifier: 1F:C3:95:F3:71:EA:D1:C0:14:91:5F:57:CA:E8:4A:FC:04:33:01:93
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 01988355E3CBF01874818E5306C3A7D8CB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 0C1B
Signing time: Thu 07 Aug 2025 07:01:40 +0000
Manifest this update: Thu 07 Aug 2025 07:01:40 +0000
Manifest next update: Fri 08 Aug 2025 07:01:40 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: ixI1lXniYQFsADNZ5WsWqK6K9LxtZqamd+SY2BfXhE0=)
2: XaWBl1pdgCEAOtWYlDnABozWGpY.roa (hash: NkTYxkGxoFs3l9oUz9ZXBu6um1xVsgaeI44+mBnF24s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:e3:cb:f0:18:74:81:8e:53:06:c3:a7:d8:cb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Aug 7 07:01:40 2025 GMT
Not After : Aug 8 07:01:40 2025 GMT
Subject: CN=1fc395f371ead1c014915f57cae84afc04330193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:07:84:c8:df:5f:20:f6:3a:f9:85:47:50:
6d:4b:83:c3:1b:85:7c:14:fe:d3:e4:40:6f:67:db:
a5:fd:f9:c5:23:87:63:e7:77:ae:c5:27:42:3a:52:
a8:03:35:25:f7:bb:a1:c3:ce:c1:df:34:86:89:7c:
ed:fd:fe:16:8b:d4:81:5e:e8:bd:b0:4c:d4:6e:a6:
0f:20:81:1f:5b:04:d4:87:ff:5b:d4:b8:1b:52:96:
ee:41:64:8b:f5:9c:14:b9:cf:fd:99:85:6a:ca:81:
c1:69:81:ee:2e:71:99:4e:6b:f7:f6:59:90:f4:43:
b2:e5:fd:c1:d5:df:ea:33:8a:2a:60:84:d6:59:2f:
a8:97:f7:68:52:8f:e8:6d:80:46:8b:eb:bf:f4:e3:
8a:04:bd:37:81:7f:55:de:f1:07:3a:43:11:b1:9a:
75:47:13:b6:f9:47:dd:68:93:76:67:12:99:5e:3c:
7b:70:de:25:b6:72:d4:30:e6:e9:8e:18:56:3d:c7:
06:c2:ba:0e:ad:36:f1:97:49:19:a7:5b:b1:d9:fa:
49:39:41:af:0d:62:ef:99:57:13:d4:a8:82:d8:0b:
00:ab:d3:c3:32:47:f1:ad:bd:6b:3b:ee:b6:2d:77:
76:a2:a0:d0:18:26:83:13:8b:57:ad:3e:b6:89:1c:
ad:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C3:95:F3:71:EA:D1:C0:14:91:5F:57:CA:E8:4A:FC:04:33:01:93
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:df:ea:2f:54:c9:c4:21:b8:c3:31:94:88:59:62:23:b8:60:
fd:91:61:b2:43:de:e5:90:f6:24:44:d4:2f:27:35:ac:ed:b7:
3b:4e:c2:25:2f:74:ee:fc:15:48:0a:cd:43:79:19:81:ed:89:
4b:40:a8:87:38:da:6b:14:44:bd:3b:ee:db:88:49:b1:f4:c7:
5d:08:dd:41:a4:bc:48:0a:c6:82:a6:65:07:b5:46:a0:6e:59:
71:31:bb:9c:54:38:a6:a3:bb:40:4f:56:f1:c8:aa:64:44:fa:
d4:1d:ff:99:55:6c:32:57:59:6e:1f:1a:92:f8:b2:47:8a:3d:
5f:2d:77:54:b1:bf:99:8a:40:7f:61:1b:bb:37:11:ad:5d:67:
ca:7d:11:98:da:d0:98:cc:f6:a8:c9:03:87:5a:d5:45:b6:12:
be:2e:01:52:22:30:ab:77:ef:f2:d4:58:cb:46:ab:4d:c6:4e:
be:2a:14:a7:9e:72:8a:e3:40:e1:af:ea:46:61:95:be:90:ee:
8c:24:b9:6c:df:b3:11:c7:96:9b:d5:67:5b:d4:05:e6:7d:8c:
30:74:65:cc:db:61:da:ef:92:52:bb:a0:f1:bd:4d:57:33:5d:
48:57:82:ca:c4:df:0f:21:5c:09:33:03:17:f6:6c:63:cb:ad:
89:71:4c:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDVePL8Bh0gY5TBsOn2MtwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYTVhMjIyYWNiOTlhYjIzOTg0MzllZGVkNzc3MGE2NWVl
NjZkZTYwHhcNMjUwODA3MDcwMTQwWhcNMjUwODA4MDcwMTQwWjAzMTEwLwYDVQQD
EygxZmMzOTVmMzcxZWFkMWMwMTQ5MTVmNTdjYWU4NGFmYzA0MzMwMTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor0HhMjfXyD2OvmFR1BtS4PDG4V8
FP7T5EBvZ9ul/fnFI4dj53euxSdCOlKoAzUl97uhw87B3zSGiXzt/f4Wi9SBXui9
sEzUbqYPIIEfWwTUh/9b1LgbUpbuQWSL9ZwUuc/9mYVqyoHBaYHuLnGZTmv39lmQ
9EOy5f3B1d/qM4oqYITWWS+ol/doUo/obYBGi+u/9OOKBL03gX9V3vEHOkMRsZp1
RxO2+UfdaJN2ZxKZXjx7cN4ltnLUMObpjhhWPccGwroOrTbxl0kZp1ux2fpJOUGv
DWLvmVcT1KiC2AsAq9PDMkfxrb1rO+62LXd2oqDQGCaDE4tXrT62iRytGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/DlfNx6tHAFJFfV8roSvwEMwGTMB8GA1UdIwQY
MBaAFN2loiKsuZqyOYQ57e13cKZe5m3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQt
NzUzYWIxOTY4N2Q4LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQtNzUzYWIxOTY4N2Q4
LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9/qL1TJ
xCG4wzGUiFliI7hg/ZFhskPe5ZD2JETULyc1rO23O07CJS907vwVSArNQ3kZge2J
S0CohzjaaxREvTvu24hJsfTHXQjdQaS8SArGgqZlB7VGoG5ZcTG7nFQ4pqO7QE9W
8ciqZET61B3/mVVsMldZbh8akviyR4o9Xy13VLG/mYpAf2EbuzcRrV1nyn0RmNrQ
mMz2qMkDh1rVRbYSvi4BUiIwq3fv8tRYy0arTcZOvioUp55yiuNA4a/qRmGVvpDu
jCS5bN+zEceWm9VnW9QF5n2MMHRlzNth2u+SUrug8b1NVzNdSFeCysTfDyFcCTMD
F/ZsY8utiXFMag==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:09:08 2025 by rpki-client