Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: UbZxanic3JvTvJko0yc/oXSzyoUSvvAJxfJMg1mGqOA=
Subject key identifier: 87:CB:B5:05:7F:F5:58:35:AD:09:7D:74:8E:41:CF:F3:B6:23:28:88
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 01987DF7E16D1F9B864EF3133E74738231FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 06:00:53 +0000
Manifest this update: Wed 06 Aug 2025 06:00:53 +0000
Manifest next update: Thu 07 Aug 2025 06:00:53 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: WtzQdP8lj2Zh1P4FBv10DiOa236kAZTNvP4tdzNGCYs=)
2: 6GNxdzK9UE9bHySiQzQ4c2EkGfY.roa (hash: xWTUJszNKd3dbNHz1f2JomMkK2hd4V6IPZrJaK6VjKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:e1:6d:1f:9b:86:4e:f3:13:3e:74:73:82:31:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Aug 6 06:00:53 2025 GMT
Not After : Aug 7 06:00:53 2025 GMT
Subject: CN=87cbb5057ff55835ad097d748e41cff3b6232888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:c6:39:25:0b:84:f9:41:b8:0d:2d:da:74:
46:3c:84:81:49:1d:5b:3d:e6:68:13:09:22:00:7c:
65:fc:36:54:2a:6b:35:d7:69:09:de:e8:72:9f:e2:
9c:fe:62:e9:9d:b2:2b:fa:c0:94:8a:9d:9b:b9:46:
69:d1:0b:a4:5d:60:32:2f:6d:08:00:ac:55:71:98:
73:b3:e4:d3:10:7f:c3:a1:4b:13:14:4b:5e:9c:5f:
16:41:4c:76:a1:c4:02:26:be:25:67:8d:b5:e9:3e:
74:a2:a6:a2:35:24:70:d9:d9:76:73:60:3a:52:de:
74:bd:51:c4:b0:10:aa:6d:3d:95:06:be:ac:50:97:
81:7e:0a:09:38:63:21:e1:7e:3b:b0:73:5c:09:d9:
a8:a0:b0:19:db:45:3f:ae:3c:c0:db:b7:51:8f:4d:
21:96:8f:ed:74:9a:b7:51:24:b3:b7:2e:db:0d:a0:
a4:4f:9e:b1:7b:69:f7:82:1f:2a:6f:c4:0e:b4:c6:
82:38:90:99:9e:e2:4d:43:53:4c:4c:5e:c1:c8:19:
e4:6d:77:b1:ac:af:a3:9d:f8:1f:2e:78:50:a6:7c:
b7:5a:a0:37:5a:b2:01:ed:df:f4:41:a0:8c:0a:46:
6d:70:a7:aa:48:57:65:d9:c0:6f:d1:ed:9b:76:09:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CB:B5:05:7F:F5:58:35:AD:09:7D:74:8E:41:CF:F3:B6:23:28:88
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:46:b8:f1:08:a6:1a:b9:4e:8b:96:f2:07:cd:a7:3e:e7:f5:
ef:21:04:fb:a4:d2:b2:4f:8e:3c:51:23:f7:a7:d4:26:3b:48:
35:b6:71:b3:b2:7e:03:ee:da:eb:21:ff:7a:ca:02:41:08:27:
3b:af:1f:96:a4:05:42:62:61:46:c9:df:d6:78:e9:21:f0:f6:
e9:8c:6c:7d:38:27:93:86:92:6a:e6:59:72:ef:3d:90:52:81:
e5:f1:fa:7a:52:57:c1:b6:46:30:fc:46:6d:8a:ce:1e:4e:86:
af:3f:5a:d9:86:82:29:2c:44:81:a4:eb:d2:35:39:29:8c:3c:
10:0e:ea:ca:61:4e:0d:03:f7:bc:b2:3e:19:ff:8b:ab:3d:3c:
ab:be:4f:56:5c:bf:b9:a0:99:8b:e8:5b:92:28:d5:ef:33:a1:
2c:cd:0b:f3:a8:40:04:57:91:f0:2a:73:f5:cd:41:71:6f:a3:
d0:d9:dd:5b:c9:e2:b3:fe:d1:5d:73:fa:91:2c:3e:e3:a7:a2:
69:08:04:39:90:c0:27:67:b9:50:92:60:1c:35:3d:4e:56:ae:
68:80:4f:21:3d:e9:96:39:44:fb:52:25:1e:92:6d:d2:7e:ec:
1b:8f:31:13:7f:06:ff:b1:a6:44:76:88:49:8a:ab:27:9c:22:
63:4e:e1:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh99+FtH5uGTvMTPnRzgjH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMGNjZDIzOTFmYTMyYzBhZGUyOTdjNWZjODgzMDkwYjM5
OTEzOTUwHhcNMjUwODA2MDYwMDUzWhcNMjUwODA3MDYwMDUzWjAzMTEwLwYDVQQD
Eyg4N2NiYjUwNTdmZjU1ODM1YWQwOTdkNzQ4ZTQxY2ZmM2I2MjMyODg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty3GOSULhPlBuA0t2nRGPISBSR1b
PeZoEwkiAHxl/DZUKms112kJ3uhyn+Kc/mLpnbIr+sCUip2buUZp0QukXWAyL20I
AKxVcZhzs+TTEH/DoUsTFEtenF8WQUx2ocQCJr4lZ4216T50oqaiNSRw2dl2c2A6
Ut50vVHEsBCqbT2VBr6sUJeBfgoJOGMh4X47sHNcCdmooLAZ20U/rjzA27dRj00h
lo/tdJq3USSzty7bDaCkT56xe2n3gh8qb8QOtMaCOJCZnuJNQ1NMTF7ByBnkbXex
rK+jnfgfLnhQpny3WqA3WrIB7d/0QaCMCkZtcKeqSFdl2cBv0e2bdgmabQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfLtQV/9Vg1rQl9dI5Bz/O2IyiIMB8GA1UdIwQY
MBaAFN4MzSOR+jLAreKXxfyIMJCzmROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQt
NjdjMWE2M2M1MTUwLzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQtNjdjMWE2M2M1MTUw
LzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEa48Qim
GrlOi5byB82nPuf17yEE+6TSsk+OPFEj96fUJjtINbZxs7J+A+7a6yH/esoCQQgn
O68flqQFQmJhRsnf1njpIfD26YxsfTgnk4aSauZZcu89kFKB5fH6elJXwbZGMPxG
bYrOHk6Grz9a2YaCKSxEgaTr0jU5KYw8EA7qymFODQP3vLI+Gf+Lqz08q75PVly/
uaCZi+hbkijV7zOhLM0L86hABFeR8Cpz9c1BcW+j0NndW8nis/7RXXP6kSw+46ei
aQgEOZDAJ2e5UJJgHDU9TlauaIBPIT3pljlE+1IlHpJt0n7sG48xE38G/7GmRHaI
SYqrJ5wiY07hQg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:16:53 2025 by rpki-client