Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier: CaSbmZNH8rBzYjDwRD2GfVs93pzi+pQE+6ERHAosh2E=
Subject key identifier: 17:94:9E:96:86:08:FB:2F:CB:F3:3C:4D:96:B8:44:23:64:B9:F2:50
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial: 01989F710A570F0CCBC4700E00331C7345F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number: 051C
Signing time: Tue 12 Aug 2025 18:00:42 +0000
Manifest this update: Tue 12 Aug 2025 18:00:42 +0000
Manifest next update: Wed 13 Aug 2025 18:00:42 +0000
Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: QvbhMQsbOS3aTjdCyb/BCorwxfzixv0dZx1FjtoUKws=)
2: wLvB8cGiUEUZNSS38jCt0kGtb0w.roa (hash: m3dcBbH2bIeKi8Ap8eHL2CuPz3vf7Stl96ekMV6tjIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:71:0a:57:0f:0c:cb:c4:70:0e:00:33:1c:73:45:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Validity
Not Before: Aug 12 18:00:42 2025 GMT
Not After : Aug 13 18:00:42 2025 GMT
Subject: CN=17949e968608fb2fcbf33c4d96b8442364b9f250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:2a:aa:e0:2a:14:c4:7c:93:95:10:1c:6b:
0b:4d:ce:72:0f:e9:a0:ff:c0:86:c4:c7:d2:4c:2a:
a1:f1:13:dd:02:c3:81:88:d8:d6:4f:66:c1:dc:a1:
49:f6:41:f4:f6:42:42:de:4d:b0:dc:15:5f:9b:da:
8c:6f:3a:02:0c:8b:60:58:9e:7b:11:78:75:7b:f6:
a7:58:f7:8f:56:b2:2a:4d:45:2f:6e:f3:70:fb:77:
0d:7f:4d:24:57:7b:e1:e6:9d:af:93:c9:a0:9b:1e:
85:86:1f:c4:49:a6:26:0f:90:d9:a4:9b:f7:a6:3a:
7b:c2:0a:29:08:b5:9d:9a:45:a2:00:ec:28:ae:6b:
bb:e1:be:51:d5:55:9e:ad:b2:81:5c:ff:8c:91:04:
59:91:d3:5e:7a:a8:3d:fe:82:e5:be:c2:4d:33:45:
f6:47:00:23:08:ac:00:32:95:96:9c:52:b5:45:94:
5c:6b:c2:30:a3:88:08:3c:45:db:5a:a0:cf:94:91:
a1:f2:55:4a:53:57:5e:6c:3d:f1:78:79:36:99:3e:
22:16:51:7f:f3:4f:6b:c6:c2:5c:79:1d:f8:8a:4c:
d0:48:40:22:35:61:f9:0b:95:d7:65:ba:fc:b6:f1:
49:e1:3e:de:f7:4a:25:b4:c2:b8:30:c0:8c:a8:4f:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:9E:96:86:08:FB:2F:CB:F3:3C:4D:96:B8:44:23:64:B9:F2:50
X509v3 Authority Key Identifier:
keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:87:39:dc:eb:c8:08:c6:b9:98:4b:bb:0a:51:af:a1:7d:6a:
cd:83:40:16:c7:ef:e5:d2:b0:d5:76:64:cc:12:eb:06:d6:7e:
de:0e:c7:fb:fd:64:12:45:2b:b8:31:bd:12:39:00:91:b3:12:
00:bc:8f:c2:cb:76:7c:80:42:be:03:07:0d:36:2e:cf:70:c5:
24:df:2a:1f:21:95:69:1b:c4:8c:43:4e:15:98:fd:13:03:b2:
30:28:6a:c0:ad:c8:f7:20:0d:a1:7e:d9:9f:67:b9:60:f1:32:
20:d5:88:8d:ee:ca:c7:87:12:72:78:7c:c3:38:9e:d6:0f:fd:
07:95:a5:96:c5:ba:dd:b3:ab:88:f3:87:87:c0:14:03:ec:1d:
43:54:ba:89:f8:a1:67:1c:42:43:4f:88:ba:d7:36:d3:8b:f0:
98:d4:1e:1e:16:6d:a5:b2:f4:f4:62:ba:5c:f7:84:c6:d3:28:
da:d1:d3:3c:c9:db:62:7d:d8:6a:20:1e:37:70:4f:f4:fb:02:
18:0e:4c:42:96:4f:2f:26:2c:69:eb:65:55:de:41:1c:21:ec:
54:7b:33:f6:1b:07:16:75:5b:68:65:2b:23:b2:c0:22:d8:53:
c8:51:c5:d5:3b:42:35:f4:57:9e:00:c7:5b:33:1b:31:eb:5a:
0f:13:cd:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifcQpXDwzLxHAOADMcc0X4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWZhZGExMGUyY2UyMGUxYzk2Zjg5NWJiOGVjMzJhNTgw
OGY2M2YwHhcNMjUwODEyMTgwMDQyWhcNMjUwODEzMTgwMDQyWjAzMTEwLwYDVQQD
EygxNzk0OWU5Njg2MDhmYjJmY2JmMzNjNGQ5NmI4NDQyMzY0YjlmMjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA090qquAqFMR8k5UQHGsLTc5yD+mg
/8CGxMfSTCqh8RPdAsOBiNjWT2bB3KFJ9kH09kJC3k2w3BVfm9qMbzoCDItgWJ57
EXh1e/anWPePVrIqTUUvbvNw+3cNf00kV3vh5p2vk8mgmx6Fhh/ESaYmD5DZpJv3
pjp7wgopCLWdmkWiAOwormu74b5R1VWerbKBXP+MkQRZkdNeeqg9/oLlvsJNM0X2
RwAjCKwAMpWWnFK1RZRca8Iwo4gIPEXbWqDPlJGh8lVKU1debD3xeHk2mT4iFlF/
809rxsJceR34ikzQSEAiNWH5C5XXZbr8tvFJ4T7e90oltMK4MMCMqE+e8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeUnpaGCPsvy/M8TZa4RCNkufJQMB8GA1UdIwQY
MBaAFNyvraEOLOIOHJb4lbuOwypYCPY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQt
YTY2Zjg0ZWRiZDZkLzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81ZDYyMzQtMTczNS00YmYwLTg1MDQtYTY2Zjg0ZWRiZDZk
LzEvM0stdG9RNHM0ZzRjbHZpVnU0N0RLbGdJOWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA24c53OvI
CMa5mEu7ClGvoX1qzYNAFsfv5dKw1XZkzBLrBtZ+3g7H+/1kEkUruDG9EjkAkbMS
ALyPwst2fIBCvgMHDTYuz3DFJN8qHyGVaRvEjENOFZj9EwOyMChqwK3I9yANoX7Z
n2e5YPEyINWIje7Kx4cScnh8wzie1g/9B5WllsW63bOriPOHh8AUA+wdQ1S6ifih
ZxxCQ0+Iutc204vwmNQeHhZtpbL09GK6XPeExtMo2tHTPMnbYn3YaiAeN3BP9PsC
GA5MQpZPLyYsaetlVd5BHCHsVHsz9hsHFnVbaGUrI7LAIthTyFHF1TtCNfRXngDH
WzMbMetaDxPNNA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:51:39 2025 by rpki-client