
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
File: 3C8IdW9U7NcoDR6sz4eK6z8orE8.mft (raw, json)
Hash identifier: UeTH5S+A5EvvJGQ1lE8OypU2/JnGLLPad95sABofq3w=
Subject key identifier: 42:1A:63:BA:D3:D4:F5:53:98:28:65:55:AC:19:49:87:98:3D:2D:0F
Authority key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
Certificate issuer: /CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Certificate serial: 019893368F56601A4D4E1F88E3F73D36638A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
Manifest number: 1335
Signing time: Sun 10 Aug 2025 09:01:23 +0000
Manifest this update: Sun 10 Aug 2025 09:01:23 +0000
Manifest next update: Mon 11 Aug 2025 09:01:23 +0000
Files and hashes: 1: 3C8IdW9U7NcoDR6sz4eK6z8orE8.crl (hash: Tv1gU/u8Z0/j/ixHuH/VPImoySbm/MM1w4X8nH1u9O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:8f:56:60:1a:4d:4e:1f:88:e3:f7:3d:36:63:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f
Validity
Not Before: Aug 10 09:01:23 2025 GMT
Not After : Aug 11 09:01:23 2025 GMT
Subject: CN=421a63bad3d4f55398286555ac194987983d2d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:2d:ca:b3:a8:7e:33:fc:fc:f8:a1:51:07:
2b:ec:27:71:8f:da:8f:b7:2b:44:0a:73:e4:c6:41:
14:fe:70:76:e1:6f:c1:91:d5:48:a2:cb:8d:6a:07:
58:b6:29:f3:64:c8:36:fe:25:6d:f3:df:cc:86:d9:
dc:69:39:b2:c4:2d:a6:62:ac:5a:e5:b7:17:48:11:
57:2e:51:33:a3:38:62:1c:02:62:6a:3f:ee:8d:cb:
76:21:c8:2f:ea:32:51:d5:70:9f:23:db:c9:9d:a7:
85:96:90:a7:ac:10:e2:45:4f:cf:72:b2:a2:5e:2d:
5c:67:88:5c:4b:d3:c2:7c:9b:7b:f8:26:90:ac:8f:
5c:70:0d:4d:fa:f6:d0:69:83:21:5c:16:bf:a6:d6:
a1:f8:dc:70:a7:2b:f6:f8:1d:32:1c:76:86:2d:a3:
5f:33:ca:e4:28:f9:8b:2b:66:5c:04:25:04:b8:fe:
0c:39:93:46:62:33:1b:e0:d2:9a:1c:4e:a4:07:61:
f3:28:3e:a4:c9:97:e1:3f:1f:53:5d:78:5a:99:a5:
6c:04:2b:2a:29:65:b9:ca:ba:bc:2a:a8:7d:3d:54:
d6:b9:6a:2a:97:4b:fd:c9:69:fc:54:51:d1:3b:0f:
a7:c0:eb:55:00:93:1a:f6:d3:1b:6c:9e:ec:76:3c:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1A:63:BA:D3:D4:F5:53:98:28:65:55:AC:19:49:87:98:3D:2D:0F
X509v3 Authority Key Identifier:
keyid:DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:68:de:19:f1:f8:9e:9c:2d:c0:76:a0:e9:45:71:06:fa:16:
22:7b:09:4e:bd:4f:0d:7b:fc:35:5d:39:a7:e1:80:b4:7d:ce:
aa:32:58:82:34:d3:23:44:57:cd:b5:ee:54:08:71:53:26:73:
e2:6e:df:aa:39:88:ca:de:22:b4:38:7c:8a:5e:2b:f3:9a:77:
cf:5a:1b:95:87:9e:19:f6:30:66:da:4a:de:8e:b1:e4:22:ea:
61:9b:38:0b:47:29:68:84:e4:ad:ff:ae:ab:54:12:92:e1:19:
63:ba:ac:69:2a:df:6d:ad:e7:1d:cc:d0:28:3a:78:10:80:df:
07:f9:c0:16:2f:5a:59:18:71:f1:56:5d:c2:f1:49:7c:cf:0a:
b4:f5:ca:fa:1a:e9:a7:27:11:43:92:62:71:2d:ed:07:8a:f5:
b9:03:67:0e:ee:0d:8b:1c:03:53:0f:2b:ea:6f:17:1e:3e:39:
e7:3d:cb:eb:56:71:6b:57:43:8b:ef:ec:dc:d0:d7:50:20:f8:
9f:56:68:34:a8:c4:29:49:2e:97:e2:8e:c8:81:b7:8a:e5:fd:
f2:95:98:fc:e5:ae:2c:9a:95:99:af:e7:8c:45:ec:97:68:bd:
6f:94:f8:9f:da:86:70:24:35:26:8c:7b:3c:d3:84:c5:db:53:
f6:30:3e:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTNo9WYBpNTh+I4/c9NmOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMmYwODc1NmY1NGVjZDcyODBkMWVhY2NmODc4YWViM2Yy
OGFjNGYwHhcNMjUwODEwMDkwMTIzWhcNMjUwODExMDkwMTIzWjAzMTEwLwYDVQQD
Eyg0MjFhNjNiYWQzZDRmNTUzOTgyODY1NTVhYzE5NDk4Nzk4M2QyZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzQtyrOofjP8/PihUQcr7Cdxj9qP
tytECnPkxkEU/nB24W/BkdVIosuNagdYtinzZMg2/iVt89/MhtncaTmyxC2mYqxa
5bcXSBFXLlEzozhiHAJiaj/ujct2Icgv6jJR1XCfI9vJnaeFlpCnrBDiRU/PcrKi
Xi1cZ4hcS9PCfJt7+CaQrI9ccA1N+vbQaYMhXBa/ptah+Nxwpyv2+B0yHHaGLaNf
M8rkKPmLK2ZcBCUEuP4MOZNGYjMb4NKaHE6kB2HzKD6kyZfhPx9TXXhamaVsBCsq
KWW5yrq8Kqh9PVTWuWoql0v9yWn8VFHROw+nwOtVAJMa9tMbbJ7sdjzvAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIaY7rT1PVTmChlVawZSYeYPS0PMB8GA1UdIwQY
MBaAFNwvCHVvVOzXKA0erM+Hius/KKxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0M4SWRXOVU3TmNvRFI2c3o0ZUs2ejhvckU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zODk0NzctNTg3MC00ZTJkLWFjODct
Y2M2YmM5NDUzOGZhLzEvM0M4SWRXOVU3TmNvRFI2c3o0ZUs2ejhvckU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zODk0NzctNTg3MC00ZTJkLWFjODctY2M2YmM5NDUzOGZh
LzEvM0M4SWRXOVU3TmNvRFI2c3o0ZUs2ejhvckU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmjeGfH4
npwtwHag6UVxBvoWInsJTr1PDXv8NV05p+GAtH3OqjJYgjTTI0RXzbXuVAhxUyZz
4m7fqjmIyt4itDh8il4r85p3z1oblYeeGfYwZtpK3o6x5CLqYZs4C0cpaITkrf+u
q1QSkuEZY7qsaSrfba3nHczQKDp4EIDfB/nAFi9aWRhx8VZdwvFJfM8KtPXK+hrp
pycRQ5JicS3tB4r1uQNnDu4NixwDUw8r6m8XHj455z3L61Zxa1dDi+/s3NDXUCD4
n1ZoNKjEKUkul+KOyIG3iuX98pWY/OWuLJqVma/njEXsl2i9b5T4n9qGcCQ1Jox7
PNOExdtT9jA+gg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:06:21 2025 by rpki-client