Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
File: R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft (raw, json)
Hash identifier: T4f/EvxdCiSfdZYEu3r47GQ/x1RqW7rmzbc8kSxrNzY=
Subject key identifier: 67:EF:02:7D:3A:78:3D:13:61:33:9D:8A:C3:8B:CF:2C:82:98:C7:80
Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Certificate serial: 019896A6BEE0396F81431C120383DB7A9D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
Manifest number: 38
Signing time: Mon 11 Aug 2025 01:02:46 +0000
Manifest this update: Mon 11 Aug 2025 01:02:46 +0000
Manifest next update: Tue 12 Aug 2025 01:02:46 +0000
Files and hashes: 1: R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl (hash: H2Jvt+hmxwkaf+uYSh9x6tFPc8i0EWSEfIsxBM/9SVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:be:e0:39:6f:81:43:1c:12:03:83:db:7a:9d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Validity
Not Before: Aug 11 01:02:46 2025 GMT
Not After : Aug 12 01:02:46 2025 GMT
Subject: CN=67ef027d3a783d1361339d8ac38bcf2c8298c780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d7:e8:f8:90:d0:28:38:5e:dd:cc:e9:13:bf:
6c:63:63:68:88:1b:cd:5d:0e:4b:51:f2:2e:b5:ac:
b0:95:4d:10:0a:a8:85:2c:df:f4:5d:71:b0:12:db:
dc:dd:13:cb:c6:fb:d0:b8:33:cb:03:ba:42:3c:53:
84:24:1f:dd:27:45:00:e3:74:15:3d:c8:58:34:01:
f8:06:e1:6d:b6:c9:3c:b0:c9:d4:b2:4e:d0:5a:dc:
85:f5:b1:35:77:6d:58:91:8a:8f:80:c1:09:98:1a:
de:d7:bb:91:64:42:20:bd:88:2b:fe:9e:c9:e1:b3:
03:44:53:12:48:50:f1:6b:98:6a:d5:4a:15:21:12:
c0:fe:97:1d:50:58:df:7e:7a:33:54:7a:b3:65:56:
5c:57:77:23:6b:c7:17:bd:a8:fd:58:3e:d2:7c:1a:
57:77:d2:36:6d:b0:21:be:18:2f:0d:00:61:8c:ec:
6c:34:a0:5a:01:b7:d1:22:1f:c7:65:1a:e7:a4:aa:
f8:91:2c:e9:43:87:88:9c:ad:e5:e6:6f:05:c8:b3:
91:18:c7:5e:df:a7:6c:04:ba:b9:82:08:77:1d:74:
ee:4b:9b:28:01:71:6a:49:8f:eb:5c:a4:95:4e:16:
38:5a:df:1f:83:aa:24:33:65:71:70:f0:12:ef:80:
a2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EF:02:7D:3A:78:3D:13:61:33:9D:8A:C3:8B:CF:2C:82:98:C7:80
X509v3 Authority Key Identifier:
keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9b:6b:fb:04:99:bc:18:50:ac:cd:14:c5:10:29:91:f5:97:
a0:68:d2:b4:3c:71:14:b9:ab:a1:12:3a:63:87:0a:83:71:56:
eb:c9:10:93:9f:ed:3e:f2:dc:a8:9f:39:83:f8:e2:f8:00:ec:
2a:2e:27:0d:f6:92:ce:0b:07:19:6d:2e:cc:f9:61:95:a2:10:
b1:a8:30:1a:26:4b:74:02:b7:98:7f:27:84:f5:f8:52:59:10:
53:7e:cf:ab:08:b2:ea:b2:7a:49:9e:ef:f0:df:20:ea:7b:9d:
bb:3e:10:0d:ed:0f:7d:77:e0:f6:4a:0a:c8:d3:7d:6d:b2:d9:
0a:2e:10:f3:e0:8f:5d:d4:95:5c:80:ec:5d:39:02:7a:58:74:
8d:04:67:ee:40:76:cf:09:ae:24:13:f5:f6:85:ef:a9:7b:ae:
16:e6:d1:ba:41:2c:cb:27:f8:7b:52:0d:9f:b3:3a:3a:9f:75:
99:4c:2e:db:90:ad:a0:e4:54:8b:a7:35:c1:35:de:ab:50:98:
88:f8:72:2b:b6:0b:06:d0:5b:2e:50:0c:ac:9c:9e:35:10:b9:
dd:37:8d:d6:d6:19:d0:34:c2:00:23:42:b7:5a:29:f9:ed:44:
af:2f:8c:13:39:56:a8:a5:97:c8:f6:b0:6c:f1:df:57:28:40:
49:24:51:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpr7gOW+BQxwSA4Pbep0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NzMyNDMwODFlYWRjMWVmNGFlMzIzNGY4NmIyYmQ3MjYy
MmI1YzQwHhcNMjUwODExMDEwMjQ2WhcNMjUwODEyMDEwMjQ2WjAzMTEwLwYDVQQD
Eyg2N2VmMDI3ZDNhNzgzZDEzNjEzMzlkOGFjMzhiY2YyYzgyOThjNzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9fo+JDQKDhe3czpE79sY2NoiBvN
XQ5LUfIutaywlU0QCqiFLN/0XXGwEtvc3RPLxvvQuDPLA7pCPFOEJB/dJ0UA43QV
PchYNAH4BuFttsk8sMnUsk7QWtyF9bE1d21YkYqPgMEJmBre17uRZEIgvYgr/p7J
4bMDRFMSSFDxa5hq1UoVIRLA/pcdUFjffnozVHqzZVZcV3cja8cXvaj9WD7SfBpX
d9I2bbAhvhgvDQBhjOxsNKBaAbfRIh/HZRrnpKr4kSzpQ4eInK3l5m8FyLORGMde
36dsBLq5ggh3HXTuS5soAXFqSY/rXKSVThY4Wt8fg6okM2VxcPAS74CiWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfvAn06eD0TYTOdisOLzyyCmMeAMB8GA1UdIwQY
MBaAFEdzJDCB6twe9K4yNPhrK9cmIrXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNTQ5ODgtODdlMS00YTlkLWEzM2It
MzRhOTQ5YzkyMDc0LzEvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNTQ5ODgtODdlMS00YTlkLWEzM2ItMzRhOTQ5YzkyMDc0
LzEvUjNNa01JSHEzQjcwcmpJMC1Hc3IxeVlpdGNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5tr+wSZ
vBhQrM0UxRApkfWXoGjStDxxFLmroRI6Y4cKg3FW68kQk5/tPvLcqJ85g/ji+ADs
Ki4nDfaSzgsHGW0uzPlhlaIQsagwGiZLdAK3mH8nhPX4UlkQU37Pqwiy6rJ6SZ7v
8N8g6nuduz4QDe0PfXfg9koKyNN9bbLZCi4Q8+CPXdSVXIDsXTkCelh0jQRn7kB2
zwmuJBP19oXvqXuuFubRukEsyyf4e1INn7M6Op91mUwu25CtoORUi6c1wTXeq1CY
iPhyK7YLBtBbLlAMrJyeNRC53TeN1tYZ0DTCACNCt1op+e1Ery+MEzlWqKWXyPaw
bPHfVyhASSRRVA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:25:48 2025 by rpki-client