
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier: pv01o7DvqIGvDq/Aa3MdfDKEPftyJTPTNzziwQq1f1s=
Subject key identifier: F1:D9:E9:9E:B8:72:4A:15:A7:6E:72:32:97:FA:76:A0:EB:C4:05:CE
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer: /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial: 01988167C53D23E7DE9FF72E6919561B2BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 22:01:58 +0000
Manifest this update: Wed 06 Aug 2025 22:01:58 +0000
Manifest next update: Thu 07 Aug 2025 22:01:58 +0000
Files and hashes: 1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: 3W9cDkD+yCPsJorIPI0zRvkCFeLiRv0tLk/5Q9hX4eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:c5:3d:23:e7:de:9f:f7:2e:69:19:56:1b:2b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Validity
Not Before: Aug 6 22:01:58 2025 GMT
Not After : Aug 7 22:01:58 2025 GMT
Subject: CN=f1d9e99eb8724a15a76e723297fa76a0ebc405ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3a:a6:f0:bb:e9:bc:6f:48:4b:b1:bf:de:7f:
c5:b1:27:0d:bb:9a:9e:f2:fc:6d:6a:b9:df:47:58:
af:f7:7f:39:86:a9:0d:0d:e8:a5:b3:b5:6b:f3:30:
35:63:d8:96:8f:a2:f7:d6:16:7c:fc:30:5d:60:05:
84:5a:e5:ae:98:3f:d6:bb:3b:58:09:da:20:f6:a3:
84:c4:7e:b0:0d:b3:18:d6:b2:57:99:d2:fd:fe:ee:
34:90:25:65:df:40:c3:67:14:eb:4b:78:92:ca:28:
ab:d1:48:34:4b:bd:76:94:7b:b8:c6:2d:58:74:c9:
8b:58:b5:fa:26:32:fa:9c:3a:ce:0c:af:7b:8d:6d:
7c:2a:42:9e:b7:d9:b8:61:61:10:ad:c4:b8:1f:5c:
e6:a2:7a:84:06:91:f7:ce:95:bd:9f:6a:f6:0a:ff:
cd:f5:d8:1f:5c:71:64:53:7d:ef:29:55:b7:17:ff:
5b:7b:b1:d9:9a:56:b5:48:02:38:35:c7:10:b6:ce:
86:6f:76:d2:28:6e:e3:c2:4f:e1:d1:aa:c3:98:27:
71:35:78:67:f6:4d:dd:94:41:ca:0d:95:6d:6c:bd:
63:62:ba:9c:1e:03:ad:a7:46:d0:ca:db:8c:96:2e:
ea:59:b6:62:e6:a8:85:92:09:09:02:bd:60:b4:12:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D9:E9:9E:B8:72:4A:15:A7:6E:72:32:97:FA:76:A0:EB:C4:05:CE
X509v3 Authority Key Identifier:
keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:18:72:31:6a:76:a6:44:24:a9:47:ae:72:65:57:81:80:9b:
c7:ee:17:d6:22:22:3d:b8:f6:45:14:b3:35:82:e2:a5:81:e3:
dd:bf:2a:27:c0:6c:ea:bd:68:c5:c5:ca:ce:71:80:57:16:cd:
55:a7:b8:c7:24:fb:d8:ef:0c:c3:5c:2e:91:a4:47:5b:24:aa:
0d:95:27:e4:fa:52:cf:f8:2b:1a:4b:36:41:4c:1b:95:87:84:
fd:83:dd:97:a3:ea:6c:bc:40:14:ef:66:0f:af:7f:10:7c:90:
8e:07:28:18:80:56:c9:61:0b:33:55:f8:8c:f3:a8:ad:b2:e2:
3f:0c:c9:4e:bc:9f:4f:7d:8c:ba:56:7b:dd:ed:6f:1c:ea:a0:
1c:4a:53:1a:1c:21:b7:d8:39:61:37:54:0c:53:e1:aa:ff:e0:
e6:e0:f2:23:b7:39:5e:b6:78:96:b8:ec:54:c6:51:7f:90:10:
2d:b5:23:92:fc:3e:18:37:01:a7:e8:ad:fd:9a:6c:73:45:e1:
ce:0d:1a:52:57:69:47:03:0d:a6:be:5c:82:e1:cb:74:ff:da:
58:13:0f:d6:25:fd:20:87:ba:f6:26:82:d8:ae:d9:1a:7b:d3:
20:6b:d5:9f:f5:4e:51:9c:e1:87:72:fd:88:29:69:98:c1:90:
51:1a:e3:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZ8U9I+fen/cuaRlWGyumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTJhNWJjNTAwOGY0ODI0ODI2NWZkMmVkNjBmZmZjMmMz
ZTljY2MwHhcNMjUwODA2MjIwMTU4WhcNMjUwODA3MjIwMTU4WjAzMTEwLwYDVQQD
EyhmMWQ5ZTk5ZWI4NzI0YTE1YTc2ZTcyMzI5N2ZhNzZhMGViYzQwNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTqm8LvpvG9IS7G/3n/FsScNu5qe
8vxtarnfR1iv9385hqkNDeils7Vr8zA1Y9iWj6L31hZ8/DBdYAWEWuWumD/WuztY
Cdog9qOExH6wDbMY1rJXmdL9/u40kCVl30DDZxTrS3iSyiir0Ug0S712lHu4xi1Y
dMmLWLX6JjL6nDrODK97jW18KkKet9m4YWEQrcS4H1zmonqEBpH3zpW9n2r2Cv/N
9dgfXHFkU33vKVW3F/9be7HZmla1SAI4NccQts6Gb3bSKG7jwk/h0arDmCdxNXhn
9k3dlEHKDZVtbL1jYrqcHgOtp0bQytuMli7qWbZi5qiFkgkJAr1gtBJ9+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHZ6Z64ckoVp25yMpf6dqDrxAXOMB8GA1UdIwQY
MBaAFN8SpbxQCPSCSCZf0u1g//wsPpzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hLbHZGQUk5SUpJSmxfUzdXRF9fQ3ctbk13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84YTBkY2UtOWRmNi00M2RhLTk5ZDYt
OTA0NTZmMWVhNzU3LzEvM3hLbHZGQUk5SUpJSmxfUzdXRF9fQ3ctbk13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC84YTBkY2UtOWRmNi00M2RhLTk5ZDYtOTA0NTZmMWVhNzU3
LzEvM3hLbHZGQUk5SUpJSmxfUzdXRF9fQ3ctbk13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxhyMWp2
pkQkqUeucmVXgYCbx+4X1iIiPbj2RRSzNYLipYHj3b8qJ8Bs6r1oxcXKznGAVxbN
Vae4xyT72O8Mw1wukaRHWySqDZUn5PpSz/grGks2QUwblYeE/YPdl6PqbLxAFO9m
D69/EHyQjgcoGIBWyWELM1X4jPOorbLiPwzJTryfT32MulZ73e1vHOqgHEpTGhwh
t9g5YTdUDFPhqv/g5uDyI7c5XrZ4lrjsVMZRf5AQLbUjkvw+GDcBp+it/Zpsc0Xh
zg0aUldpRwMNpr5cguHLdP/aWBMP1iX9IIe69iaC2K7ZGnvTIGvVn/VOUZzhh3L9
iClpmMGQURrjig==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:50 2025 by rpki-client