Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft
File: x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft (raw, json)
Hash identifier: eaxZdUGmpTkQIfRlIEBG6rP2G7FM+x5z6rVksGPfDWw=
Subject key identifier: 0B:83:9C:E7:51:23:D5:10:27:1B:2B:B3:F2:A9:0D:91:A0:81:1F:02
Authority key identifier: C7:72:9A:6E:CE:2D:0E:BE:9B:BE:5D:8D:79:62:F7:3B:DC:92:04:A9
Certificate issuer: /CN=c7729a6ece2d0ebe9bbe5d8d7962f73bdc9204a9
Certificate serial: 01988543E7B36DA5B3160572F4B7DE2C6A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Kabs4tDr6bvl2NeWL3O9ySBKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft
Manifest number: D4
Signing time: Thu 07 Aug 2025 16:01:16 +0000
Manifest this update: Thu 07 Aug 2025 16:01:16 +0000
Manifest next update: Fri 08 Aug 2025 16:01:16 +0000
Files and hashes: 1: x3Kabs4tDr6bvl2NeWL3O9ySBKk.crl (hash: fG4tBnnw6gqtnClTLVqpnLAohX6hIFguR6fd7meTHEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Kabs4tDr6bvl2NeWL3O9ySBKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:e7:b3:6d:a5:b3:16:05:72:f4:b7:de:2c:6a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7729a6ece2d0ebe9bbe5d8d7962f73bdc9204a9
Validity
Not Before: Aug 7 16:01:16 2025 GMT
Not After : Aug 8 16:01:16 2025 GMT
Subject: CN=0b839ce75123d510271b2bb3f2a90d91a0811f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:01:32:dc:7c:fd:1e:60:89:87:3d:62:70:a2:
00:02:4c:f9:b9:43:3b:06:e1:86:8a:17:74:72:06:
c5:67:07:9d:ab:fb:1c:a5:a8:97:82:31:78:6a:2d:
f3:47:c8:29:cc:96:88:92:02:7f:1b:37:a8:da:5f:
41:d8:08:5f:29:c0:e6:3c:69:04:f5:11:a0:b7:69:
6f:89:de:75:2a:d5:e5:8c:cf:08:f1:eb:d2:b2:a4:
3d:bd:01:c1:bd:26:73:86:63:ce:8b:d4:06:54:74:
0b:ca:d1:e8:bc:1e:18:26:dc:83:85:12:cf:9b:d7:
6d:43:cc:e0:03:2e:24:65:61:95:76:b8:90:d5:cd:
ce:65:d2:03:75:04:2a:ae:34:f0:84:0c:14:df:2f:
63:9f:54:51:50:dc:22:4f:34:cd:5e:56:a8:b6:c1:
8e:74:fc:ce:9d:12:d7:3f:6f:05:84:64:55:c6:41:
1e:7f:29:91:93:40:b9:c2:f2:a6:e6:c3:47:42:3a:
4d:73:e1:68:0c:c6:56:4e:b1:7a:2b:fc:1e:95:01:
bf:42:6f:b0:33:8b:b7:55:5e:c4:15:03:fb:4c:36:
34:ab:18:73:cf:5a:93:a5:4a:bd:3e:27:f9:dd:d7:
0c:94:e9:22:a6:3a:53:fe:e5:39:6f:71:96:06:24:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:83:9C:E7:51:23:D5:10:27:1B:2B:B3:F2:A9:0D:91:A0:81:1F:02
X509v3 Authority Key Identifier:
keyid:C7:72:9A:6E:CE:2D:0E:BE:9B:BE:5D:8D:79:62:F7:3B:DC:92:04:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Kabs4tDr6bvl2NeWL3O9ySBKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:42:1f:c8:59:2f:23:1d:fb:7d:e8:cd:c3:a3:cc:87:75:ec:
d4:98:f8:24:3a:08:bc:15:10:c7:ca:84:e6:5b:67:10:31:42:
a4:24:57:27:71:5c:45:c6:92:8d:d3:d0:be:87:7f:f5:d7:ab:
76:cc:e2:5d:ef:43:38:30:c0:1c:e2:23:e8:55:e6:13:ca:bd:
b9:09:7e:bb:fd:39:7a:09:b7:5d:a3:75:06:59:87:09:9b:08:
8d:be:bd:dc:bf:8e:d9:14:d4:3c:5b:ea:b2:cc:f5:c5:4f:1e:
8f:d6:9f:21:7b:6c:3f:8e:99:4b:1b:88:0c:f1:86:e4:2f:5d:
0e:f9:88:d5:0f:2a:bb:a5:48:74:bf:d6:7d:c3:1d:11:7f:f4:
6c:51:00:1b:7a:97:e0:c2:79:71:e3:7f:ff:ed:a4:e5:01:82:
2f:ed:e9:74:20:79:e5:00:53:99:af:5c:ed:27:ad:7f:e4:8c:
69:f9:1b:4b:5c:b5:ad:47:56:38:89:60:a3:03:e9:1d:82:12:
29:1a:c6:78:6c:66:89:a1:67:c0:50:ef:65:0e:c0:89:78:31:
ca:56:1c:2e:d9:66:08:25:cc:46:f9:d2:93:da:94:77:85:19:
7f:17:b0:9d:30:16:ca:ea:4c:60:b6:dd:b7:25:ed:59:24:57:
ab:d8:e1:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFQ+ezbaWzFgVy9LfeLGopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzI5YTZlY2UyZDBlYmU5YmJlNWQ4ZDc5NjJmNzNiZGM5
MjA0YTkwHhcNMjUwODA3MTYwMTE2WhcNMjUwODA4MTYwMTE2WjAzMTEwLwYDVQQD
EygwYjgzOWNlNzUxMjNkNTEwMjcxYjJiYjNmMmE5MGQ5MWEwODExZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQEy3Hz9HmCJhz1icKIAAkz5uUM7
BuGGihd0cgbFZwedq/scpaiXgjF4ai3zR8gpzJaIkgJ/Gzeo2l9B2AhfKcDmPGkE
9RGgt2lvid51KtXljM8I8evSsqQ9vQHBvSZzhmPOi9QGVHQLytHovB4YJtyDhRLP
m9dtQ8zgAy4kZWGVdriQ1c3OZdIDdQQqrjTwhAwU3y9jn1RRUNwiTzTNXlaotsGO
dPzOnRLXP28FhGRVxkEefymRk0C5wvKm5sNHQjpNc+FoDMZWTrF6K/welQG/Qm+w
M4u3VV7EFQP7TDY0qxhzz1qTpUq9Pif53dcMlOkipjpT/uU5b3GWBiQ1KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuDnOdRI9UQJxsrs/KpDZGggR8CMB8GA1UdIwQY
MBaAFMdymm7OLQ6+m75djXli9zvckgSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNLYWJzNHREcjZidmwyTmVXTDNPOXlTQktrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8xYzk3NTQtMzJlOS00MTg2LWE2OTEt
ZGMzNjUxY2NmOWFlLzEveDNLYWJzNHREcjZidmwyTmVXTDNPOXlTQktrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8xYzk3NTQtMzJlOS00MTg2LWE2OTEtZGMzNjUxY2NmOWFl
LzEveDNLYWJzNHREcjZidmwyTmVXTDNPOXlTQktrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUIfyFkv
Ix37fejNw6PMh3Xs1Jj4JDoIvBUQx8qE5ltnEDFCpCRXJ3FcRcaSjdPQvod/9der
dsziXe9DODDAHOIj6FXmE8q9uQl+u/05egm3XaN1BlmHCZsIjb693L+O2RTUPFvq
ssz1xU8ej9afIXtsP46ZSxuIDPGG5C9dDvmI1Q8qu6VIdL/WfcMdEX/0bFEAG3qX
4MJ5ceN//+2k5QGCL+3pdCB55QBTma9c7Setf+SMafkbS1y1rUdWOIlgowPpHYIS
KRrGeGxmiaFnwFDvZQ7AiXgxylYcLtlmCCXMRvnSk9qUd4UZfxewnTAWyupMYLbd
tyXtWSRXq9jhRQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:38:00 2025 by rpki-client