Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
File: 3A-eoEY21-cUGLkwkczQ5XAVvkk.mft (raw, json)
Hash identifier: Xdm0PuiLDBmNp7EZc6SAVBWKpStR5w7lIurp+trg6c0=
Subject key identifier: 79:64:C3:8F:26:4A:9D:50:CA:2D:49:D6:96:6F:91:AE:79:F8:04:36
Authority key identifier: DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
Certificate issuer: /CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Certificate serial: 0198745087281678D6164A5FACA8E7775024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 09:01:31 +0000
Manifest this update: Mon 04 Aug 2025 09:01:31 +0000
Manifest next update: Tue 05 Aug 2025 09:01:31 +0000
Files and hashes: 1: 3A-eoEY21-cUGLkwkczQ5XAVvkk.crl (hash: TdnLS+qfjLUR1/z7g6gYAVZ9cDTRI96mBxJIjTlmkpA=)
2: L9o7KQxJPRJhzeZqHSfbm_7F0-s.roa (hash: nN3JagCFrpyGEb5Wr7V9qHCmIBDIlF1ypYg9dy1tB3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:87:28:16:78:d6:16:4a:5f:ac:a8:e7:77:50:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Validity
Not Before: Aug 4 09:01:31 2025 GMT
Not After : Aug 5 09:01:31 2025 GMT
Subject: CN=7964c38f264a9d50ca2d49d6966f91ae79f80436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:22:6a:a9:9f:6d:54:aa:33:c7:c6:18:a8:
8d:53:fe:c4:67:ca:1e:7e:83:b4:38:9c:91:89:40:
02:2c:7a:f9:50:b9:ab:9c:60:96:d1:38:96:da:26:
0e:cd:6c:b7:42:33:42:5f:ec:f8:2b:3a:9c:0e:55:
b3:63:08:0d:41:96:9d:3e:09:7e:19:12:14:ff:dc:
a3:2e:78:55:3b:37:20:c9:d4:2e:a5:5b:b5:44:fa:
82:78:59:12:a6:0a:78:83:ab:d3:4a:fc:5e:5d:3b:
e5:c1:43:da:fa:0c:ad:10:a1:46:ff:46:f3:50:43:
09:4e:40:fb:21:5c:5d:03:a1:9f:f9:e9:e7:58:02:
f9:3e:1b:07:86:cc:e7:e1:ca:7b:18:6f:77:43:6e:
8b:be:48:98:6c:db:9e:01:0c:83:3c:94:e0:f4:80:
1d:fb:f1:a4:13:1c:c3:e8:30:23:9a:60:90:42:9c:
aa:c5:e0:cc:2c:14:56:7f:7f:8f:b1:85:6f:04:d6:
a2:c8:e3:51:e2:b3:e4:53:58:e7:e4:63:6e:8b:0b:
ba:df:52:b1:8f:9b:e8:40:58:5f:0b:47:7b:e9:7e:
af:eb:d6:6b:92:dc:26:08:3d:e4:4f:7e:f6:a1:f6:
44:ae:83:dc:59:ce:ab:4e:cf:36:ec:62:d0:58:71:
bc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:64:C3:8F:26:4A:9D:50:CA:2D:49:D6:96:6F:91:AE:79:F8:04:36
X509v3 Authority Key Identifier:
keyid:DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d1:cc:a0:34:9e:76:c6:cd:df:4d:27:4c:18:76:96:0f:0b:
95:5b:88:11:a1:93:48:1a:10:c7:d2:e3:53:ee:b2:12:5b:ef:
dc:21:c4:fa:4f:96:a9:bf:4b:10:ce:fc:b8:d6:63:78:9d:cc:
bc:b4:fa:85:8b:23:29:12:af:6b:55:f6:70:9c:7e:fa:54:87:
98:35:64:3a:46:26:59:d6:2f:8c:dc:aa:84:3f:de:57:2a:c4:
08:2d:a2:e5:2a:fc:f2:1e:22:05:7e:a3:63:33:2f:8c:27:03:
cc:4e:25:26:ce:81:9a:25:45:6d:da:03:11:3d:2a:69:7b:51:
67:0b:11:95:4c:3a:89:f7:30:14:30:6a:26:e7:1d:88:44:43:
03:1e:d6:65:23:95:9a:8c:4e:9e:9b:e6:18:fe:82:42:c4:d1:
fc:82:b2:b4:42:f7:c9:93:49:5f:ee:87:1b:66:b0:3d:d2:b6:
1c:d6:00:f5:79:72:78:51:a7:e9:4b:78:7a:83:40:5e:42:7b:
3e:45:a8:7e:b1:21:e2:cc:8d:76:49:83:d8:8b:85:1e:ad:72:
2b:2d:73:19:fd:18:66:4e:59:6f:2d:b0:f4:82:27:17:75:c1:
8e:33:ca:4b:aa:f7:68:0d:9e:0d:63:0d:bf:e7:16:75:08:2e:
f5:c4:3a:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UIcoFnjWFkpfrKjnd1AkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGY5ZWEwNDYzNmQ3ZTcxNDE4YjkzMDkxY2NkMGU1NzAx
NWJlNDkwHhcNMjUwODA0MDkwMTMxWhcNMjUwODA1MDkwMTMxWjAzMTEwLwYDVQQD
Eyg3OTY0YzM4ZjI2NGE5ZDUwY2EyZDQ5ZDY5NjZmOTFhZTc5ZjgwNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5ciaqmfbVSqM8fGGKiNU/7EZ8oe
foO0OJyRiUACLHr5ULmrnGCW0TiW2iYOzWy3QjNCX+z4KzqcDlWzYwgNQZadPgl+
GRIU/9yjLnhVOzcgydQupVu1RPqCeFkSpgp4g6vTSvxeXTvlwUPa+gytEKFG/0bz
UEMJTkD7IVxdA6Gf+ennWAL5PhsHhszn4cp7GG93Q26LvkiYbNueAQyDPJTg9IAd
+/GkExzD6DAjmmCQQpyqxeDMLBRWf3+PsYVvBNaiyONR4rPkU1jn5GNuiwu631Kx
j5voQFhfC0d76X6v69ZrktwmCD3kT372ofZEroPcWc6rTs827GLQWHG8awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlkw48mSp1Qyi1J1pZvka55+AQ2MB8GA1UdIwQY
MBaAFNwPnqBGNtfnFBi5MJHM0OVwFb5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wMWJmOTYtODFiNi00ZTRjLWFiODAt
ZTBiYzQxMDc4NDI2LzEvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8wMWJmOTYtODFiNi00ZTRjLWFiODAtZTBiYzQxMDc4NDI2
LzEvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArtHMoDSe
dsbN300nTBh2lg8LlVuIEaGTSBoQx9LjU+6yElvv3CHE+k+Wqb9LEM78uNZjeJ3M
vLT6hYsjKRKva1X2cJx++lSHmDVkOkYmWdYvjNyqhD/eVyrECC2i5Sr88h4iBX6j
YzMvjCcDzE4lJs6BmiVFbdoDET0qaXtRZwsRlUw6ifcwFDBqJucdiERDAx7WZSOV
moxOnpvmGP6CQsTR/IKytEL3yZNJX+6HG2awPdK2HNYA9XlyeFGn6Ut4eoNAXkJ7
PkWofrEh4syNdkmD2IuFHq1yKy1zGf0YZk5Zby2w9IInF3XBjjPKS6r3aA2eDWMN
v+cWdQgu9cQ6YQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:11 2025 by rpki-client