Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
File: 3NJG4YMFZ6sRUjHbd18oedma8KA.mft (raw, json)
Hash identifier: L96JaOCy3PdBvRCQ38z1kU+soCPegoll2Yn5Co/h1Z4=
Subject key identifier: 36:A1:49:C9:58:20:61:BC:53:F6:C3:FE:5F:3D:D4:A7:70:34:78:EC
Authority key identifier: DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
Certificate issuer: /CN=dcd246e1830567ab115231db775f2879d99af0a0
Certificate serial: 01987A890B94A5B7BF94EA4284610C63875B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
Manifest number: 04B3
Signing time: Tue 05 Aug 2025 14:00:58 +0000
Manifest this update: Tue 05 Aug 2025 14:00:58 +0000
Manifest next update: Wed 06 Aug 2025 14:00:58 +0000
Files and hashes: 1: 3NJG4YMFZ6sRUjHbd18oedma8KA.crl (hash: FfeZmWDGYvBYjct/xxdEj9fBaSVoKbhMzvqFiUzCCjY=)
2: pMwZ_dWs8ojtwFFRIemRw2PGl-4.roa (hash: N5kw38iMWCD98CNIZvqnGspiT0ia5Z9rWUHOZazCoDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:0b:94:a5:b7:bf:94:ea:42:84:61:0c:63:87:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcd246e1830567ab115231db775f2879d99af0a0
Validity
Not Before: Aug 5 14:00:58 2025 GMT
Not After : Aug 6 14:00:58 2025 GMT
Subject: CN=36a149c9582061bc53f6c3fe5f3dd4a7703478ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:13:57:37:af:1c:2a:7f:22:39:9d:50:6a:99:
6e:a4:67:b4:70:b0:8b:c9:ee:e5:c3:a4:e3:95:4f:
87:1c:57:b7:61:4e:53:05:5a:18:bb:15:75:2d:31:
88:09:da:08:b3:68:ea:00:a9:fd:5d:04:3f:4d:45:
19:ed:48:6a:77:e2:45:b5:c8:c9:06:a8:30:7a:ad:
4a:28:85:b2:40:90:1e:22:c3:fa:39:7a:b8:ea:df:
e5:99:a9:5c:93:a0:6b:eb:21:7e:9a:7a:14:24:b8:
1d:50:c7:3a:91:ee:2c:41:80:04:6f:25:e4:b6:ec:
b9:ef:1c:35:8b:fb:3d:d1:2b:ad:b7:89:3c:85:9a:
07:19:f4:10:3b:74:ae:ba:bc:30:88:78:46:47:6a:
66:2a:ca:d9:00:02:ee:98:17:74:af:f2:3b:f4:a6:
ec:6d:48:ab:2d:07:a2:ee:ae:27:a2:56:77:b3:02:
0e:2b:cf:4b:fa:bc:a9:54:c9:d1:f7:de:a4:38:f1:
65:2c:b2:d7:18:46:51:5b:8b:2e:b7:73:c1:8d:19:
c6:db:13:74:56:a4:96:45:b0:2a:ec:e1:19:a3:a4:
42:86:0e:f6:9e:86:bd:6e:5a:5a:cd:8b:5a:c8:b3:
ec:5b:3a:01:d5:00:67:8d:a7:97:1b:8f:36:a9:ad:
13:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A1:49:C9:58:20:61:BC:53:F6:C3:FE:5F:3D:D4:A7:70:34:78:EC
X509v3 Authority Key Identifier:
keyid:DC:D2:46:E1:83:05:67:AB:11:52:31:DB:77:5F:28:79:D9:9A:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NJG4YMFZ6sRUjHbd18oedma8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e116b6-3c6d-485f-afcd-a41e620ba3eb/1/3NJG4YMFZ6sRUjHbd18oedma8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0f:66:b8:a0:d6:e9:d4:35:01:e6:44:28:ac:07:2f:61:57:
e5:18:e6:39:7d:86:42:39:34:29:c6:91:3e:b3:5b:e5:1e:6e:
9f:d7:ff:19:71:10:08:41:a7:a3:7c:23:bb:f3:8e:d7:db:d0:
18:da:2c:49:17:27:e1:0a:33:7f:56:d8:e5:cf:61:95:b0:52:
ff:07:8a:60:9e:ca:dc:65:30:32:e5:8e:17:13:39:84:32:f0:
1b:b6:d7:f7:03:06:9a:d3:be:fa:1d:6f:6f:05:99:df:67:d3:
19:0b:a9:dd:21:5c:e2:a0:f5:a1:57:e0:22:be:d1:37:36:d6:
f5:39:fe:c8:62:09:40:da:56:29:94:c2:86:3b:2c:7f:2f:77:
91:5d:41:64:32:49:e6:6e:56:37:8a:c3:fd:b4:09:e0:5f:82:
b5:c1:e4:24:3a:a9:22:e9:d2:cb:cd:c8:39:17:9f:69:49:e3:
b0:b7:8c:a9:80:94:60:8e:4d:37:41:d3:ec:6d:7d:96:41:f3:
c7:f9:69:22:52:de:f3:cd:9c:79:b2:d3:8c:ae:1c:29:4d:7e:
f5:b3:e1:6d:ae:d1:8c:df:b9:34:03:7a:f6:14:ec:68:da:24:
e9:cf:e9:96:aa:f7:6e:2b:df:d3:7a:86:4b:fd:c1:a0:0c:62:
85:cd:2f:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iQuUpbe/lOpChGEMY4dbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZDI0NmUxODMwNTY3YWIxMTUyMzFkYjc3NWYyODc5ZDk5
YWYwYTAwHhcNMjUwODA1MTQwMDU4WhcNMjUwODA2MTQwMDU4WjAzMTEwLwYDVQQD
EygzNmExNDljOTU4MjA2MWJjNTNmNmMzZmU1ZjNkZDRhNzcwMzQ3OGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hNXN68cKn8iOZ1QaplupGe0cLCL
ye7lw6TjlU+HHFe3YU5TBVoYuxV1LTGICdoIs2jqAKn9XQQ/TUUZ7Uhqd+JFtcjJ
Bqgweq1KKIWyQJAeIsP6OXq46t/lmalck6Br6yF+mnoUJLgdUMc6ke4sQYAEbyXk
tuy57xw1i/s90Sutt4k8hZoHGfQQO3SuurwwiHhGR2pmKsrZAALumBd0r/I79Kbs
bUirLQei7q4nolZ3swIOK89L+rypVMnR996kOPFlLLLXGEZRW4sut3PBjRnG2xN0
VqSWRbAq7OEZo6RChg72noa9blpazYtayLPsWzoB1QBnjaeXG482qa0T8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDahSclYIGG8U/bD/l891KdwNHjsMB8GA1UdIwQY
MBaAFNzSRuGDBWerEVIx23dfKHnZmvCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lMTE2YjYtM2M2ZC00ODVmLWFmY2Qt
YTQxZTYyMGJhM2ViLzEvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lMTE2YjYtM2M2ZC00ODVmLWFmY2QtYTQxZTYyMGJhM2Vi
LzEvM05KRzRZTUZaNnNSVWpIYmQxOG9lZG1hOEtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYw9muKDW
6dQ1AeZEKKwHL2FX5RjmOX2GQjk0KcaRPrNb5R5un9f/GXEQCEGno3wju/OO19vQ
GNosSRcn4Qozf1bY5c9hlbBS/weKYJ7K3GUwMuWOFxM5hDLwG7bX9wMGmtO++h1v
bwWZ32fTGQup3SFc4qD1oVfgIr7RNzbW9Tn+yGIJQNpWKZTChjssfy93kV1BZDJJ
5m5WN4rD/bQJ4F+CtcHkJDqpIunSy83IORefaUnjsLeMqYCUYI5NN0HT7G19lkHz
x/lpIlLe882cebLTjK4cKU1+9bPhba7RjN+5NAN69hTsaNok6c/plqr3bivf03qG
S/3BoAxihc0vFg==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:13:18 2025 by rpki-client