Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
File: 3q91C1wrlTnZblZJdyr34Q7-D-o.mft (raw, json)
Hash identifier: UB73ao053lVky9+cLzREPrDVdOwvSatbeVqe41MKsN4=
Subject key identifier: 65:03:36:52:6D:A1:2C:98:DA:A6:2F:59:9B:08:D6:AA:43:D1:02:6C
Authority key identifier: DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
Certificate issuer: /CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Certificate serial: 019885B1A24E90DFB4B914E0CA4009C3E0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
Manifest number: 0CB1
Signing time: Thu 07 Aug 2025 18:01:07 +0000
Manifest this update: Thu 07 Aug 2025 18:01:07 +0000
Manifest next update: Fri 08 Aug 2025 18:01:07 +0000
Files and hashes: 1: 3q91C1wrlTnZblZJdyr34Q7-D-o.crl (hash: Fs8o4Yu9hrMlbLTcE/fz5jZZEE/RaVDrqYe8PhJT2EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:a2:4e:90:df:b4:b9:14:e0:ca:40:09:c3:e0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Validity
Not Before: Aug 7 18:01:07 2025 GMT
Not After : Aug 8 18:01:07 2025 GMT
Subject: CN=650336526da12c98daa62f599b08d6aa43d1026c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:46:dc:98:43:f2:a5:d5:8c:6e:8e:4f:2a:
99:3d:c5:62:45:d5:71:36:12:e6:16:c7:70:3b:27:
5b:78:56:50:ea:b6:6b:c2:7e:d0:d9:c2:52:5b:b2:
e5:c8:97:a4:bb:b5:b6:6c:81:32:78:96:eb:47:dd:
17:69:1c:33:f3:12:67:55:75:52:59:40:55:8b:ba:
98:39:59:e8:62:9c:f1:c6:cf:7d:b5:ac:66:1c:40:
47:26:c1:5d:55:89:1c:5a:7f:e6:13:ed:32:0f:2d:
45:4d:bd:f8:c4:f0:bc:6c:d6:bd:fb:d0:4a:08:8f:
54:dc:d5:e6:6c:fd:c2:1e:63:ab:ff:8e:7e:ca:01:
4f:cb:27:23:3d:52:74:79:3c:cf:30:64:1d:d0:d0:
5c:36:89:50:ef:4d:e3:8a:ad:a5:43:02:bf:50:16:
84:b3:aa:35:52:53:91:e5:d4:f8:79:19:82:ff:36:
df:b7:86:79:a7:cd:65:dc:24:65:ec:8d:99:78:e7:
b1:a1:52:c9:43:fc:84:d2:4c:4f:02:43:1a:a9:db:
d2:7e:65:e3:a2:63:76:f8:b9:ee:b1:a8:09:d2:9d:
57:7d:9d:2b:88:2c:9d:ef:53:0c:8f:ff:f5:7c:53:
20:d1:d0:eb:59:c2:17:f1:ef:16:55:9c:b4:c3:9a:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:03:36:52:6D:A1:2C:98:DA:A6:2F:59:9B:08:D6:AA:43:D1:02:6C
X509v3 Authority Key Identifier:
keyid:DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:06:82:9f:fe:fe:3b:28:7c:10:73:b5:10:99:2f:10:6c:7a:
b1:cc:9d:cd:8d:f3:ed:92:1c:78:4a:4e:e6:aa:74:4c:17:90:
34:5f:9e:ea:79:fd:44:c2:6d:65:3f:81:c1:f7:0f:be:c5:31:
53:b9:34:e7:9b:e2:64:65:69:e7:d4:01:e4:11:e7:a7:89:82:
da:27:38:16:74:02:3c:7a:38:18:d3:b5:d7:f8:39:f8:b2:7d:
9a:88:8a:f0:0f:93:68:eb:8f:4c:b1:72:5d:0d:74:11:d3:00:
7b:58:3c:bc:3b:51:17:9c:01:4c:b8:5d:fb:d7:52:a0:66:6e:
42:ba:d3:6d:6b:c8:7d:21:b5:33:2b:d4:b4:e9:74:20:9f:28:
f7:7b:bb:67:06:b8:77:0c:a4:7f:c5:13:0d:39:c6:a1:8d:93:
65:eb:3e:b5:6f:48:b1:00:56:97:bb:be:3a:50:96:ce:bb:58:
46:cd:64:4b:2b:bc:ca:a7:5a:8f:e5:28:13:c6:f4:42:24:6e:
58:ce:d3:5e:25:73:02:06:e1:7f:85:56:1a:bb:42:c2:78:68:
70:e6:48:eb:f9:1a:8d:cf:0e:90:ce:ac:f9:22:48:0d:c6:25:
de:4c:7a:77:c8:0d:19:85:b7:a5:9a:9a:38:94:3f:a1:e1:8f:
a4:1c:de:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFsaJOkN+0uRTgykAJw+C6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYWY3NTBiNWMyYjk1MzlkOTZlNTY0OTc3MmFmN2UxMGVm
ZTBmZWEwHhcNMjUwODA3MTgwMTA3WhcNMjUwODA4MTgwMTA3WjAzMTEwLwYDVQQD
Eyg2NTAzMzY1MjZkYTEyYzk4ZGFhNjJmNTk5YjA4ZDZhYTQzZDEwMjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbdG3JhD8qXVjG6OTyqZPcViRdVx
NhLmFsdwOydbeFZQ6rZrwn7Q2cJSW7LlyJeku7W2bIEyeJbrR90XaRwz8xJnVXVS
WUBVi7qYOVnoYpzxxs99taxmHEBHJsFdVYkcWn/mE+0yDy1FTb34xPC8bNa9+9BK
CI9U3NXmbP3CHmOr/45+ygFPyycjPVJ0eTzPMGQd0NBcNolQ703jiq2lQwK/UBaE
s6o1UlOR5dT4eRmC/zbft4Z5p81l3CRl7I2ZeOexoVLJQ/yE0kxPAkMaqdvSfmXj
omN2+LnusagJ0p1XfZ0riCyd71MMj//1fFMg0dDrWcIX8e8WVZy0w5opCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUDNlJtoSyY2qYvWZsI1qpD0QJsMB8GA1UdIwQY
MBaAFN6vdQtcK5U52W5WSXcq9+EO/g/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3E5MUMxd3JsVG5aYmxaSmR5cjM0UTctRC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wMzA5ZmItNmY4NC00N2JjLWE3Yzkt
NWQzMWQxZmU0MjhmLzEvM3E5MUMxd3JsVG5aYmxaSmR5cjM0UTctRC1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wMzA5ZmItNmY4NC00N2JjLWE3YzktNWQzMWQxZmU0Mjhm
LzEvM3E5MUMxd3JsVG5aYmxaSmR5cjM0UTctRC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgaCn/7+
Oyh8EHO1EJkvEGx6scydzY3z7ZIceEpO5qp0TBeQNF+e6nn9RMJtZT+BwfcPvsUx
U7k055viZGVp59QB5BHnp4mC2ic4FnQCPHo4GNO11/g5+LJ9moiK8A+TaOuPTLFy
XQ10EdMAe1g8vDtRF5wBTLhd+9dSoGZuQrrTbWvIfSG1MyvUtOl0IJ8o93u7Zwa4
dwykf8UTDTnGoY2TZes+tW9IsQBWl7u+OlCWzrtYRs1kSyu8yqdaj+UoE8b0QiRu
WM7TXiVzAgbhf4VWGrtCwnhocOZI6/kajc8OkM6s+SJIDcYl3kx6d8gNGYW3pZqa
OJQ/oeGPpBze8Q==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:44:59 2025 by rpki-client