Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: tkwqMHRFY8bVMMf0m0QVnA4pAuOpCrFIG36NWzfR45c=
Subject key identifier: 56:1E:8F:A3:ED:F3:1B:E4:27:E2:8F:99:CE:B0:0E:3C:0A:51:46:13
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 01987261515AFCD3FE02859A000242888C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 1353
Signing time: Mon 04 Aug 2025 00:00:36 +0000
Manifest this update: Mon 04 Aug 2025 00:00:36 +0000
Manifest next update: Tue 05 Aug 2025 00:00:36 +0000
Files and hashes: 1: 3HTozQB4pcsucL9eexzvUMqz-88.roa (hash: p8l9H8yiS+tCWDGhSt8TqxKK4BPlsy+wIY5igUPwFNU=)
2: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: NnX6pzXo6pfFzza8Tyha05y7RGmTqsk5K4w8PhCQQtk=)
3: GBhjKbS-fcKacs4QagSv_dPJry4.roa (hash: z+hDh/AwHXwEXvEpHMWmz7Nj3R8e4I8tmHqYFBmRwRQ=)
4: I_q4haHSQ5-iSHbhiDxn8LO10n0.roa (hash: rR8MdnfYv9DYhofCAQL44jv965jNwY7cLv2/tA4Lg2A=)
5: cdhvQ3G9D22hzZ35uWHLO4DK-b8.roa (hash: 9/hDVeqHVKKGEQirCvU77EziyJeBYbpOSUraYbA1sQI=)
6: icjgdrZ-2bYy0vmLkXN3ZejcMO0.roa (hash: BhIg1YAcMIYOB5H79uWHhrjxoemSR0rVkY+hQV1/Imo=)
7: qNl-Q8HhmrUArxLKQehroWC5qDc.roa (hash: 9pycVyvA/LfKV0R0Bhd4fllbZltDwLcpn1H2WIOi7gw=)
8: tgoPg8gJ1wgYlvzK_ZhaNvMswpk.roa (hash: 0Yao20qxSDFfx3jAhC+HO3FsXj9rP4F8uh+mjbY+yHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:51:5a:fc:d3:fe:02:85:9a:00:02:42:88:8c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Aug 4 00:00:36 2025 GMT
Not After : Aug 5 00:00:36 2025 GMT
Subject: CN=561e8fa3edf31be427e28f99ceb00e3c0a514613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:a5:10:d6:98:0d:81:fa:b7:ec:c4:c9:1b:
19:cd:0a:40:57:20:c9:4c:e7:87:fb:0f:62:3e:06:
02:39:99:20:33:2d:72:6a:6a:21:1c:03:57:60:50:
ca:4b:55:6e:39:43:a4:bb:72:f5:be:15:d3:79:0a:
1e:71:68:ef:20:1b:ba:91:ec:7a:4f:a1:6b:0d:32:
54:a7:da:c0:ed:00:3d:59:7d:5f:5f:a6:4a:8c:58:
d8:84:48:bb:ae:c6:63:56:ee:d0:c4:9e:f1:b6:0d:
fc:26:68:16:c1:82:90:19:04:7a:04:92:99:3f:93:
b0:c1:69:98:44:af:48:ec:8c:40:9e:ae:a1:a3:5e:
fe:70:33:73:1a:3e:ed:22:a7:08:89:aa:77:9a:b0:
34:c9:d2:c5:9a:76:b8:47:3b:c2:12:04:86:d1:4f:
d0:20:80:8d:b5:df:dd:94:33:e9:68:cc:df:21:82:
1f:14:af:9c:f1:4c:3c:b8:19:1f:c4:9a:d0:8a:1b:
a1:1e:7a:51:db:80:a5:95:5e:65:69:bf:d8:af:55:
b0:29:e4:cd:fd:b7:4d:88:03:48:f4:56:40:57:93:
0a:c5:9f:56:0a:b1:12:ee:7a:2a:1b:77:20:8d:43:
a2:cb:67:ed:2b:6a:5e:45:52:95:7a:bd:24:41:65:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1E:8F:A3:ED:F3:1B:E4:27:E2:8F:99:CE:B0:0E:3C:0A:51:46:13
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7f:15:46:92:2c:a6:e6:2e:ad:5b:00:83:c2:68:c9:82:6f:
74:e4:1d:6e:29:45:da:87:96:32:75:13:1b:08:db:3b:08:f1:
0f:fe:91:de:4c:3f:61:58:8a:5e:3a:c5:f5:6d:4f:b1:95:5a:
36:ec:81:38:7f:84:8e:21:f4:38:f8:5b:30:29:a7:da:5f:71:
fd:0e:d3:f5:c2:68:4d:e8:78:e9:0d:fb:06:6e:7f:c9:9d:17:
b0:df:fc:c5:33:5c:87:f1:5e:2c:b3:78:2b:ef:67:09:1d:5d:
98:5c:62:e9:bf:f4:36:07:37:cf:25:fc:63:24:b0:2c:cb:af:
14:1d:44:69:0d:0a:02:2a:55:ec:4f:c2:2e:ad:9f:15:57:35:
1e:ed:7c:8b:fb:80:00:f3:bb:1a:04:25:5f:83:dc:a0:91:99:
29:18:53:fd:7a:10:3d:4a:9d:56:10:67:ff:1d:fa:7a:64:2a:
99:54:bd:87:5f:ba:4b:cc:0d:f6:3d:4b:07:72:a8:b6:54:67:
0d:d3:75:89:d8:86:9f:3d:5e:ea:d9:74:c8:2d:07:cb:74:5b:
0c:c1:53:b2:37:82:ed:05:9d:f6:fd:c9:ff:29:75:45:81:2b:
71:77:71:14:98:7f:58:da:e0:c3:86:d4:4f:7d:d4:de:17:d6:
5d:a1:f3:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyYVFa/NP+AoWaAAJCiIxmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTRiYjY5NDUzZjEzOWE2MDAyOWUyMmRiMGZiMzQyNGE5
MDZjZWUwHhcNMjUwODA0MDAwMDM2WhcNMjUwODA1MDAwMDM2WjAzMTEwLwYDVQQD
Eyg1NjFlOGZhM2VkZjMxYmU0MjdlMjhmOTljZWIwMGUzYzBhNTE0NjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0culENaYDYH6t+zEyRsZzQpAVyDJ
TOeH+w9iPgYCOZkgMy1yamohHANXYFDKS1VuOUOku3L1vhXTeQoecWjvIBu6kex6
T6FrDTJUp9rA7QA9WX1fX6ZKjFjYhEi7rsZjVu7QxJ7xtg38JmgWwYKQGQR6BJKZ
P5OwwWmYRK9I7IxAnq6ho17+cDNzGj7tIqcIiap3mrA0ydLFmna4RzvCEgSG0U/Q
IICNtd/dlDPpaMzfIYIfFK+c8Uw8uBkfxJrQihuhHnpR24CllV5lab/Yr1WwKeTN
/bdNiANI9FZAV5MKxZ9WCrES7noqG3cgjUOiy2ftK2peRVKVer0kQWXWTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYej6Pt8xvkJ+KPmc6wDjwKUUYTMB8GA1UdIwQY
MBaAFNyUu2lFPxOaYAKeItsPs0JKkGzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGIt
MDkwYzQ2ZTlmMmVkLzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGItMDkwYzQ2ZTlmMmVk
LzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl38VRpIs
puYurVsAg8JoyYJvdOQdbilF2oeWMnUTGwjbOwjxD/6R3kw/YViKXjrF9W1PsZVa
NuyBOH+EjiH0OPhbMCmn2l9x/Q7T9cJoTeh46Q37Bm5/yZ0XsN/8xTNch/FeLLN4
K+9nCR1dmFxi6b/0Ngc3zyX8YySwLMuvFB1EaQ0KAipV7E/CLq2fFVc1Hu18i/uA
APO7GgQlX4PcoJGZKRhT/XoQPUqdVhBn/x36emQqmVS9h1+6S8wN9j1LB3KotlRn
DdN1idiGnz1e6tl0yC0Hy3RbDMFTsjeC7QWd9v3J/yl1RYErcXdxFJh/WNrgw4bU
T33U3hfWXaHzrg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:55 2025 by rpki-client