Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
File: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft (raw, json)
Hash identifier: d9fdiVgSyMbLl0yAnlhG+3EYnxS1LngwQlF55WUf19E=
Subject key identifier: A9:07:F8:DD:C9:E8:DE:8E:5B:3D:01:4F:8E:D9:A8:17:5F:4D:83:0A
Authority key identifier: DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
Certificate issuer: /CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Certificate serial: 019896A6E5404CCE7FFD99347F60C7D2CFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
Manifest number: 013C
Signing time: Mon 11 Aug 2025 01:02:56 +0000
Manifest this update: Mon 11 Aug 2025 01:02:56 +0000
Manifest next update: Tue 12 Aug 2025 01:02:56 +0000
Files and hashes: 1: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl (hash: ikhKbay5xQvYFJk1UJL/tMrKtYI5iYwBpgsIpzbRVW8=)
2: Hsu5uEPri8mQgaZ4Qzz1c8ZzqXs.roa (hash: DFoP5Rp4yqWzaWfGAIFOGX06a0KJXff63tIBuI2st8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:e5:40:4c:ce:7f:fd:99:34:7f:60:c7:d2:cf:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Validity
Not Before: Aug 11 01:02:56 2025 GMT
Not After : Aug 12 01:02:56 2025 GMT
Subject: CN=a907f8ddc9e8de8e5b3d014f8ed9a8175f4d830a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f6:69:2b:0c:09:31:b1:10:e5:ac:b6:b1:0d:
0a:ba:54:9b:13:dd:d5:0c:5d:d0:48:c7:29:46:43:
ee:b5:72:39:0b:2e:30:28:b6:74:3b:2a:f5:01:91:
c4:43:eb:20:eb:5f:80:45:04:c2:5b:f9:01:a0:0d:
5a:96:70:6a:f7:b6:ed:05:09:79:9e:de:f9:0a:51:
7d:54:8e:e3:2e:a4:e6:30:c4:25:00:8b:42:1e:ff:
20:55:14:b5:25:1e:78:d2:e9:47:36:23:13:7f:45:
b9:bc:b8:7e:0a:c4:30:3c:99:57:c1:28:67:7b:7d:
e4:e4:ed:3e:4d:c6:98:65:72:f4:39:33:5e:1a:53:
b1:5b:65:8b:63:b6:4d:4a:59:69:47:32:ff:7b:b0:
47:f4:14:31:7c:d6:b0:6b:5b:21:15:9f:86:05:76:
30:d2:70:7c:0f:65:c2:9d:56:c2:e9:6f:e9:b9:1e:
08:ee:84:b6:0f:f3:74:f5:be:8c:9f:3f:d8:98:ae:
9f:84:1a:83:30:43:2c:05:ac:49:86:11:12:1d:63:
f3:1b:af:a8:14:b2:90:04:2b:17:b5:32:11:39:60:
8a:6b:81:ec:80:15:3e:05:d2:3b:fd:bb:71:52:e9:
f8:a9:c5:59:66:4c:a3:f7:db:57:04:b8:81:dd:e1:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:07:F8:DD:C9:E8:DE:8E:5B:3D:01:4F:8E:D9:A8:17:5F:4D:83:0A
X509v3 Authority Key Identifier:
keyid:DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:5d:88:14:8e:7c:70:52:d5:82:b1:85:73:a7:0e:7b:7b:84:
2d:84:4f:c4:bb:68:9d:4d:48:22:62:05:bf:2a:39:bf:82:27:
3f:ef:5f:89:8f:52:1c:96:4e:37:32:ab:e5:73:1e:c7:0c:63:
08:02:1e:51:33:99:c5:ef:49:55:bf:9a:33:08:aa:a7:4c:14:
5e:58:d5:43:0e:ca:f6:b0:6c:83:26:08:07:31:c9:07:e4:43:
3c:e5:4d:59:e8:6e:1c:0a:6c:9b:33:20:75:e7:46:21:b3:4a:
90:4e:8d:15:8b:cc:0f:15:38:76:1c:0f:d7:ee:3d:47:c4:ae:
19:bd:4b:c6:d0:9a:48:8c:42:ed:b8:89:3d:e5:d0:b1:a1:48:
f7:0f:2e:2e:3e:85:5e:64:65:08:09:9f:39:a7:29:d4:34:e5:
98:f6:4c:d9:a5:31:f0:a1:87:ae:f1:d7:31:b3:c9:52:8a:e0:
1f:34:32:11:67:86:fb:28:89:e6:bd:a7:c3:bc:8a:34:04:c0:
79:15:69:c4:bd:a5:66:e5:a2:ad:d8:98:a1:fb:d3:d5:0d:70:
e9:74:a9:29:d2:14:4d:e0:65:0f:4f:93:eb:fe:64:af:89:1f:
b9:ef:7b:98:69:31:c3:ab:83:8e:66:31:ec:da:f0:e6:3e:31:
09:19:63:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpuVATM5//Zk0f2DH0s/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTU4ZGNiMjkwZWM1YWU3ZjY2YzFmYTBmOGQ5NjMyMTFk
ZWVhNTQwHhcNMjUwODExMDEwMjU2WhcNMjUwODEyMDEwMjU2WjAzMTEwLwYDVQQD
EyhhOTA3ZjhkZGM5ZThkZThlNWIzZDAxNGY4ZWQ5YTgxNzVmNGQ4MzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/ZpKwwJMbEQ5ay2sQ0KulSbE93V
DF3QSMcpRkPutXI5Cy4wKLZ0Oyr1AZHEQ+sg61+ARQTCW/kBoA1alnBq97btBQl5
nt75ClF9VI7jLqTmMMQlAItCHv8gVRS1JR540ulHNiMTf0W5vLh+CsQwPJlXwShn
e33k5O0+TcaYZXL0OTNeGlOxW2WLY7ZNSllpRzL/e7BH9BQxfNawa1shFZ+GBXYw
0nB8D2XCnVbC6W/puR4I7oS2D/N09b6Mnz/YmK6fhBqDMEMsBaxJhhESHWPzG6+o
FLKQBCsXtTIROWCKa4HsgBU+BdI7/btxUun4qcVZZkyj99tXBLiB3eE1swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkH+N3J6N6OWz0BT47ZqBdfTYMKMB8GA1UdIwQY
MBaAFN8VjcspDsWuf2bB+g+NljIR3upUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hXTnl5a094YTVfWnNINkQ0MldNaEhlNmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hNTRiODUtYWYzZS00N2M2LTgwZTct
YzQxNDJkZjM1Y2MzLzEvM3hXTnl5a094YTVfWnNINkQ0MldNaEhlNmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9hNTRiODUtYWYzZS00N2M2LTgwZTctYzQxNDJkZjM1Y2Mz
LzEvM3hXTnl5a094YTVfWnNINkQ0MldNaEhlNmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxl2IFI58
cFLVgrGFc6cOe3uELYRPxLtonU1IImIFvyo5v4InP+9fiY9SHJZONzKr5XMexwxj
CAIeUTOZxe9JVb+aMwiqp0wUXljVQw7K9rBsgyYIBzHJB+RDPOVNWehuHApsmzMg
dedGIbNKkE6NFYvMDxU4dhwP1+49R8SuGb1LxtCaSIxC7biJPeXQsaFI9w8uLj6F
XmRlCAmfOacp1DTlmPZM2aUx8KGHrvHXMbPJUorgHzQyEWeG+yiJ5r2nw7yKNATA
eRVpxL2lZuWirdiYofvT1Q1w6XSpKdIUTeBlD0+T6/5kr4kfue97mGkxw6uDjmYx
7Nrw5j4xCRljlA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:24:19 2025 by rpki-client