Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
File: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json)
Hash identifier: DzwQiM7XkAsS0+Sy/snIUIBxRCGfuIe13WDAt8nIDhY=
Subject key identifier: 35:57:E7:BF:53:20:F7:61:7C:D1:5E:F7:CA:BB:68:65:B5:36:DB:B8
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 01988B7CBBC340F6DE5DB848485C7A5D9A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
Manifest number: 0EAA
Signing time: Fri 08 Aug 2025 21:01:04 +0000
Manifest this update: Fri 08 Aug 2025 21:01:04 +0000
Manifest next update: Sat 09 Aug 2025 21:01:04 +0000
Files and hashes: 1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: 4N631qc2CkwED/HH28MGjioTGG1owp3y/TtmGjC2rIU=)
2: xEogw3XOMF8942N9C953fQ9p_WQ.roa (hash: gm/zrEw7lZ+SPbWVu4mrs06eSMAYkDfSw1DjLnUzlh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:bb:c3:40:f6:de:5d:b8:48:48:5c:7a:5d:9a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: Aug 8 21:01:04 2025 GMT
Not After : Aug 9 21:01:04 2025 GMT
Subject: CN=3557e7bf5320f7617cd15ef7cabb6865b536dbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:ee:40:83:5c:e3:89:9b:ef:46:98:86:27:
46:01:ee:df:7f:89:3c:15:d0:c1:26:f4:7f:dc:bb:
cd:03:31:c6:6c:de:04:6a:c4:a2:db:99:3f:96:de:
3e:6e:59:0a:80:36:fb:db:01:01:03:7c:b5:c3:5e:
39:77:64:cc:5c:e2:93:4f:7d:7e:37:47:f2:24:c7:
e4:09:6c:9f:ef:d8:68:d8:46:4b:d0:1f:45:83:89:
41:a2:a3:20:d3:66:43:d9:ab:df:97:0b:7b:e2:8e:
92:94:a0:bc:b4:64:ad:42:42:fe:c5:c6:38:88:01:
eb:87:88:68:39:97:4d:a1:c3:a5:94:49:69:20:07:
21:1d:2f:75:bf:e1:07:5a:d8:9f:d8:6c:c0:33:db:
67:44:cb:43:57:9f:21:26:86:fb:2f:f6:9e:e9:2c:
f2:99:91:52:4d:67:a7:dd:cc:49:04:97:9f:32:45:
bd:04:fe:f5:59:a5:31:98:18:96:4e:c6:9e:ad:1c:
3f:b8:da:82:49:77:65:1c:14:9d:1a:7e:b2:53:ab:
0b:eb:a4:7e:1c:04:d0:1f:04:da:db:5d:d4:0a:20:
c4:f1:f8:18:5c:c7:ff:7d:37:e9:d5:a9:65:ad:b7:
f7:13:53:17:47:04:8e:83:16:c0:d4:23:7b:ed:d1:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:57:E7:BF:53:20:F7:61:7C:D1:5E:F7:CA:BB:68:65:B5:36:DB:B8
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:75:b4:90:88:e5:f4:7d:c8:d7:95:72:0e:d9:12:1d:fb:bf:
73:f7:1a:40:50:b1:21:10:d6:b9:3c:2e:47:12:e4:97:53:25:
52:4f:48:e1:77:ef:0f:1f:64:57:15:76:42:7f:0d:37:f8:46:
4e:c5:f6:ac:ff:93:90:06:3c:73:05:fa:f2:0f:80:cb:32:b5:
83:87:50:b9:5b:5d:cf:ac:48:1f:5d:d2:38:8a:0c:73:41:74:
e0:1f:a4:4d:03:af:2b:0c:a1:28:16:e2:0c:dd:90:c3:52:85:
13:ad:f2:fd:89:ba:ec:d1:cd:bb:a3:fc:b4:ee:74:05:f0:43:
3c:90:24:03:66:f5:7d:6e:b2:e2:c4:82:f1:1d:51:40:bf:94:
14:f5:cb:e7:0d:54:2b:f8:c0:c0:ad:63:be:8a:b8:a6:42:af:
d5:a0:ca:13:ca:cf:38:3d:ba:f2:25:3a:b7:c6:1f:66:55:ee:
62:1c:96:e1:c4:1f:e0:7a:33:cc:9b:63:c6:23:3f:3c:8e:08:
34:05:e1:a5:c1:63:ab:7f:6d:0b:5d:42:df:f3:c2:26:d3:79:
25:15:c4:72:21:05:d9:7f:c8:ea:a5:85:a3:d9:00:9a:5b:64:
87:7e:05:43:eb:d3:14:2f:d7:9d:c5:32:30:6e:f3:d1:5a:6d:
89:39:6d:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfLvDQPbeXbhISFx6XZoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNWFlY2JhMTAzYmIzYzBjMGU4ODRkNTIwZWIzODQ2NGQw
ZmE5MDMwHhcNMjUwODA4MjEwMTA0WhcNMjUwODA5MjEwMTA0WjAzMTEwLwYDVQQD
EygzNTU3ZTdiZjUzMjBmNzYxN2NkMTVlZjdjYWJiNjg2NWI1MzZkYmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDruQINc44mb70aYhidGAe7ff4k8
FdDBJvR/3LvNAzHGbN4EasSi25k/lt4+blkKgDb72wEBA3y1w145d2TMXOKTT31+
N0fyJMfkCWyf79ho2EZL0B9Fg4lBoqMg02ZD2avflwt74o6SlKC8tGStQkL+xcY4
iAHrh4hoOZdNocOllElpIAchHS91v+EHWtif2GzAM9tnRMtDV58hJob7L/ae6Szy
mZFSTWen3cxJBJefMkW9BP71WaUxmBiWTsaerRw/uNqCSXdlHBSdGn6yU6sL66R+
HATQHwTa213UCiDE8fgYXMf/fTfp1allrbf3E1MXRwSOgxbA1CN77dHSxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVX579TIPdhfNFe98q7aGW1Ntu4MB8GA1UdIwQY
MBaAFN5a7LoQO7PAwOiE1SDrOEZND6kDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xyc3VoQTdzOERBNklUVklPczRSazBQcVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81NWMxZjEtNjNhYi00MTQ1LWIxNTYt
ZTZhZWI5NDEzZjcyLzEvM2xyc3VoQTdzOERBNklUVklPczRSazBQcVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81NWMxZjEtNjNhYi00MTQ1LWIxNTYtZTZhZWI5NDEzZjcy
LzEvM2xyc3VoQTdzOERBNklUVklPczRSazBQcVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnW0kIjl
9H3I15VyDtkSHfu/c/caQFCxIRDWuTwuRxLkl1MlUk9I4XfvDx9kVxV2Qn8NN/hG
TsX2rP+TkAY8cwX68g+AyzK1g4dQuVtdz6xIH13SOIoMc0F04B+kTQOvKwyhKBbi
DN2Qw1KFE63y/Ym67NHNu6P8tO50BfBDPJAkA2b1fW6y4sSC8R1RQL+UFPXL5w1U
K/jAwK1jvoq4pkKv1aDKE8rPOD268iU6t8YfZlXuYhyW4cQf4HozzJtjxiM/PI4I
NAXhpcFjq39tC11C3/PCJtN5JRXEciEF2X/I6qWFo9kAmltkh34FQ+vTFC/XncUy
MG7z0VptiTltVA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:07:40 2025 by rpki-client