Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
File: 3EFBHpPiXV7GUJlWmxtcX63Brj0.mft (raw, json)
Hash identifier: PfVmnf/P+mIggD93zNnUOckD2PbEpjNlSXrzQz/t22U=
Subject key identifier: 26:9D:6A:AD:24:6E:BD:46:34:C4:7B:8A:50:80:0B:3B:A1:6F:DE:C7
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 01988F90AC36EDAB41857EDBBA2B14859B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
Manifest number: 11EF
Signing time: Sat 09 Aug 2025 16:01:19 +0000
Manifest this update: Sat 09 Aug 2025 16:01:19 +0000
Manifest next update: Sun 10 Aug 2025 16:01:19 +0000
Files and hashes: 1: 3EFBHpPiXV7GUJlWmxtcX63Brj0.crl (hash: MWTe9Z7XCpL6k5BNICbe2ukDjBqhST40Zn343xSIJ68=)
2: I5wQnrgvMCaYn9C8yDvoLQWI0Fs.roa (hash: LLp7jSaPRxKkmfQPCgmC3oWPlWcodXukIf+OL2Y6Xy4=)
3: h62oWk5e6sS8zDCwC47t23u4hGk.roa (hash: KIOG5EX7T8Dsm3c4MU4hyZU5pek+PylPfC7rdsiyJoY=)
4: jGoTTL_48yWV-ohs_hgmOjEwT4E.roa (hash: Q0KSsruo9YLV5d/ARziN3CSGqP5OR6gQhOox+XP9FnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:ac:36:ed:ab:41:85:7e:db:ba:2b:14:85:9b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Aug 9 16:01:19 2025 GMT
Not After : Aug 10 16:01:19 2025 GMT
Subject: CN=269d6aad246ebd4634c47b8a50800b3ba16fdec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4d:5c:42:d9:1b:87:a1:5e:a6:c5:ca:8c:98:
91:38:22:9d:c9:00:1d:3c:a2:63:dd:ed:98:d8:52:
94:ce:d9:18:a8:0d:6a:61:36:54:b4:ab:ff:ce:9d:
d2:6e:42:cb:b8:fa:2c:72:7f:fb:a3:7e:3e:56:2f:
58:8b:e5:88:3c:a2:57:51:35:28:6e:1a:a4:4e:7a:
b5:c1:5b:d0:a1:f1:84:4d:9a:74:41:52:29:06:e3:
32:4f:54:ab:b1:85:33:2f:f3:08:fd:72:52:22:3f:
cf:89:1b:a3:e6:f9:f1:26:94:d2:7c:bd:0f:da:e7:
6b:13:10:83:12:2f:50:cd:87:5d:bd:5b:83:4a:46:
aa:3c:81:44:e9:4d:23:d9:21:36:41:d9:2b:6f:37:
f0:c0:cb:3b:89:1d:5a:6b:31:69:dc:ac:6b:4d:b0:
8a:b9:aa:33:23:43:b9:85:79:65:a7:4a:db:74:b5:
9b:0d:c1:09:db:28:ff:fd:0d:c6:d6:8a:e8:14:28:
f0:3e:80:21:9c:b6:22:6c:e7:8a:71:30:54:b5:16:
54:3f:e1:b2:b5:e7:3f:55:33:5e:ad:51:2d:6f:35:
47:22:09:5a:fc:2c:f7:41:71:8d:38:a7:0c:4b:69:
7c:5a:57:36:fb:72:a5:ce:63:b2:40:36:44:20:4b:
13:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9D:6A:AD:24:6E:BD:46:34:C4:7B:8A:50:80:0B:3B:A1:6F:DE:C7
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:77:5f:b5:b4:0f:ab:1c:5e:72:d3:d7:a4:89:de:3c:1e:61:
f8:58:04:15:6c:4d:31:28:1e:84:cc:b7:84:3b:c9:56:7b:8e:
ca:ee:1c:d5:52:e3:11:35:3d:08:83:57:8d:dc:01:97:d0:16:
75:14:b4:51:ec:3f:bd:23:54:d9:d3:1e:5e:43:69:10:e7:b5:
83:91:b7:96:bd:bf:1c:0a:18:5d:9f:9e:4e:d8:b9:39:75:44:
fb:80:e3:3c:5a:33:06:d6:97:02:cc:90:77:83:3f:06:0b:26:
67:48:8a:a1:15:bf:d2:06:7b:ff:8a:34:a4:02:c7:92:e5:63:
4d:bb:14:2f:3f:16:ec:6b:1f:54:69:55:27:0f:98:98:0e:c4:
77:b3:a6:87:79:73:4d:d8:b2:2c:7f:b2:f2:d9:9a:2e:d1:33:
e4:a9:dd:94:a6:07:2f:9b:38:97:05:2b:33:a2:76:2f:5c:36:
9a:30:7f:22:da:ec:cd:58:12:48:6c:64:b4:11:68:8c:9e:bb:
d1:25:18:9b:13:a8:bf:82:4d:8d:4b:9a:90:c1:af:d2:5b:c0:
75:72:0c:58:08:79:9f:92:6f:84:ef:77:24:b6:d9:a9:96:01:
c4:43:da:d6:f7:9c:67:8e:00:dd:da:8f:4d:1f:10:80:e0:7c:
57:12:4a:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPkKw27atBhX7buisUhZt6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDE0MTFlOTNlMjVkNWVjNjUwOTk1NjliMWI1YzVmYWRj
MWFlM2QwHhcNMjUwODA5MTYwMTE5WhcNMjUwODEwMTYwMTE5WjAzMTEwLwYDVQQD
EygyNjlkNmFhZDI0NmViZDQ2MzRjNDdiOGE1MDgwMGIzYmExNmZkZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk1cQtkbh6FepsXKjJiROCKdyQAd
PKJj3e2Y2FKUztkYqA1qYTZUtKv/zp3SbkLLuPoscn/7o34+Vi9Yi+WIPKJXUTUo
bhqkTnq1wVvQofGETZp0QVIpBuMyT1SrsYUzL/MI/XJSIj/PiRuj5vnxJpTSfL0P
2udrExCDEi9QzYddvVuDSkaqPIFE6U0j2SE2QdkrbzfwwMs7iR1aazFp3KxrTbCK
uaozI0O5hXllp0rbdLWbDcEJ2yj//Q3G1oroFCjwPoAhnLYibOeKcTBUtRZUP+Gy
tec/VTNerVEtbzVHIgla/Cz3QXGNOKcMS2l8Wlc2+3KlzmOyQDZEIEsTRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCadaq0kbr1GNMR7ilCACzuhb97HMB8GA1UdIwQY
MBaAFNxBQR6T4l1exlCZVpsbXF+twa49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEt
NTEzODdkMTYwYmE5LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEtNTEzODdkMTYwYmE5
LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJndftbQP
qxxectPXpInePB5h+FgEFWxNMSgehMy3hDvJVnuOyu4c1VLjETU9CINXjdwBl9AW
dRS0Uew/vSNU2dMeXkNpEOe1g5G3lr2/HAoYXZ+eTti5OXVE+4DjPFozBtaXAsyQ
d4M/BgsmZ0iKoRW/0gZ7/4o0pALHkuVjTbsULz8W7GsfVGlVJw+YmA7Ed7Omh3lz
TdiyLH+y8tmaLtEz5KndlKYHL5s4lwUrM6J2L1w2mjB/ItrszVgSSGxktBFojJ67
0SUYmxOov4JNjUuakMGv0lvAdXIMWAh5n5JvhO93JLbZqZYBxEPa1vecZ44A3dqP
TR8QgOB8VxJK2g==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:14:17 2025 by rpki-client