Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
File: 3XGhKciwiZWUIZnqbRsigmU1DQs.mft (raw, json)
Hash identifier: +EkylWtFo3Hf06u/tR/NykwZUylYYaSucQaeY9ltFc0=
Subject key identifier: C8:E3:19:FB:96:06:8D:50:B4:D2:B3:A7:30:40:C9:C6:EF:DD:2D:A1
Authority key identifier: DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
Certificate issuer: /CN=dd71a129c8b08995942199ea6d1b228265350d0b
Certificate serial: 0198729845779A921E3C6638C5F72196809D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 01:00:38 +0000
Manifest this update: Mon 04 Aug 2025 01:00:38 +0000
Manifest next update: Tue 05 Aug 2025 01:00:38 +0000
Files and hashes: 1: 3XGhKciwiZWUIZnqbRsigmU1DQs.crl (hash: 1xCuk8XonqpJ/QAKfyBAETsk90uCkdmn9hVjHhoYX/M=)
2: OwG4_h94ip7CzANECDf39dfwNGk.roa (hash: XIXqYD1CZdADAiBPHja+pimegzmDxikS2efUTrBV4t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:45:77:9a:92:1e:3c:66:38:c5:f7:21:96:80:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd71a129c8b08995942199ea6d1b228265350d0b
Validity
Not Before: Aug 4 01:00:38 2025 GMT
Not After : Aug 5 01:00:38 2025 GMT
Subject: CN=c8e319fb96068d50b4d2b3a73040c9c6efdd2da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4a:ea:af:30:cd:8c:41:16:45:60:f0:e1:5d:
fc:6b:5d:bf:06:d9:06:a6:83:e0:7d:9f:b8:8f:5f:
d5:e4:95:5a:eb:bd:e8:5f:43:2c:4b:f9:e3:61:58:
53:0d:82:a8:bd:58:e6:34:76:4e:18:e6:41:4d:8c:
c9:b3:3c:aa:6b:3d:b6:9c:5b:f8:75:1f:8c:01:f5:
17:94:48:5f:d0:11:92:5b:1c:40:e1:b2:b9:90:4c:
46:dd:c4:87:e2:46:90:e4:25:7a:b5:5c:20:9e:6e:
85:ec:65:6d:91:10:af:16:0e:a0:3e:f4:88:eb:02:
07:87:24:b2:0d:4a:49:9a:e0:7b:75:bd:66:c7:4d:
48:13:a9:96:0e:ed:8f:90:05:40:d7:66:d8:ae:52:
11:9c:eb:d7:a0:49:d0:01:89:a3:cd:15:4b:f5:4c:
32:06:81:c4:de:3c:3d:46:e6:fb:d9:3e:59:2e:e3:
d2:da:bb:9e:9b:94:ec:1a:30:9e:2c:5c:f6:d1:c2:
df:9c:82:41:36:a0:86:23:c3:10:de:0c:48:14:9f:
f2:59:02:df:ba:d2:10:ff:fc:49:f6:f7:6f:f8:41:
b5:ec:91:23:25:bf:bc:51:eb:5b:10:38:90:ad:7d:
7e:35:16:fb:96:a7:c1:d5:91:41:4e:09:06:31:8f:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E3:19:FB:96:06:8D:50:B4:D2:B3:A7:30:40:C9:C6:EF:DD:2D:A1
X509v3 Authority Key Identifier:
keyid:DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f1:de:98:e0:61:04:43:6c:42:97:43:67:95:98:a9:a0:a0:
37:54:95:33:1a:50:67:cb:35:f2:0a:67:6e:1e:e4:af:5c:63:
29:1f:b6:69:ea:99:5b:3c:61:ed:46:24:39:c0:24:20:cf:a8:
ef:7d:41:12:50:2b:69:1b:66:34:8a:fd:5d:a7:a4:12:35:1c:
1b:4d:98:76:0f:23:63:f5:85:04:4e:b3:64:01:4c:18:ba:63:
23:f6:d7:b3:7e:d9:47:a5:8a:1c:c4:54:ef:e7:c8:eb:4c:fb:
33:91:8e:97:9a:43:b6:32:68:f9:a9:50:d3:f3:1d:8a:08:58:
36:c8:a6:b5:65:59:77:b0:d7:ca:b2:70:fc:bd:cf:63:e5:15:
90:29:65:2b:55:5a:84:fe:db:0f:09:66:1f:5d:e6:c6:35:14:
9b:6f:bf:a4:61:7a:92:cc:46:69:a9:1e:24:31:66:33:22:02:
fb:02:47:2d:d3:f0:ad:46:11:83:d5:4a:c3:97:32:09:f0:f5:
50:f2:42:3b:36:3e:ae:8b:a9:27:89:92:ad:6e:36:7a:f1:e3:
fb:32:8e:fa:ef:03:ba:e8:c5:be:45:51:ae:37:31:1b:bf:7e:
e8:ef:d6:62:5b:13:fd:11:2c:e3:10:65:cb:83:a0:a3:14:0e:
32:35:ad:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymEV3mpIePGY4xfchloCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNzFhMTI5YzhiMDg5OTU5NDIxOTllYTZkMWIyMjgyNjUz
NTBkMGIwHhcNMjUwODA0MDEwMDM4WhcNMjUwODA1MDEwMDM4WjAzMTEwLwYDVQQD
EyhjOGUzMTlmYjk2MDY4ZDUwYjRkMmIzYTczMDQwYzljNmVmZGQyZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4krqrzDNjEEWRWDw4V38a12/BtkG
poPgfZ+4j1/V5JVa673oX0MsS/njYVhTDYKovVjmNHZOGOZBTYzJszyqaz22nFv4
dR+MAfUXlEhf0BGSWxxA4bK5kExG3cSH4kaQ5CV6tVwgnm6F7GVtkRCvFg6gPvSI
6wIHhySyDUpJmuB7db1mx01IE6mWDu2PkAVA12bYrlIRnOvXoEnQAYmjzRVL9Uwy
BoHE3jw9Rub72T5ZLuPS2ruem5TsGjCeLFz20cLfnIJBNqCGI8MQ3gxIFJ/yWQLf
utIQ//xJ9vdv+EG17JEjJb+8UetbEDiQrX1+NRb7lqfB1ZFBTgkGMY8xiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjjGfuWBo1QtNKzpzBAycbv3S2hMB8GA1UdIwQY
MBaAFN1xoSnIsImVlCGZ6m0bIoJlNQ0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1hHaEtjaXdpWldVSVpucWJSc2lnbVUxRFFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iNDk5YjYtMDFmNC00NDJjLWJlNzYt
YzBkOGM4NjY4OTNmLzEvM1hHaEtjaXdpWldVSVpucWJSc2lnbVUxRFFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9iNDk5YjYtMDFmNC00NDJjLWJlNzYtYzBkOGM4NjY4OTNm
LzEvM1hHaEtjaXdpWldVSVpucWJSc2lnbVUxRFFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/HemOBh
BENsQpdDZ5WYqaCgN1SVMxpQZ8s18gpnbh7kr1xjKR+2aeqZWzxh7UYkOcAkIM+o
731BElAraRtmNIr9XaekEjUcG02Ydg8jY/WFBE6zZAFMGLpjI/bXs37ZR6WKHMRU
7+fI60z7M5GOl5pDtjJo+alQ0/MdighYNsimtWVZd7DXyrJw/L3PY+UVkCllK1Va
hP7bDwlmH13mxjUUm2+/pGF6ksxGaakeJDFmMyIC+wJHLdPwrUYRg9VKw5cyCfD1
UPJCOzY+roupJ4mSrW42evHj+zKO+u8DuujFvkVRrjcxG79+6O/WYlsT/REs4xBl
y4OgoxQOMjWtwQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:54 2025 by rpki-client