Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier: 9aQ2NLhwHVXtv0SkRwVeek2fuc8ETzkO5GvkTjk6DJs=
Subject key identifier: AC:C7:4D:3A:3C:90:B9:A9:9E:CD:D9:1F:19:BE:7B:D6:A8:56:7D:0B
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial: 019873E3A566283285510771EB25EC3F5529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:02:35 +0000
Manifest this update: Mon 04 Aug 2025 07:02:35 +0000
Manifest next update: Tue 05 Aug 2025 07:02:35 +0000
Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: +SNnJpvlZMn6InDyznFobVM4+PVxL4ZqDZ1vFDmkhi4=)
2: 4aMsThSQ8pto7QNh_kFB73sOXo8.roa (hash: HEBFusOcNgQfdZRF0U/he5dAzzkTri4ddTPSMK0+giU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:a5:66:28:32:85:51:07:71:eb:25:ec:3f:55:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Validity
Not Before: Aug 4 07:02:35 2025 GMT
Not After : Aug 5 07:02:35 2025 GMT
Subject: CN=acc74d3a3c90b9a99ecdd91f19be7bd6a8567d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a2:d4:2c:1e:f5:f4:3f:f3:73:3c:21:6f:9b:
f2:ea:6a:bb:93:08:a3:6b:74:15:27:06:ea:1f:bc:
f1:86:39:0b:1e:8f:d2:3e:45:4a:b8:bf:95:6b:41:
f8:0d:30:d1:fd:d1:66:37:d6:9b:8c:79:bc:a1:2f:
56:dd:57:8a:46:e5:fa:c7:2d:72:15:b9:1b:7c:4e:
55:df:4f:44:f5:7a:59:36:7a:eb:7b:90:86:66:48:
64:61:6d:27:bd:93:3d:92:b5:17:fb:a4:bd:e5:ff:
1f:06:ce:8f:d4:49:43:eb:ba:82:6d:d8:e4:26:4b:
6e:8c:aa:08:60:e3:69:99:bf:37:3e:26:51:33:1c:
3f:23:9b:63:5d:9b:84:0f:86:d1:d6:fe:02:c5:10:
32:e5:9f:09:c3:9d:59:5c:55:da:46:9a:6d:c6:f5:
1e:bb:5d:e4:c9:49:7f:80:06:a2:e0:50:2d:02:25:
b4:90:2e:ac:c3:b3:04:27:fd:f5:73:2f:9d:9b:53:
f3:6c:de:a3:c4:fa:ed:73:b9:67:e0:07:6c:25:c0:
e7:a8:6f:f3:41:15:7e:6a:e7:e1:7b:84:74:34:55:
2f:83:62:df:e6:b5:db:8a:0d:46:2f:2e:35:28:78:
47:d4:97:d8:c2:e7:15:29:ae:18:62:6e:0b:58:52:
e0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C7:4D:3A:3C:90:B9:A9:9E:CD:D9:1F:19:BE:7B:D6:A8:56:7D:0B
X509v3 Authority Key Identifier:
keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e1:79:f6:d3:3c:20:26:b6:f2:82:63:03:d6:1c:c1:25:53:
ec:95:62:3a:c3:e7:74:b3:ae:54:99:3e:b2:38:eb:c2:c9:2d:
11:75:95:32:c1:72:d8:71:cc:bb:55:f1:d6:67:ed:4b:db:9f:
b7:71:7f:37:27:43:fc:a8:04:5e:ee:7e:3d:ab:63:39:32:af:
37:bb:0d:ce:11:48:4d:a5:1f:aa:54:4f:ed:ec:18:00:bf:1a:
c9:1f:3d:66:15:35:7f:73:3c:df:3f:18:e6:af:b3:61:bc:42:
c7:c2:ae:0e:49:7c:44:1c:7b:51:8e:a7:db:5d:6a:4f:ff:56:
ca:98:5e:bb:eb:03:2a:27:da:52:8c:e6:73:40:e7:a2:6b:01:
b2:f6:e8:25:5d:9a:16:70:8f:06:c5:d3:32:a7:37:74:5f:2a:
62:aa:a5:44:6d:d4:b8:f9:15:05:2f:bd:49:89:51:f3:b9:52:
1f:08:03:1b:9f:80:3b:cb:3f:cf:2a:58:3e:91:f4:bb:fd:07:
0d:89:5a:d1:7d:af:d0:1e:ec:a8:97:3f:62:c9:4a:03:70:e5:
a8:d1:c6:f8:a8:a9:24:3b:05:a1:63:1e:76:4d:b7:cd:5b:8b:
cc:96:36:6f:16:43:21:50:12:c4:59:0e:7f:7e:05:79:4f:6c:
48:37:8f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz46VmKDKFUQdx6yXsP1UpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTAyZjYxMzFjZTVhNzQ2ZWI1OTgxZGQ0YzFkNmI0ZTE3
YjAzM2YwHhcNMjUwODA0MDcwMjM1WhcNMjUwODA1MDcwMjM1WjAzMTEwLwYDVQQD
EyhhY2M3NGQzYTNjOTBiOWE5OWVjZGQ5MWYxOWJlN2JkNmE4NTY3ZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KLULB719D/zczwhb5vy6mq7kwij
a3QVJwbqH7zxhjkLHo/SPkVKuL+Va0H4DTDR/dFmN9abjHm8oS9W3VeKRuX6xy1y
FbkbfE5V309E9XpZNnrre5CGZkhkYW0nvZM9krUX+6S95f8fBs6P1ElD67qCbdjk
JktujKoIYONpmb83PiZRMxw/I5tjXZuED4bR1v4CxRAy5Z8Jw51ZXFXaRpptxvUe
u13kyUl/gAai4FAtAiW0kC6sw7MEJ/31cy+dm1PzbN6jxPrtc7ln4AdsJcDnqG/z
QRV+aufhe4R0NFUvg2Lf5rXbig1GLy41KHhH1JfYwucVKa4YYm4LWFLgBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzHTTo8kLmpns3ZHxm+e9aoVn0LMB8GA1UdIwQY
MBaAFNwQL2Exzlp0brWYHdTB1rThewM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jOGQ2NWUtZTVjOC00MTIwLWFlMWQt
YjA5N2Q5ZjhlYzIyLzEvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jOGQ2NWUtZTVjOC00MTIwLWFlMWQtYjA5N2Q5ZjhlYzIy
LzEvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+F59tM8
ICa28oJjA9YcwSVT7JViOsPndLOuVJk+sjjrwsktEXWVMsFy2HHMu1Xx1mftS9uf
t3F/NydD/KgEXu5+PatjOTKvN7sNzhFITaUfqlRP7ewYAL8ayR89ZhU1f3M83z8Y
5q+zYbxCx8KuDkl8RBx7UY6n211qT/9Wypheu+sDKifaUozmc0DnomsBsvboJV2a
FnCPBsXTMqc3dF8qYqqlRG3UuPkVBS+9SYlR87lSHwgDG5+AO8s/zypYPpH0u/0H
DYla0X2v0B7sqJc/YslKA3DlqNHG+KipJDsFoWMedk23zVuLzJY2bxZDIVASxFkO
f34FeU9sSDePVQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:47 2025 by rpki-client