Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json)
Hash identifier: lVQe8zGm3pQ43PYDMRPeJ57xWariptT3qVh7AAFEW3k=
Subject key identifier: 8D:9E:5D:80:3B:34:CA:62:3F:25:12:DC:A8:92:40:D9:C0:B3:4F:8B
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 01987D1C69FFDAD1559907FDD3A916AEA1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
Manifest number: 0942
Signing time: Wed 06 Aug 2025 02:01:10 +0000
Manifest this update: Wed 06 Aug 2025 02:01:10 +0000
Manifest next update: Thu 07 Aug 2025 02:01:10 +0000
Files and hashes: 1: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: HTqZ6sQyCMk/0SkWU/Unrx8Z9r5W3Pf0gAKwAG+StIo=)
2: 3jwAJkscmhb8NSw4un_w0ZUqE_E.roa (hash: /Q2oG/fmxx/4QlsXXEqOyxHV9Ye6s1RkScscquc109A=)
3: 4mOa1eiOJdcewQ4JsIW-qskCauo.roa (hash: iU5a4TzwFm2kJsvICm/D9T1ZRQoz++Cq67dw1/HeL2g=)
4: CXGUOccTDu6x1YyIQfa-qjSpPdk.roa (hash: r4qpBtId2VEmuyzWlIPXdikWdV98Yneiil1e7VOsia4=)
5: IlOsEMD7ILB9j5FhhZ10NN6XXx0.roa (hash: gwOuiCu86d+6YjbDxDzDd3u72bl4nQy8FzU+NPDlo3k=)
6: cMeqdhzIVxayTI5Te-oZwPQzjz0.roa (hash: opO/yGSPCMGlHiRXXAkyr0DveRWYRoFkmjqGZrYYDFc=)
7: dsfkSXYJLfZWJjDQMc0Y0owm7FA.roa (hash: W0p5k/KWht0yDd7EzO060gDAd+rVO0Q+Y0m/UDAfM10=)
8: z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa (hash: hGK3SDsyu3nnm6fMnZyOrn3oCumiT/HHk1hSsPcxxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:69:ff:da:d1:55:99:07:fd:d3:a9:16:ae:a1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Aug 6 02:01:10 2025 GMT
Not After : Aug 7 02:01:10 2025 GMT
Subject: CN=8d9e5d803b34ca623f2512dca89240d9c0b34f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:87:9f:72:3e:61:58:2d:f7:6f:7d:e0:8f:
a0:22:5c:f5:fd:a2:fd:6b:f8:cb:96:18:01:c5:e0:
90:b5:56:a7:eb:b4:0b:21:50:03:0f:bd:2e:6f:8e:
6d:85:2c:a8:bd:34:69:85:37:7e:0f:21:37:cd:31:
8f:b8:42:88:08:5d:3b:05:cb:eb:c5:9c:4f:24:40:
a6:27:f1:3a:c4:e5:d2:9e:32:00:87:84:f5:72:b4:
9b:af:77:47:32:1e:ef:d9:1a:0d:f0:18:d0:31:6e:
a2:9a:9e:8e:aa:f5:4c:00:c4:22:11:40:a4:47:0c:
7a:3e:6d:1d:07:9d:05:6a:f1:00:d9:d9:90:ba:fc:
29:01:80:93:e4:9a:b1:f4:46:a4:47:99:f0:b1:32:
3c:bf:48:c6:fe:18:b1:80:d4:eb:90:1a:51:db:fe:
70:da:5f:52:1a:5f:12:f8:44:2f:bb:c1:e2:4c:30:
fe:e6:0a:b5:63:0f:b2:2c:78:aa:23:15:3e:82:90:
36:7a:f9:29:1a:54:ed:22:78:eb:fa:b9:55:5b:84:
df:3d:49:d6:8e:32:e3:3f:f8:63:72:cb:54:ac:7a:
2a:b0:a8:7c:00:b7:29:fd:7e:ba:bb:19:c9:df:1d:
44:e8:f0:4a:a8:b4:53:aa:e2:58:02:da:56:0c:fa:
2e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9E:5D:80:3B:34:CA:62:3F:25:12:DC:A8:92:40:D9:C0:B3:4F:8B
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:19:73:3b:37:ee:b9:cb:34:80:ce:77:1d:47:c5:e2:4f:bf:
05:b8:b2:72:39:b8:7f:47:cc:22:89:66:a8:d4:50:43:e9:b4:
72:01:6d:2c:0a:c9:48:e2:78:e8:af:d7:91:8f:2e:92:54:11:
f3:93:9d:b8:9c:6d:69:01:84:5e:58:50:b8:15:60:e0:7a:ca:
5a:d6:f7:94:b8:75:ab:5e:b2:60:dc:62:5d:3f:5d:91:53:c7:
b0:7e:2d:16:d1:10:2a:62:5f:c0:c3:17:8f:e9:1c:ca:13:a2:
36:bb:de:d2:b8:e9:95:1f:06:c8:23:cd:6f:31:5d:5a:af:2f:
49:8e:00:87:94:db:0b:34:17:01:e5:39:36:09:a3:33:e4:db:
57:d1:74:5b:22:73:a0:71:a1:51:14:09:42:21:84:b0:fa:48:
c3:4e:38:d8:ed:0f:74:58:8d:68:21:30:4b:99:c9:35:8c:0e:
39:b3:29:70:bf:f3:bd:3a:1b:72:b9:6c:a6:a6:24:59:1d:41:
a3:aa:46:6f:37:51:80:2f:8a:3d:48:6a:5e:ca:35:0d:ed:5c:
fb:e8:fe:01:1f:64:86:52:1a:e8:b9:15:47:51:57:8c:81:13:
77:51:f1:ca:c9:45:66:10:01:f8:d8:c8:1f:9d:df:eb:1f:ba:
7b:31:a2:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9HGn/2tFVmQf906kWrqHfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMWRhZWNkMzBhZWI3NDY1MmJiZGRhNWRhZDk2NzZjZTQ4
OGFhNDkwHhcNMjUwODA2MDIwMTEwWhcNMjUwODA3MDIwMTEwWjAzMTEwLwYDVQQD
Eyg4ZDllNWQ4MDNiMzRjYTYyM2YyNTEyZGNhODkyNDBkOWMwYjM0ZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqImHn3I+YVgt92994I+gIlz1/aL9
a/jLlhgBxeCQtVan67QLIVADD70ub45thSyovTRphTd+DyE3zTGPuEKICF07Bcvr
xZxPJECmJ/E6xOXSnjIAh4T1crSbr3dHMh7v2RoN8BjQMW6imp6OqvVMAMQiEUCk
Rwx6Pm0dB50FavEA2dmQuvwpAYCT5Jqx9EakR5nwsTI8v0jG/hixgNTrkBpR2/5w
2l9SGl8S+EQvu8HiTDD+5gq1Yw+yLHiqIxU+gpA2evkpGlTtInjr+rlVW4TfPUnW
jjLjP/hjcstUrHoqsKh8ALcp/X66uxnJ3x1E6PBKqLRTquJYAtpWDPou5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2eXYA7NMpiPyUS3KiSQNnAs0+LMB8GA1UdIwQY
MBaAFN0drs0wrrdGUrvdpdrZZ2zkiKpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct
MDYwYWMwODkwOTY2LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTctMDYwYWMwODkwOTY2
LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwBlzOzfu
ucs0gM53HUfF4k+/Bbiycjm4f0fMIolmqNRQQ+m0cgFtLArJSOJ46K/XkY8uklQR
85OduJxtaQGEXlhQuBVg4HrKWtb3lLh1q16yYNxiXT9dkVPHsH4tFtEQKmJfwMMX
j+kcyhOiNrve0rjplR8GyCPNbzFdWq8vSY4Ah5TbCzQXAeU5NgmjM+TbV9F0WyJz
oHGhURQJQiGEsPpIw0442O0PdFiNaCEwS5nJNYwOObMpcL/zvTobcrlspqYkWR1B
o6pGbzdRgC+KPUhqXso1De1c++j+AR9khlIa6LkVR1FXjIETd1HxyslFZhAB+NjI
H53f6x+6ezGipA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:04:51 2025 by rpki-client