Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: S8lR8l4zRcPEwG68dfKRxkJJdZu/myzzQ+yqcFVFLe8=
Subject key identifier: 10:A7:BD:6E:C9:93:84:40:B8:80:C2:4F:9F:71:97:97:78:FE:9B:02
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 019896DC14A0355BBC1E5E93C66F93469C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 150A
Signing time: Mon 11 Aug 2025 02:01:02 +0000
Manifest this update: Mon 11 Aug 2025 02:01:02 +0000
Manifest next update: Tue 12 Aug 2025 02:01:02 +0000
Files and hashes: 1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: l+r3zulpuk4+AxCwHZVeagMw/JeiLvwzai37W/9ZOo0=)
2: EoONLCC0uBU4UnkK6hGEDKnLwOs.roa (hash: BvTXgf3VZmemwuiX/6PvTlFRYmGF/FW7bb7KGQyaCiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:14:a0:35:5b:bc:1e:5e:93:c6:6f:93:46:9c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Aug 11 02:01:02 2025 GMT
Not After : Aug 12 02:01:02 2025 GMT
Subject: CN=10a7bd6ec9938440b880c24f9f71979778fe9b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:a1:a4:b0:3b:be:dd:f8:8f:04:d1:9c:e7:
b6:a3:5f:54:16:e9:11:e8:42:30:69:6f:20:c9:42:
f8:0b:ba:79:7a:24:0e:d8:ec:15:30:4f:a9:ed:3d:
2b:cc:d7:33:ee:75:00:3a:68:3c:20:a5:9d:ca:9a:
7e:c7:b3:d6:91:6f:e0:94:7e:ae:4d:fa:e6:46:85:
68:af:a7:c9:6a:3f:da:2b:47:f5:80:be:f5:f8:9b:
2d:e4:ec:7b:26:a7:fa:6b:24:c5:20:7d:8f:14:4e:
d0:c9:03:67:5a:2f:a1:dd:04:3c:4a:cc:c5:bb:75:
09:3e:ed:4c:a9:fb:6f:51:69:2b:aa:cf:9b:44:c7:
3f:38:19:b1:36:96:52:c4:c1:59:22:73:54:3e:e9:
aa:e9:e5:b0:89:3e:00:bf:94:94:30:28:38:62:c1:
32:95:53:ce:40:12:71:f3:42:75:10:93:7e:dd:17:
43:d1:c5:f7:7d:57:30:d9:e3:2d:a0:0d:3d:23:91:
f7:5f:c7:b6:48:fc:78:b5:34:5b:40:21:1e:1a:2a:
15:08:ea:65:18:dc:93:93:50:cc:4c:89:b0:a5:8d:
13:2d:0a:ed:5e:b6:7e:72:c7:5a:a3:7a:fa:58:b1:
c2:b6:83:61:90:77:ee:65:fe:2c:3c:1f:56:d2:d0:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A7:BD:6E:C9:93:84:40:B8:80:C2:4F:9F:71:97:97:78:FE:9B:02
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b0:bf:46:3d:5d:88:ed:06:41:cc:c3:9a:c8:7c:86:bd:1f:
e9:08:01:03:a8:68:ce:3c:43:33:77:15:56:20:22:fc:cf:30:
cf:5c:b3:3c:b2:8d:bb:e7:eb:7e:17:c1:38:48:9d:34:77:26:
3b:32:72:17:91:2d:3f:6f:43:57:16:13:05:6f:1d:1a:dd:1d:
06:9c:6e:b5:8f:b5:f7:6d:40:25:d1:a6:f6:1a:aa:39:ea:c0:
58:70:b3:42:da:df:12:fc:8a:32:b9:34:19:ba:ab:7d:95:5d:
e1:ff:06:75:13:10:95:5f:be:51:0c:b1:ea:bd:f1:1f:7c:47:
ee:9b:56:3b:b9:4d:3e:81:d3:3e:bc:03:d0:c3:eb:a5:d7:9e:
7d:5f:0e:27:7f:73:a9:89:5e:75:76:c6:9f:78:f5:99:fc:1e:
f5:38:b2:e5:10:08:73:20:5a:a2:43:12:7e:65:97:9e:4c:b0:
d8:db:44:4c:82:8b:ab:b3:99:7f:cf:0d:fd:be:de:d4:72:13:
66:17:d9:74:f2:70:2c:c5:f1:c7:d5:cb:26:82:23:33:4a:39:
93:16:dd:88:02:1b:29:63:e2:4e:29:47:f0:8b:63:af:8d:08:
37:9e:6a:77:a3:af:f6:61:5d:3a:96:21:8c:b2:4b:8b:1f:67:
87:e9:67:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiW3BSgNVu8Hl6Txm+TRpyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDY3MGMyYTZmZDcyMjMzMjdmNjhiYWRiZTZkMDgzMjJi
NzgwNTgwHhcNMjUwODExMDIwMTAyWhcNMjUwODEyMDIwMTAyWjAzMTEwLwYDVQQD
EygxMGE3YmQ2ZWM5OTM4NDQwYjg4MGMyNGY5ZjcxOTc5Nzc4ZmU5YjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFihpLA7vt34jwTRnOe2o19UFukR
6EIwaW8gyUL4C7p5eiQO2OwVME+p7T0rzNcz7nUAOmg8IKWdypp+x7PWkW/glH6u
TfrmRoVor6fJaj/aK0f1gL71+Jst5Ox7Jqf6ayTFIH2PFE7QyQNnWi+h3QQ8SszF
u3UJPu1MqftvUWkrqs+bRMc/OBmxNpZSxMFZInNUPumq6eWwiT4Av5SUMCg4YsEy
lVPOQBJx80J1EJN+3RdD0cX3fVcw2eMtoA09I5H3X8e2SPx4tTRbQCEeGioVCOpl
GNyTk1DMTImwpY0TLQrtXrZ+csdao3r6WLHCtoNhkHfuZf4sPB9W0tAsXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCnvW7Jk4RAuIDCT59xl5d4/psCMB8GA1UdIwQY
MBaAFN1GcMKm/XIjMn9outvm0IMit4BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUt
OWNkM2M2YTE4ODY2LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUtOWNkM2M2YTE4ODY2
LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7C/Rj1d
iO0GQczDmsh8hr0f6QgBA6hozjxDM3cVViAi/M8wz1yzPLKNu+frfhfBOEidNHcm
OzJyF5EtP29DVxYTBW8dGt0dBpxutY+1921AJdGm9hqqOerAWHCzQtrfEvyKMrk0
GbqrfZVd4f8GdRMQlV++UQyx6r3xH3xH7ptWO7lNPoHTPrwD0MPrpdeefV8OJ39z
qYledXbGn3j1mfwe9Tiy5RAIcyBaokMSfmWXnkyw2NtETIKLq7OZf88N/b7e1HIT
ZhfZdPJwLMXxx9XLJoIjM0o5kxbdiAIbKWPiTilH8Itjr40IN55qd6Ov9mFdOpYh
jLJLix9nh+lnrw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:09:14 2025 by rpki-client