Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json)
Hash identifier: 1TrtpWMg2EqFXPuwvMEDYdRtQEBqZ6zRHG/GhrOEMT8=
Subject key identifier: E2:9E:34:FA:19:07:F2:CA:59:DB:36:51:31:BB:3D:1C:E0:9D:69:EF
Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Certificate serial: 01989034EC1A9D93988F304B966AC144333A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
Manifest number: 121F
Signing time: Sat 09 Aug 2025 19:00:44 +0000
Manifest this update: Sat 09 Aug 2025 19:00:44 +0000
Manifest next update: Sun 10 Aug 2025 19:00:44 +0000
Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: 44R36r0r7XVyMhMSwkwkG9eccqaWrkt6UOJmjiZU5yk=)
2: Swt5oFMQEQM3RtDOFxZCp2VObOM.roa (hash: d7VQjqZCXdGvodDw1gYlaDWjc+rRxAbFcC4KKSSYHOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:ec:1a:9d:93:98:8f:30:4b:96:6a:c1:44:33:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Validity
Not Before: Aug 9 19:00:44 2025 GMT
Not After : Aug 10 19:00:44 2025 GMT
Subject: CN=e29e34fa1907f2ca59db365131bb3d1ce09d69ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:cb:a4:96:1b:4a:80:8c:27:81:f9:50:f1:
08:e4:51:83:66:d5:49:46:35:70:e5:c5:54:44:75:
67:bf:4c:98:30:0f:1c:32:6b:2c:f5:f4:08:12:69:
9b:c4:30:d5:3d:ca:aa:6b:c8:78:fc:a2:b0:cc:87:
7f:88:c6:5d:73:9a:a7:eb:a3:55:50:22:fa:19:c6:
d0:25:e4:b1:47:fb:d2:84:80:07:9d:dd:e6:f4:d4:
63:05:36:8f:ad:ad:1f:fd:08:cd:ad:f8:0c:86:67:
0f:22:bd:97:e9:e7:9c:1b:88:26:23:5c:82:e1:d4:
1d:1b:6f:3c:c2:53:86:9a:83:98:57:76:ee:89:3f:
1c:32:27:d8:60:07:69:57:f0:1e:07:e9:b7:bd:1b:
58:70:49:a5:c5:43:e8:07:cc:ee:b6:01:a0:24:5d:
b2:df:66:62:bc:06:04:0f:26:9b:4b:ea:82:e1:b2:
51:b9:ff:73:3e:73:6f:e2:b3:a8:d2:1a:ad:60:5f:
7d:a6:74:ea:75:ec:2f:de:67:32:52:19:21:a5:fc:
fa:25:19:21:32:ee:fc:59:c3:25:5c:7e:a9:61:7d:
9f:82:a7:7c:2a:dd:0a:e6:60:b9:ad:cc:8e:fa:9e:
c2:7c:eb:3e:df:0b:9e:c6:2f:23:2d:0a:ad:78:2d:
26:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9E:34:FA:19:07:F2:CA:59:DB:36:51:31:BB:3D:1C:E0:9D:69:EF
X509v3 Authority Key Identifier:
keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3d:95:51:f2:c2:95:7b:1d:82:fe:97:e8:d4:d1:e4:72:93:
03:a4:a9:e0:ca:70:24:44:62:45:51:95:e2:df:f5:96:72:b1:
99:d5:8f:3e:ac:51:56:00:50:8b:21:70:d5:35:b3:f2:20:1f:
69:8f:b5:c5:fe:54:50:37:3c:11:5f:fa:44:e9:d7:08:e1:d5:
a3:5b:6a:dd:3e:0b:9c:91:fc:f9:1e:2c:dc:b6:4b:47:33:a5:
32:e1:1a:ee:2e:68:39:99:93:dd:76:db:a3:f2:4e:66:dd:7d:
fb:d5:ab:46:9f:11:13:dc:23:f7:54:26:61:c8:44:c2:84:b8:
6e:28:57:6d:af:3d:c6:9f:f6:10:a1:88:87:eb:b3:9d:77:37:
c7:df:19:5c:ff:c4:86:68:55:95:ff:78:74:97:d4:6d:c7:c2:
d8:1b:64:92:c0:33:28:0d:f4:e4:62:37:a4:66:f0:25:96:e6:
2b:9d:fc:52:20:58:04:fc:82:75:d5:93:47:66:cf:87:95:8d:
3a:6d:9a:64:0e:c2:5c:79:ed:b5:54:e7:f4:79:72:e3:4b:63:
a7:8b:ba:72:20:ea:3c:a4:3e:aa:3f:d9:54:53:bb:a0:ca:0a:
62:82:6b:93:c0:a9:eb:1d:63:42:bd:19:d0:a4:95:ea:29:a2:
e0:72:33:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQNOwanZOYjzBLlmrBRDM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTRmZTZjZGE5MGM5YWZlODA3NTkwZDJkNTAzNzRhNzZh
MjhlMTMwHhcNMjUwODA5MTkwMDQ0WhcNMjUwODEwMTkwMDQ0WjAzMTEwLwYDVQQD
EyhlMjllMzRmYTE5MDdmMmNhNTlkYjM2NTEzMWJiM2QxY2UwOWQ2OWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOjLpJYbSoCMJ4H5UPEI5FGDZtVJ
RjVw5cVURHVnv0yYMA8cMmss9fQIEmmbxDDVPcqqa8h4/KKwzId/iMZdc5qn66NV
UCL6GcbQJeSxR/vShIAHnd3m9NRjBTaPra0f/QjNrfgMhmcPIr2X6eecG4gmI1yC
4dQdG288wlOGmoOYV3buiT8cMifYYAdpV/AeB+m3vRtYcEmlxUPoB8zutgGgJF2y
32ZivAYEDyabS+qC4bJRuf9zPnNv4rOo0hqtYF99pnTqdewv3mcyUhkhpfz6JRkh
Mu78WcMlXH6pYX2fgqd8Kt0K5mC5rcyO+p7CfOs+3wuexi8jLQqteC0mOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKeNPoZB/LKWds2UTG7PRzgnWnvMB8GA1UdIwQY
MBaAFN8U/mzakMmv6AdZDS1QN0p2oo4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAt
ZGE3MzhhMzkwZjZlLzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAtZGE3MzhhMzkwZjZl
LzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMT2VUfLC
lXsdgv6X6NTR5HKTA6Sp4MpwJERiRVGV4t/1lnKxmdWPPqxRVgBQiyFw1TWz8iAf
aY+1xf5UUDc8EV/6ROnXCOHVo1tq3T4LnJH8+R4s3LZLRzOlMuEa7i5oOZmT3Xbb
o/JOZt19+9WrRp8RE9wj91QmYchEwoS4bihXba89xp/2EKGIh+uznXc3x98ZXP/E
hmhVlf94dJfUbcfC2BtkksAzKA305GI3pGbwJZbmK538UiBYBPyCddWTR2bPh5WN
Om2aZA7CXHnttVTn9Hly40tjp4u6ciDqPKQ+qj/ZVFO7oMoKYoJrk8Cp6x1jQr0Z
0KSV6imi4HIzCg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:53 2025 by rpki-client