Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft
File: 3XzvizrZIDFjCqyiJqntebpgVYY.mft (raw, json)
Hash identifier: suEG30mzqxqh2M0LdT9TZTJkup4j4gJFsT5uTU/kVk0=
Subject key identifier: EF:5A:E0:0C:7A:90:B2:FD:EC:DE:E9:E5:75:C1:3B:7C:3D:6E:CB:0C
Authority key identifier: DD:7C:EF:8B:3A:D9:20:31:63:0A:AC:A2:26:A9:ED:79:BA:60:55:86
Certificate issuer: /CN=dd7cef8b3ad92031630aaca226a9ed79ba605586
Certificate serial: 019874F4C55340554696D68EC2CD6489F24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XzvizrZIDFjCqyiJqntebpgVYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft
Manifest number: 017E
Signing time: Mon 04 Aug 2025 12:00:54 +0000
Manifest this update: Mon 04 Aug 2025 12:00:54 +0000
Manifest next update: Tue 05 Aug 2025 12:00:54 +0000
Files and hashes: 1: 3XzvizrZIDFjCqyiJqntebpgVYY.crl (hash: oZJwAExmy5dCdcN+RMGA8EBfBxWlMkmDU+EhjoBZqD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XzvizrZIDFjCqyiJqntebpgVYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:c5:53:40:55:46:96:d6:8e:c2:cd:64:89:f2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd7cef8b3ad92031630aaca226a9ed79ba605586
Validity
Not Before: Aug 4 12:00:54 2025 GMT
Not After : Aug 5 12:00:54 2025 GMT
Subject: CN=ef5ae00c7a90b2fdecdee9e575c13b7c3d6ecb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:6a:d3:07:f7:89:66:06:23:4a:7d:4b:6c:
ae:b9:67:83:39:52:cd:d9:70:2f:38:3a:69:62:6c:
a6:1f:a0:cf:d3:d4:e4:c9:10:ff:3f:94:53:1c:62:
14:51:d4:ab:a9:e4:14:d6:97:ee:03:2a:ec:db:48:
c8:7e:25:e2:13:79:79:7c:02:66:ff:08:21:a7:5f:
5c:8c:3d:dc:3e:d1:7b:14:e9:9f:64:da:56:78:2c:
c3:67:5c:b4:ab:0c:35:8b:82:58:2a:e9:bf:2b:6e:
1f:d5:1d:6d:e3:f4:84:d2:24:f0:2a:6c:2d:f3:43:
57:45:47:16:d1:70:a5:44:b2:0d:a3:a6:d3:cc:15:
64:56:9c:55:b9:6a:b0:3c:77:9c:6b:80:8e:80:5d:
55:b8:b9:a0:ae:59:fb:f7:c8:25:5f:36:bd:a8:e8:
16:09:5a:83:79:6b:be:4a:e7:4e:61:cd:a7:6e:dd:
25:23:71:9f:ad:b3:de:87:d8:35:31:39:84:5b:f1:
3a:36:df:67:55:3f:df:9a:c8:78:5a:93:13:56:a1:
cb:8c:e7:6a:1e:2f:b2:77:37:f2:4f:58:b0:7d:f0:
0c:9e:a9:29:26:b2:f7:a1:cb:d5:7e:f0:15:73:d3:
a9:4b:ab:00:bc:07:3f:2c:9e:25:4e:b4:ee:dc:65:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5A:E0:0C:7A:90:B2:FD:EC:DE:E9:E5:75:C1:3B:7C:3D:6E:CB:0C
X509v3 Authority Key Identifier:
keyid:DD:7C:EF:8B:3A:D9:20:31:63:0A:AC:A2:26:A9:ED:79:BA:60:55:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XzvizrZIDFjCqyiJqntebpgVYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2a:28:98:2a:15:5d:fb:63:4e:27:c3:a6:4a:11:c6:9b:88:
68:c1:a2:a2:f9:50:f1:4f:a6:97:64:63:49:63:3d:f3:91:03:
47:04:e4:68:39:bf:99:6c:44:58:10:f3:8f:ff:86:66:8d:68:
da:be:1a:d4:60:da:47:79:f4:ea:85:86:49:64:c6:c9:a7:99:
07:86:4f:d2:57:53:f8:f3:05:d1:c9:73:b6:48:9a:2c:37:84:
a7:1e:6d:e3:77:8c:43:df:b0:e3:33:dc:cd:4d:c5:e7:45:06:
6d:bd:34:f6:77:8a:81:33:9b:2c:b2:50:98:db:92:9d:41:06:
bf:e1:50:39:ca:68:d0:e3:48:23:8c:ba:e8:5e:f2:46:39:75:
1c:6a:76:ec:9a:ec:e8:f4:84:2b:f3:48:de:47:cb:25:19:96:
7b:b9:34:a3:e1:00:2f:bc:ed:f8:e1:61:37:8c:ff:fe:7f:39:
a7:37:18:f6:02:df:11:fd:00:a2:1a:5d:c1:90:a7:3c:f7:3b:
3b:5d:92:99:9c:c7:32:c6:c2:62:ee:b8:1b:bd:e3:f1:13:2c:
17:15:d4:54:98:7f:d2:2e:fb:a6:0a:a4:6f:48:66:bb:b6:6c:
2b:76:a1:1a:ee:0e:c7:c9:18:af:37:1c:c8:8d:ca:c4:c6:79:
da:ec:7e:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09MVTQFVGltaOws1kifJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkN2NlZjhiM2FkOTIwMzE2MzBhYWNhMjI2YTllZDc5YmE2
MDU1ODYwHhcNMjUwODA0MTIwMDU0WhcNMjUwODA1MTIwMDU0WjAzMTEwLwYDVQQD
EyhlZjVhZTAwYzdhOTBiMmZkZWNkZWU5ZTU3NWMxM2I3YzNkNmVjYjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJpq0wf3iWYGI0p9S2yuuWeDOVLN
2XAvODppYmymH6DP09TkyRD/P5RTHGIUUdSrqeQU1pfuAyrs20jIfiXiE3l5fAJm
/wghp19cjD3cPtF7FOmfZNpWeCzDZ1y0qww1i4JYKum/K24f1R1t4/SE0iTwKmwt
80NXRUcW0XClRLINo6bTzBVkVpxVuWqwPHeca4COgF1VuLmgrln798glXza9qOgW
CVqDeWu+SudOYc2nbt0lI3GfrbPeh9g1MTmEW/E6Nt9nVT/fmsh4WpMTVqHLjOdq
Hi+ydzfyT1iwffAMnqkpJrL3ocvVfvAVc9OpS6sAvAc/LJ4lTrTu3GWnnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9a4Ax6kLL97N7p5XXBO3w9bssMMB8GA1UdIwQY
MBaAFN1874s62SAxYwqsoiap7Xm6YFWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1h6dml6clpJREZqQ3F5aUpxbnRlYnBnVllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xZDk4YjAtNGE0ZC00MTkwLWJkODUt
MzcyZjY1ZDk5YTlmLzEvM1h6dml6clpJREZqQ3F5aUpxbnRlYnBnVllZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xZDk4YjAtNGE0ZC00MTkwLWJkODUtMzcyZjY1ZDk5YTlm
LzEvM1h6dml6clpJREZqQ3F5aUpxbnRlYnBnVllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASioomCoV
XftjTifDpkoRxpuIaMGiovlQ8U+ml2RjSWM985EDRwTkaDm/mWxEWBDzj/+GZo1o
2r4a1GDaR3n06oWGSWTGyaeZB4ZP0ldT+PMF0clztkiaLDeEpx5t43eMQ9+w4zPc
zU3F50UGbb009neKgTObLLJQmNuSnUEGv+FQOcpo0ONII4y66F7yRjl1HGp27Jrs
6PSEK/NI3kfLJRmWe7k0o+EAL7zt+OFhN4z//n85pzcY9gLfEf0AohpdwZCnPPc7
O12SmZzHMsbCYu64G73j8RMsFxXUVJh/0i77pgqkb0hmu7ZsK3ahGu4Ox8kYrzcc
yI3KxMZ52ux+Tg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:01:15 2025 by rpki-client