Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File: x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier: JtOl4LpMipdK91O4UopMa9/TntE13CNboouqt6l/x5o=
Subject key identifier: 4F:E5:04:45:61:52:C6:13:45:C0:D0:51:56:99:B6:30:06:35:4B:49
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer: /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial: 0198879FD185FE499E9DCF3EFDABCE897D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number: 0659
Signing time: Fri 08 Aug 2025 03:00:54 +0000
Manifest this update: Fri 08 Aug 2025 03:00:54 +0000
Manifest next update: Sat 09 Aug 2025 03:00:54 +0000
Files and hashes: 1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: OtoP3tFfbUyPMNGL1gT+a9RCtgEpGujksVgnTmI2Pvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:9f:d1:85:fe:49:9e:9d:cf:3e:fd:ab:ce:89:7d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Validity
Not Before: Aug 8 03:00:54 2025 GMT
Not After : Aug 9 03:00:54 2025 GMT
Subject: CN=4fe504456152c61345c0d0515699b63006354b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:9a:53:8b:19:cc:0d:d8:0c:8b:aa:6f:33:
04:4d:ee:2e:2e:fb:3d:9e:9b:6e:92:a8:09:29:7d:
39:0d:09:b2:80:23:76:0b:86:07:56:4e:c5:1e:4e:
9c:04:c4:02:eb:21:2b:46:56:1b:71:94:c0:3c:6e:
29:89:ff:e2:37:67:df:72:d3:44:32:46:3d:1c:08:
92:a1:27:6c:d1:42:ca:f3:6b:46:98:cb:90:c7:33:
d2:0c:b6:f9:b4:03:e2:50:a4:0d:69:68:7c:cc:f3:
97:3f:37:0d:72:12:d4:9f:9f:6e:30:80:82:c6:03:
1a:d0:fa:e4:b3:02:f7:fb:b1:ba:d8:a2:a4:da:da:
2e:e6:bd:57:78:aa:a6:90:fb:12:62:a1:88:ec:da:
60:23:b0:4c:03:59:fb:38:97:e7:cf:c6:da:a9:ed:
27:6b:74:7b:ad:ca:65:89:ee:4c:85:b1:4d:5e:d6:
08:e6:65:30:98:09:fa:5e:db:60:c1:6a:00:a2:ed:
a3:fd:0d:21:d1:cd:ec:5b:5b:00:58:12:a5:75:da:
e0:79:f4:4f:2f:83:e2:b9:3f:10:14:8b:92:2f:36:
d9:56:ba:95:cd:b9:42:e1:fe:33:de:78:c4:59:b1:
ec:99:b4:d2:69:0f:8b:ec:de:4b:aa:f3:a8:23:f5:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E5:04:45:61:52:C6:13:45:C0:D0:51:56:99:B6:30:06:35:4B:49
X509v3 Authority Key Identifier:
keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:a5:43:f6:11:88:5d:d1:83:03:32:71:ec:72:2b:c8:2a:7c:
d0:fe:62:7e:f7:17:f5:bd:30:67:08:16:e6:74:e8:ca:21:eb:
46:5f:a2:0b:50:c6:8a:fb:4a:cb:32:8a:bd:14:5d:74:c9:b5:
d8:33:e7:7d:f9:15:b7:3b:b0:8c:67:85:c7:cc:65:1f:04:4d:
b9:63:9e:fe:fd:fd:f9:b8:a8:52:b2:1e:47:fe:2b:f6:03:d9:
b7:81:26:d3:6f:93:cf:78:91:d3:22:59:b2:35:e6:47:b8:c2:
db:44:c1:d7:2b:74:9e:d5:d4:46:d6:ef:ff:5d:19:05:40:51:
69:2f:34:07:76:a2:a3:9b:40:cd:32:22:01:d8:00:de:b3:08:
53:7c:09:80:bc:ff:98:c2:e9:c6:96:9d:b2:95:04:2a:fd:5f:
2b:a0:f9:8e:08:39:9e:39:5a:e7:cd:72:76:72:78:21:9b:58:
d4:36:ef:6a:8d:56:c7:9e:49:e4:ee:39:64:72:10:27:68:65:
d2:bd:12:30:cd:ea:6d:c4:39:2b:84:f7:59:8d:56:4c:96:e0:
fb:ee:45:09:e8:c3:0b:78:dd:b4:ee:7f:a1:37:84:2f:d0:01:
09:ac:e2:3a:94:01:c8:d1:12:5e:8c:eb:7f:1c:8a:90:58:c2:
2f:39:1c:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiHn9GF/kmenc8+/avOiX1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2IxOTY5ZDlhZGRmMTk5NjMyYjRkZTA1ZThhMjBlM2Rl
N2I2YzQwHhcNMjUwODA4MDMwMDU0WhcNMjUwODA5MDMwMDU0WjAzMTEwLwYDVQQD
Eyg0ZmU1MDQ0NTYxNTJjNjEzNDVjMGQwNTE1Njk5YjYzMDA2MzU0YjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7iaU4sZzA3YDIuqbzMETe4uLvs9
nptukqgJKX05DQmygCN2C4YHVk7FHk6cBMQC6yErRlYbcZTAPG4pif/iN2ffctNE
MkY9HAiSoSds0ULK82tGmMuQxzPSDLb5tAPiUKQNaWh8zPOXPzcNchLUn59uMICC
xgMa0PrkswL3+7G62KKk2tou5r1XeKqmkPsSYqGI7NpgI7BMA1n7OJfnz8baqe0n
a3R7rcplie5MhbFNXtYI5mUwmAn6XttgwWoAou2j/Q0h0c3sW1sAWBKlddrgefRP
L4PiuT8QFIuSLzbZVrqVzblC4f4z3njEWbHsmbTSaQ+L7N5LqvOoI/XYuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/lBEVhUsYTRcDQUVaZtjAGNUtJMB8GA1UdIwQY
MBaAFMd7GWnZrd8ZljK03gXoog4957bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OWE4MDItNjM2ZS00ZjA2LWI3Nzkt
N2M3ODJmNmE0NmM3LzEveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80OWE4MDItNjM2ZS00ZjA2LWI3NzktN2M3ODJmNmE0NmM3
LzEveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyaVD9hGI
XdGDAzJx7HIryCp80P5ifvcX9b0wZwgW5nToyiHrRl+iC1DGivtKyzKKvRRddMm1
2DPnffkVtzuwjGeFx8xlHwRNuWOe/v39+bioUrIeR/4r9gPZt4Em02+Tz3iR0yJZ
sjXmR7jC20TB1yt0ntXURtbv/10ZBUBRaS80B3aio5tAzTIiAdgA3rMIU3wJgLz/
mMLpxpadspUEKv1fK6D5jgg5njla581ydnJ4IZtY1Dbvao1Wx55J5O45ZHIQJ2hl
0r0SMM3qbcQ5K4T3WY1WTJbg++5FCejDC3jdtO5/oTeEL9ABCaziOpQByNESXozr
fxyKkFjCLzkc1Q==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:37 2025 by rpki-client