Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: wtJid362npkvsoAp30p2yizsck8TI+9m7HZv92Slzjo=
Subject key identifier: D4:CC:0E:BF:AD:58:47:A7:CA:04:FB:56:94:9B:9D:4C:C5:5D:8E:0A
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 019885439E74B2DEAC13AF0C776CF1EBF849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 0CB4
Signing time: Thu 07 Aug 2025 16:00:57 +0000
Manifest this update: Thu 07 Aug 2025 16:00:57 +0000
Manifest next update: Fri 08 Aug 2025 16:00:57 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: Upd3RcnY1NtgKbTenZg8DbpCgMQFYGzsBK4vo7hI1Zc=)
2: 8miIDeBQxB0aKJY-TlsIuuJ2hww.roa (hash: mQmM8Cjnfx5WSvhPSj11m+hm6JvBiNUtIRExWbof9J8=)
3: IRGnT1eQmUBmgR6_xtusELr-83s.roa (hash: dJ3+bDwzY4UO43kbNXGDeFrUEwRtOB0R3J1TQjuxqCQ=)
4: aw3P8V17V992wZUulFnFkkVrMmo.roa (hash: O9AIELr13JUWTjKqPnJ8lbjYgl5+VRQqDU69j3HTMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:9e:74:b2:de:ac:13:af:0c:77:6c:f1:eb:f8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Aug 7 16:00:57 2025 GMT
Not After : Aug 8 16:00:57 2025 GMT
Subject: CN=d4cc0ebfad5847a7ca04fb56949b9d4cc55d8e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:b8:f4:de:d5:f0:7d:86:4c:f1:56:cc:1e:
b0:e7:be:d5:01:c1:51:18:b5:48:72:35:cd:a5:15:
bc:fe:40:00:2f:7c:02:be:b2:49:4f:ea:0f:51:d5:
b2:81:a1:0c:cf:92:55:d4:8a:ce:17:bf:5b:5d:1b:
72:fc:97:5c:a9:28:d8:4c:9a:39:67:06:10:b0:08:
19:f6:ab:61:30:f5:ef:22:31:34:46:4e:d3:ef:33:
18:d3:84:31:34:43:00:73:ba:71:c7:f9:01:4b:9c:
93:33:2c:06:9d:b1:36:0c:5d:92:b7:46:7e:9c:ea:
bd:67:a1:36:7c:47:ca:98:dd:9f:6e:4e:7a:db:c6:
76:6f:02:55:89:06:f1:3d:c9:55:79:79:58:33:2e:
3f:37:03:e7:ec:7f:d4:05:e4:33:bb:91:8e:08:45:
58:29:f2:c3:88:65:25:2e:de:4a:7f:15:21:11:50:
0b:de:76:18:97:60:f2:c6:54:73:85:21:bb:a1:51:
fd:04:55:9b:0f:83:63:1c:52:b8:de:62:8a:99:a5:
3a:8b:91:81:05:28:0f:a7:b6:22:24:c2:22:b1:0c:
14:8e:c3:14:b8:cb:3b:71:27:1f:da:5c:a2:44:73:
ce:46:30:9f:c1:64:82:6e:2b:ee:15:9a:77:89:77:
26:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CC:0E:BF:AD:58:47:A7:CA:04:FB:56:94:9B:9D:4C:C5:5D:8E:0A
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:35:72:77:2b:c4:e3:c5:f2:75:d9:29:9d:4d:2b:e2:d3:b1:
68:62:09:3c:cc:61:b8:91:02:e7:76:6e:ab:04:58:fa:c4:e8:
ee:bb:8b:16:08:cf:93:60:5c:8a:c5:26:d7:8e:1b:fe:3c:0d:
9e:93:54:e6:2d:b2:d3:c6:e8:50:81:52:4c:2b:20:4d:9d:37:
f0:a8:85:31:64:81:be:29:cd:29:41:0b:16:b8:37:0f:53:7e:
bb:80:b4:c8:9e:df:ba:bb:20:3e:14:ae:b1:ea:1f:9f:4a:df:
f7:dc:9f:3b:e0:74:06:00:f5:6b:9d:52:31:ce:a2:ef:f9:cc:
6c:66:fd:66:8f:ed:7b:f5:8b:4c:5b:25:31:4a:b1:0b:b3:ad:
b1:52:77:51:c9:50:97:b4:d8:87:55:8b:22:9d:ca:4a:de:05:
6b:68:bf:d0:b0:1c:b8:a3:12:35:ad:ed:19:ba:bf:68:81:2e:
b7:34:fb:e1:37:c6:c3:ed:38:21:8d:30:be:fb:5c:0d:47:71:
63:91:95:81:24:1b:47:7a:e0:7b:27:54:e1:b5:97:c9:09:96:
af:b2:ca:e1:40:3d:e5:3f:f8:5f:d5:c3:11:c3:cb:f0:05:3e:
c9:ee:3e:8e:cf:13:2e:e6:6f:14:13:76:6f:ea:89:23:56:02:
b3:dd:0c:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFQ550st6sE68Md2zx6/hJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYjcxNDcxMzczYmIwNjAzYzM1NmVlZGVkNGI5MTgyOTJi
NWJlZWUwHhcNMjUwODA3MTYwMDU3WhcNMjUwODA4MTYwMDU3WjAzMTEwLwYDVQQD
EyhkNGNjMGViZmFkNTg0N2E3Y2EwNGZiNTY5NDliOWQ0Y2M1NWQ4ZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKK49N7V8H2GTPFWzB6w577VAcFR
GLVIcjXNpRW8/kAAL3wCvrJJT+oPUdWygaEMz5JV1IrOF79bXRty/JdcqSjYTJo5
ZwYQsAgZ9qthMPXvIjE0Rk7T7zMY04QxNEMAc7pxx/kBS5yTMywGnbE2DF2St0Z+
nOq9Z6E2fEfKmN2fbk5628Z2bwJViQbxPclVeXlYMy4/NwPn7H/UBeQzu5GOCEVY
KfLDiGUlLt5KfxUhEVAL3nYYl2DyxlRzhSG7oVH9BFWbD4NjHFK43mKKmaU6i5GB
BSgPp7YiJMIisQwUjsMUuMs7cScf2lyiRHPORjCfwWSCbivuFZp3iXcmIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTMDr+tWEenygT7VpSbnUzFXY4KMB8GA1UdIwQY
MBaAFN23FHE3O7BgPDVu7e1LkYKStb7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgt
NjIxMmFjNDljYTNiLzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgtNjIxMmFjNDljYTNi
LzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETVydyvE
48XyddkpnU0r4tOxaGIJPMxhuJEC53ZuqwRY+sTo7ruLFgjPk2BcisUm144b/jwN
npNU5i2y08boUIFSTCsgTZ038KiFMWSBvinNKUELFrg3D1N+u4C0yJ7fursgPhSu
seofn0rf99yfO+B0BgD1a51SMc6i7/nMbGb9Zo/te/WLTFslMUqxC7OtsVJ3UclQ
l7TYh1WLIp3KSt4Fa2i/0LAcuKMSNa3tGbq/aIEutzT74TfGw+04IY0wvvtcDUdx
Y5GVgSQbR3rgeydU4bWXyQmWr7LK4UA95T/4X9XDEcPL8AU+ye4+js8TLuZvFBN2
b+qJI1YCs90MdA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:40:02 2025 by rpki-client