Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: hgD6JPLCwSSLVHfBf+lzpkuGG4XewzXQBlanJ2QlFiw=
Subject key identifier: 3C:4C:AC:5F:6D:AF:E3:8E:8D:E0:A5:DE:5A:43:EA:84:EB:5F:6A:0B
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 01988BEA7000049822DB6EE9A3FE45488009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 157D
Signing time: Fri 08 Aug 2025 23:00:53 +0000
Manifest this update: Fri 08 Aug 2025 23:00:53 +0000
Manifest next update: Sat 09 Aug 2025 23:00:53 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: 8sratScIzarL5Hpd1sBnNIVP/Gd0QKPQQ+/G+s3ioAs=)
2: bPbl9DKxYJUxR3ZUVzukhGWYurM.roa (hash: FAnYMWhXeH8TjI8m2ivn5nzVc0hLKvZ4QbjQQh/aekU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:70:00:04:98:22:db:6e:e9:a3:fe:45:48:80:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Aug 8 23:00:53 2025 GMT
Not After : Aug 9 23:00:53 2025 GMT
Subject: CN=3c4cac5f6dafe38e8de0a5de5a43ea84eb5f6a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:e9:3c:61:60:f3:53:3f:ee:8a:ad:c8:4c:
c4:6d:90:70:3d:5e:40:d2:0a:ac:6d:29:1e:7e:c7:
9c:72:da:7c:35:23:41:ff:e5:d1:5e:d2:80:fd:a3:
22:ba:82:3d:d0:7d:99:75:b1:06:7c:36:5e:18:00:
3f:70:9b:16:5e:de:35:d4:e4:73:c4:92:d1:a3:22:
80:a2:1e:8b:d2:a3:01:62:22:f7:f6:a4:4a:d3:9a:
47:09:df:9f:33:07:37:d7:47:ad:a8:f5:14:a6:00:
13:76:d0:a2:62:66:db:25:63:05:60:38:51:81:2d:
37:12:4e:b0:d5:35:11:9e:ca:3b:8c:d8:b5:c4:7a:
72:18:8a:98:0d:3c:e1:d9:ce:b0:9a:aa:68:48:22:
23:a5:bd:dc:a3:93:c4:01:7b:f7:b2:39:de:88:77:
e7:53:74:f3:73:43:24:e2:1d:c4:de:97:3e:c1:03:
fc:8b:b5:33:f0:9a:51:88:4b:de:69:a5:1f:09:66:
39:cb:e1:be:08:88:02:14:f5:72:fe:80:f0:1c:1c:
59:ab:7f:d6:82:5d:ed:5d:96:ce:8a:19:38:48:67:
e6:4b:27:eb:f4:d6:98:32:55:56:1d:e5:73:1f:a5:
b6:63:2e:20:73:b9:ca:da:72:95:7c:91:af:ef:a9:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4C:AC:5F:6D:AF:E3:8E:8D:E0:A5:DE:5A:43:EA:84:EB:5F:6A:0B
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:09:b7:99:30:d5:85:de:eb:d4:63:a9:28:08:1c:54:47:75:
4d:da:61:0c:b4:82:f6:02:3b:8f:3f:4f:4d:ff:35:d9:b1:68:
7e:2e:df:c0:0d:88:88:69:ee:84:a3:c8:15:45:05:46:0d:2c:
b2:9b:28:37:e2:91:cc:2a:87:35:79:08:0e:0b:2a:5c:49:9f:
4e:eb:55:f6:cb:4a:91:22:04:23:e5:6f:d4:66:19:34:0e:e0:
6a:09:23:96:f6:39:56:e2:12:92:69:df:e6:7e:91:c3:a0:2b:
db:f3:4e:b0:7a:27:86:98:ca:2b:a7:b1:f7:9b:79:74:c7:90:
a0:43:12:3c:37:cb:04:d2:ef:81:1c:85:89:71:90:26:ea:b0:
27:73:a6:86:44:1c:0a:fa:3c:df:16:6f:24:95:66:23:fb:78:
51:2e:8f:52:55:c9:3d:dc:26:19:3a:bb:22:f7:6b:b8:d4:c1:
89:f3:0b:26:87:a6:a5:1e:d2:2c:97:5b:09:19:ed:ea:a6:d5:
2d:bc:4f:91:86:d4:80:dc:2c:79:47:67:12:ed:93:98:8b:93:
ad:b8:73:8d:d5:20:a8:6f:46:cf:d6:c1:27:56:06:5e:2d:87:
b5:36:fb:ae:68:5f:67:7a:95:5b:2c:96:9e:6d:46:fa:7a:34:
87:94:dc:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiL6nAABJgi227po/5FSIAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDIyYzI0MTQ3ZWM3OWZhOTA2NDY0YWIxNDNmZDQ3ZTNi
ZWIzYTEwHhcNMjUwODA4MjMwMDUzWhcNMjUwODA5MjMwMDUzWjAzMTEwLwYDVQQD
EygzYzRjYWM1ZjZkYWZlMzhlOGRlMGE1ZGU1YTQzZWE4NGViNWY2YTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9XpPGFg81M/7oqtyEzEbZBwPV5A
0gqsbSkefsecctp8NSNB/+XRXtKA/aMiuoI90H2ZdbEGfDZeGAA/cJsWXt411ORz
xJLRoyKAoh6L0qMBYiL39qRK05pHCd+fMwc310etqPUUpgATdtCiYmbbJWMFYDhR
gS03Ek6w1TURnso7jNi1xHpyGIqYDTzh2c6wmqpoSCIjpb3co5PEAXv3sjneiHfn
U3Tzc0Mk4h3E3pc+wQP8i7Uz8JpRiEveaaUfCWY5y+G+CIgCFPVy/oDwHBxZq3/W
gl3tXZbOihk4SGfmSyfr9NaYMlVWHeVzH6W2Yy4gc7nK2nKVfJGv76kkAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxMrF9tr+OOjeCl3lpD6oTrX2oLMB8GA1UdIwQY
MBaAFNxCLCQUfsefqQZGSrFD/UfjvrOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMt
MjE2NTEzNmM5ZDlhLzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMtMjE2NTEzNmM5ZDlh
LzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewm3mTDV
hd7r1GOpKAgcVEd1TdphDLSC9gI7jz9PTf812bFofi7fwA2IiGnuhKPIFUUFRg0s
spsoN+KRzCqHNXkIDgsqXEmfTutV9stKkSIEI+Vv1GYZNA7gagkjlvY5VuISkmnf
5n6Rw6Ar2/NOsHonhpjKK6ex95t5dMeQoEMSPDfLBNLvgRyFiXGQJuqwJ3OmhkQc
Cvo83xZvJJVmI/t4US6PUlXJPdwmGTq7IvdruNTBifMLJoempR7SLJdbCRnt6qbV
LbxPkYbUgNwseUdnEu2TmIuTrbhzjdUgqG9Gz9bBJ1YGXi2HtTb7rmhfZ3qVWyyW
nm1G+no0h5TcGg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:06 2025 by rpki-client