Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json)
Hash identifier: 4xr7lojadUN5OeMSSMMfSqlhDSalrHnyWmNnhcRrfME=
Subject key identifier: 68:28:4E:58:E9:13:EE:74:F3:1E:DF:4A:83:85:32:BD:63:BE:26:A8
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial: 019873E3F250DE28676BCA3FE112383BB1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
Manifest number: 0D51
Signing time: Mon 04 Aug 2025 07:02:55 +0000
Manifest this update: Mon 04 Aug 2025 07:02:55 +0000
Manifest next update: Tue 05 Aug 2025 07:02:55 +0000
Files and hashes: 1: ReFijUPsIVT0JnrY05_yeSrYpfM.roa (hash: 6xv/Nzbw1MhH+laW+tJrBXU6SEJVZqBXBHHnSnM5yB0=)
2: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: qVqI2MQi+Ux5IPUfHI8EGX494Dak72R7Ju77vNLcqK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:f2:50:de:28:67:6b:ca:3f:e1:12:38:3b:b1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Validity
Not Before: Aug 4 07:02:55 2025 GMT
Not After : Aug 5 07:02:55 2025 GMT
Subject: CN=68284e58e913ee74f31edf4a838532bd63be26a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fe:27:69:59:2d:35:a4:07:96:2b:30:a5:35:
1c:44:f8:f9:f5:80:2b:68:ea:d1:6f:5a:62:75:94:
ad:fc:09:ea:cc:7f:d6:79:58:53:f4:2c:fe:24:4f:
0e:0a:15:81:45:17:24:14:60:3b:e3:f0:11:ed:98:
b2:dc:ba:ff:47:4b:2d:c5:bb:21:a5:57:4e:7e:94:
4c:2e:fe:f5:b8:8c:aa:67:11:65:ac:8c:79:dd:ce:
36:37:b4:f5:7c:12:13:1f:9c:a8:b5:91:b1:95:84:
df:b9:b5:ea:ce:e6:4c:0a:6f:27:b0:a6:ff:b6:5e:
c3:5f:15:76:2d:1e:a0:df:8e:eb:56:47:7a:a9:06:
7c:8d:69:51:d3:ba:49:0a:1f:d8:1a:08:3d:1e:e7:
5f:c2:a5:32:7d:33:9e:17:99:c8:f2:8b:2f:85:d0:
5a:52:1e:98:51:09:4b:54:2c:77:90:93:3f:87:f7:
0b:47:40:ee:a7:f3:2e:4e:29:48:9b:62:c2:17:1d:
5d:13:25:3f:d2:74:01:ac:dd:3b:1f:04:aa:7e:d5:
4d:71:7d:46:6b:9a:5c:a2:0f:5e:50:76:d8:48:c2:
94:5e:51:c9:e4:25:de:ff:42:ee:d5:c2:91:e1:77:
ab:7c:7a:dc:39:19:4c:f7:84:7e:05:5e:fe:4a:78:
b7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:28:4E:58:E9:13:EE:74:F3:1E:DF:4A:83:85:32:BD:63:BE:26:A8
X509v3 Authority Key Identifier:
keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:27:cb:f2:78:61:26:d7:49:d4:84:c8:fa:24:53:b1:68:23:
5f:80:cf:c1:75:61:ad:a3:67:f2:85:03:c9:91:34:6b:a9:e1:
9e:dc:8e:40:70:0a:b1:84:6c:8e:0b:29:72:79:ac:bc:a4:6d:
c5:98:8c:9b:da:c2:11:00:87:f7:f7:b3:c9:ca:50:19:e4:5d:
2d:36:f7:ef:72:ae:06:b7:a5:e9:66:79:ea:8f:f6:f1:11:81:
45:16:05:10:1e:45:d7:5a:9b:86:94:ed:b7:f0:b3:0c:f7:0e:
50:ca:d0:57:b4:fb:96:10:1a:c5:74:24:35:23:96:5d:14:3c:
8c:5b:a6:0b:18:81:89:d3:54:dc:b1:01:35:ee:84:fd:28:2a:
4f:55:7e:d4:ae:0c:39:aa:6c:1a:2c:c2:6f:ff:5b:6a:33:59:
b8:63:dc:8e:88:64:4f:f6:bc:2c:61:b6:3a:1c:a5:84:ac:98:
ad:82:d2:e6:2f:a0:ef:fc:58:74:a2:61:e6:62:44:fd:db:52:
30:1d:56:29:3a:ea:e3:6d:79:57:94:12:86:ce:d9:4d:a4:3e:
08:ab:d6:13:cb:fa:56:8b:23:7b:3f:26:d7:67:44:8b:1b:18:
68:ea:bf:bf:77:d0:ed:e3:42:c9:d3:30:4c:36:f5:a7:fc:0f:
11:31:ae:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4/JQ3ihna8o/4RI4O7G2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNzA4NjhmMGMyYzIxODc2NWZhNmI1M2FiOWFmMDY1ZmYz
MzlmMDYwHhcNMjUwODA0MDcwMjU1WhcNMjUwODA1MDcwMjU1WjAzMTEwLwYDVQQD
Eyg2ODI4NGU1OGU5MTNlZTc0ZjMxZWRmNGE4Mzg1MzJiZDYzYmUyNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf4naVktNaQHliswpTUcRPj59YAr
aOrRb1pidZSt/AnqzH/WeVhT9Cz+JE8OChWBRRckFGA74/AR7Ziy3Lr/R0stxbsh
pVdOfpRMLv71uIyqZxFlrIx53c42N7T1fBITH5yotZGxlYTfubXqzuZMCm8nsKb/
tl7DXxV2LR6g347rVkd6qQZ8jWlR07pJCh/YGgg9HudfwqUyfTOeF5nI8osvhdBa
Uh6YUQlLVCx3kJM/h/cLR0Dup/MuTilIm2LCFx1dEyU/0nQBrN07HwSqftVNcX1G
a5pcog9eUHbYSMKUXlHJ5CXe/0Lu1cKR4XerfHrcORlM94R+BV7+Sni3hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgoTljpE+508x7fSoOFMr1jviaoMB8GA1UdIwQY
MBaAFP9who8MLCGHZfprU6ua8GX/M58GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zNTRiM2ItNWQ3Ni00OWQ1LWE1NmMt
MDA3YzRlNTg1MjdlLzEvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8zNTRiM2ItNWQ3Ni00OWQ1LWE1NmMtMDA3YzRlNTg1Mjdl
LzEvXzNDR2p3d3NJWWRsLW10VHE1cndaZjh6bndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyfL8nhh
JtdJ1ITI+iRTsWgjX4DPwXVhraNn8oUDyZE0a6nhntyOQHAKsYRsjgspcnmsvKRt
xZiMm9rCEQCH9/ezycpQGeRdLTb373KuBrel6WZ56o/28RGBRRYFEB5F11qbhpTt
t/CzDPcOUMrQV7T7lhAaxXQkNSOWXRQ8jFumCxiBidNU3LEBNe6E/SgqT1V+1K4M
OapsGizCb/9bajNZuGPcjohkT/a8LGG2OhylhKyYrYLS5i+g7/xYdKJh5mJE/dtS
MB1WKTrq4215V5QShs7ZTaQ+CKvWE8v6Vosjez8m12dEixsYaOq/v3fQ7eNCydMw
TDb1p/wPETGuOA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:53 2025 by rpki-client