Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
File: 3hSkKeZlirtwo3ksFy1-1i64-iY.mft (raw, json)
Hash identifier: iOc5Xx649jqFwQmdYDjoJbvlAR+4fOYW7vwWwVjOsD4=
Subject key identifier: CA:6C:4D:00:CA:8A:8C:78:7F:CA:2D:C6:A1:95:28:20:1F:C0:C8:28
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 019845BF5F942CE68961D0E8AFC014BFF26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
Manifest number: 0FE5
Signing time: Sat 26 Jul 2025 08:00:26 +0000
Manifest this update: Sat 26 Jul 2025 08:00:26 +0000
Manifest next update: Sun 27 Jul 2025 08:00:26 +0000
Files and hashes: 1: 3hSkKeZlirtwo3ksFy1-1i64-iY.crl (hash: SxTEHM3GvMsHHNkXKy4eFB5RzVXpeCfN29odGqFHvBk=)
2: HbrG3H8i4MVchy7ux-rBNewfgN4.roa (hash: ZEnkqludW6ORRLo4vaUnR4azLQNvPJWfXdiBq5telHQ=)
3: eqT6wyPQANegQWczS_E8NsRIGH0.roa (hash: uVTDWyi87OupvvigMLyo7l17Ar6OD8Dv20/y/RB28lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:5f:94:2c:e6:89:61:d0:e8:af:c0:14:bf:f2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Jul 26 08:00:26 2025 GMT
Not After : Jul 27 08:00:26 2025 GMT
Subject: CN=ca6c4d00ca8a8c787fca2dc6a19528201fc0c828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:f7:2a:26:6f:ef:8b:aa:82:0b:8f:2b:52:
bf:38:50:45:2c:17:f0:79:f2:f7:53:ff:03:38:0f:
e4:95:f3:53:c7:d0:7a:64:ad:1a:03:71:b1:b0:d2:
ce:20:54:c1:05:03:9f:8f:9d:30:5d:b2:ee:a4:47:
e3:8e:15:55:06:f2:20:0b:9a:4d:ff:12:d0:bc:e8:
7a:df:af:ad:db:fe:3e:d7:27:63:71:08:5e:57:49:
15:61:62:fb:2d:51:ca:fa:96:4d:d9:0c:fa:1a:53:
e6:08:a2:56:e1:ac:74:bc:b5:e1:e7:c4:89:5d:e2:
f9:d3:b3:d5:4f:18:ae:f3:89:aa:e4:42:5c:ec:17:
ad:58:f8:78:58:95:64:30:6e:75:41:5b:4e:44:f9:
bb:99:3b:db:6e:44:71:e1:63:3a:a3:92:4f:dc:2b:
a7:aa:fc:02:21:7b:62:fc:3d:5a:75:d1:7e:9c:c0:
81:9f:8b:15:63:d2:c8:14:cd:f4:b6:83:76:29:57:
2e:fe:6e:49:33:56:a1:e5:2a:df:35:fb:3c:33:7b:
dd:9d:b6:02:7b:07:b5:83:a6:06:52:a2:b3:3c:74:
12:12:ba:63:56:13:3f:bf:22:b0:49:d6:b8:b3:c5:
62:b0:22:56:78:de:e2:fd:9f:60:ca:2c:3f:33:86:
38:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6C:4D:00:CA:8A:8C:78:7F:CA:2D:C6:A1:95:28:20:1F:C0:C8:28
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5b:ff:23:91:d6:6b:3f:de:7e:6c:19:77:a2:fc:91:30:b6:
51:92:3a:3e:97:75:e0:14:0a:50:21:06:6d:20:f6:5c:f6:b2:
21:f6:74:06:12:24:7d:47:65:fb:2a:82:de:5b:26:de:3d:64:
f7:3f:b1:d7:27:a0:53:03:cd:9f:43:88:b8:46:bf:82:26:0e:
c7:58:39:d9:d7:05:82:78:ec:92:e4:43:43:d9:29:1c:4f:02:
38:28:27:32:ad:04:52:75:11:64:6b:73:8d:65:06:9a:3f:83:
e0:1d:66:51:f3:89:cc:e4:93:3c:ec:74:65:cb:f8:91:f9:90:
f5:67:48:d7:25:76:fa:ae:d0:00:20:74:a2:e4:42:11:63:46:
cb:20:12:c7:82:d2:bc:43:e0:29:9b:9c:13:c2:d3:bb:60:7c:
cd:a4:bd:80:16:68:e2:d0:e0:29:37:f2:76:09:d8:a6:9e:54:
76:01:23:a1:1c:0f:7a:b3:bd:97:4d:52:20:25:18:b2:d5:02:
5c:77:09:a2:5c:13:56:ec:1f:22:d1:51:3b:66:8b:55:95:3a:
91:00:c6:a9:52:c7:3e:88:78:13:e8:30:33:95:d8:a5:c3:b5:
13:b0:02:93:78:a0:11:15:50:bb:ba:17:4a:bf:e0:f7:95:d7:
1e:be:94:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFv1+ULOaJYdDor8AUv/JuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTRhNDI5ZTY2NThhYmI3MGEzNzkyYzE3MmQ3ZWQ2MmVi
OGZhMjYwHhcNMjUwNzI2MDgwMDI2WhcNMjUwNzI3MDgwMDI2WjAzMTEwLwYDVQQD
EyhjYTZjNGQwMGNhOGE4Yzc4N2ZjYTJkYzZhMTk1MjgyMDFmYzBjODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne/3KiZv74uqgguPK1K/OFBFLBfw
efL3U/8DOA/klfNTx9B6ZK0aA3GxsNLOIFTBBQOfj50wXbLupEfjjhVVBvIgC5pN
/xLQvOh636+t2/4+1ydjcQheV0kVYWL7LVHK+pZN2Qz6GlPmCKJW4ax0vLXh58SJ
XeL507PVTxiu84mq5EJc7BetWPh4WJVkMG51QVtORPm7mTvbbkRx4WM6o5JP3Cun
qvwCIXti/D1addF+nMCBn4sVY9LIFM30toN2KVcu/m5JM1ah5SrfNfs8M3vdnbYC
ewe1g6YGUqKzPHQSErpjVhM/vyKwSda4s8VisCJWeN7i/Z9gyiw/M4Y4EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpsTQDKiox4f8otxqGVKCAfwMgoMB8GA1UdIwQY
MBaAFN4UpCnmZYq7cKN5LBctftYuuPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEt
MDVkOWMxY2Q3NDI1LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83M2QxOTctMzNjMC00MmU4LWEyOTEtMDVkOWMxY2Q3NDI1
LzEvM2hTa0tlWmxpcnR3bzNrc0Z5MS0xaTY0LWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlv/I5HW
az/efmwZd6L8kTC2UZI6Ppd14BQKUCEGbSD2XPayIfZ0BhIkfUdl+yqC3lsm3j1k
9z+x1yegUwPNn0OIuEa/giYOx1g52dcFgnjskuRDQ9kpHE8COCgnMq0EUnURZGtz
jWUGmj+D4B1mUfOJzOSTPOx0Zcv4kfmQ9WdI1yV2+q7QACB0ouRCEWNGyyASx4LS
vEPgKZucE8LTu2B8zaS9gBZo4tDgKTfydgnYpp5UdgEjoRwPerO9l01SICUYstUC
XHcJolwTVuwfItFRO2aLVZU6kQDGqVLHPoh4E+gwM5XYpcO1E7ACk3igERVQu7oX
Sr/g95XXHr6UDQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:52:33 2025 by rpki-client