Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: 5NC45cQq5WeuTfxA0b/fdbmgVqerhMxEoTStZT4tjYU=
Subject key identifier: B1:84:55:D1:4A:0B:D9:31:91:DE:55:3B:CD:C2:9E:F2:60:A6:43:F3
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 0198485279EA489A88D594A70864E3458958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 0C77
Signing time: Sat 26 Jul 2025 20:00:21 +0000
Manifest this update: Sat 26 Jul 2025 20:00:21 +0000
Manifest next update: Sun 27 Jul 2025 20:00:21 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: hNC3WFjhYG7LO5XfqDkOn7+huFPk/oF6oozWfglg+bs=)
2: 7d2ToMhT-5ZAU4qsYQXruw_MoIU.roa (hash: vm5X1sab9HJagyLFII3df7BekSqzu2gNn9apIe4J5uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:79:ea:48:9a:88:d5:94:a7:08:64:e3:45:89:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Jul 26 20:00:21 2025 GMT
Not After : Jul 27 20:00:21 2025 GMT
Subject: CN=b18455d14a0bd93191de553bcdc29ef260a643f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:bf:c3:54:73:ea:87:fc:80:3e:e6:86:a0:
b5:28:70:d3:20:1e:e4:79:d9:10:3f:88:b1:74:f9:
98:cc:b4:6e:cf:86:0d:82:a4:28:f4:01:fc:3c:d7:
03:3e:46:e7:d6:4f:d3:26:fb:b4:12:be:24:dd:5c:
39:dd:3f:8d:7c:9e:10:e4:74:74:d9:5f:e5:de:40:
a8:8c:91:32:fb:40:9d:91:31:03:81:cc:36:47:12:
a8:61:b5:73:09:37:24:1a:10:a5:ce:78:4c:9a:b9:
65:0c:27:2c:d9:ca:eb:35:0c:46:d2:74:3e:cf:3d:
db:01:89:0a:89:b1:0d:59:bc:0d:88:1a:5d:e1:50:
a4:3a:61:36:17:bf:78:b8:56:49:8d:56:79:89:2f:
fb:ad:97:e2:4f:58:39:f7:b3:84:25:d9:f8:48:2e:
8c:92:19:e4:b5:cd:e1:71:7d:e4:26:af:77:cb:59:
a7:02:92:af:38:31:df:0a:63:04:c7:6e:1d:ae:2c:
e3:bd:13:6b:02:a7:f7:5b:23:ca:28:59:fc:2f:ec:
42:b2:bc:e7:b3:e3:60:fb:ed:1b:71:d1:0c:5d:8b:
b8:74:cc:c1:72:6a:cf:1e:3a:ac:96:79:4c:90:31:
17:ce:a1:a1:1a:69:ec:2a:a2:20:1c:b6:d4:f7:f0:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:84:55:D1:4A:0B:D9:31:91:DE:55:3B:CD:C2:9E:F2:60:A6:43:F3
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:21:2a:c6:62:55:0d:be:77:3c:dd:fe:a6:17:b5:a5:32:e1:
38:d1:ba:8b:b8:a5:6e:a6:87:ca:83:75:b0:0b:be:ae:c3:08:
a3:75:a0:f8:d4:ec:4a:1a:60:d4:a5:21:14:fc:52:4f:8b:01:
c3:7a:70:7e:f6:02:89:ab:3e:fa:7c:e4:ba:db:e2:b4:fb:02:
eb:fc:e1:e1:d5:7d:8f:21:62:d1:3b:59:e8:43:00:3d:1e:9e:
3d:5f:d7:d3:cc:66:36:24:69:aa:9d:8b:09:b1:fb:9e:b6:2e:
66:c4:9b:ce:c9:65:56:fd:63:b2:f9:83:75:25:ab:80:d4:a3:
6b:53:fc:9f:77:a8:7d:81:30:10:80:e1:dc:ce:11:a4:25:c8:
9f:e7:ee:39:f4:09:57:85:3b:98:f3:09:b6:79:59:9a:6f:83:
6e:03:d3:19:91:b9:f8:16:3b:9d:8d:b5:53:ce:c2:43:76:bc:
ff:95:a3:36:b4:e7:6c:7d:db:6b:58:3b:77:8d:cc:46:b2:61:
16:59:77:d4:d1:90:d8:99:e3:b1:d7:33:b8:85:b4:2c:c0:4a:
db:35:d8:21:96:2d:7f:21:3c:46:06:69:e0:8f:4c:5e:f7:14:
52:3d:88:c5:c9:8f:f3:d6:ee:e3:c4:85:7c:50:13:5e:d4:8c:
5a:36:74:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUnnqSJqI1ZSnCGTjRYlYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTQ0Y2U4ZThlNDQxNWU1Yzg2YTBiMjgwNDk5YTM4NWMx
NGVmZjIwHhcNMjUwNzI2MjAwMDIxWhcNMjUwNzI3MjAwMDIxWjAzMTEwLwYDVQQD
EyhiMTg0NTVkMTRhMGJkOTMxOTFkZTU1M2JjZGMyOWVmMjYwYTY0M2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkG/w1Rz6of8gD7mhqC1KHDTIB7k
edkQP4ixdPmYzLRuz4YNgqQo9AH8PNcDPkbn1k/TJvu0Er4k3Vw53T+NfJ4Q5HR0
2V/l3kCojJEy+0CdkTEDgcw2RxKoYbVzCTckGhClznhMmrllDCcs2crrNQxG0nQ+
zz3bAYkKibENWbwNiBpd4VCkOmE2F794uFZJjVZ5iS/7rZfiT1g597OEJdn4SC6M
khnktc3hcX3kJq93y1mnApKvODHfCmMEx24drizjvRNrAqf3WyPKKFn8L+xCsrzn
s+Ng++0bcdEMXYu4dMzBcmrPHjqslnlMkDEXzqGhGmnsKqIgHLbU9/BYyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGEVdFKC9kxkd5VO83CnvJgpkPzMB8GA1UdIwQY
MBaAFN8UTOjo5EFeXIagsoBJmjhcFO/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wZjQzMDItNDFhMi00ZGE0LTg3OGUt
NTg2N2JlNzAzNmIzLzEvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wZjQzMDItNDFhMi00ZGE0LTg3OGUtNTg2N2JlNzAzNmIz
LzEvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyEqxmJV
Db53PN3+phe1pTLhONG6i7ilbqaHyoN1sAu+rsMIo3Wg+NTsShpg1KUhFPxST4sB
w3pwfvYCias++nzkutvitPsC6/zh4dV9jyFi0TtZ6EMAPR6ePV/X08xmNiRpqp2L
CbH7nrYuZsSbzsllVv1jsvmDdSWrgNSja1P8n3eofYEwEIDh3M4RpCXIn+fuOfQJ
V4U7mPMJtnlZmm+DbgPTGZG5+BY7nY21U87CQ3a8/5WjNrTnbH3ba1g7d43MRrJh
Fll31NGQ2JnjsdczuIW0LMBK2zXYIZYtfyE8RgZp4I9MXvcUUj2IxcmP89bu48SF
fFATXtSMWjZ0Vg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:45:33 2025 by rpki-client