Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
File: 3vwmhsKavvGPQLMOfpUTJHpm7xM.mft (raw, json)
Hash identifier: nuxEe2+rc3/QFcYiUtbark9G8dm5Hg815ODwk2O2FSo=
Subject key identifier: F3:E4:67:57:C9:F1:EE:F1:E0:15:76:AE:8D:F3:7B:BB:67:6E:3D:4F
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Certificate issuer: /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial: 0198529F485B0C7C57474EED3308FC301B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 20:00:27 +0000
Manifest this update: Mon 28 Jul 2025 20:00:27 +0000
Manifest next update: Tue 29 Jul 2025 20:00:27 +0000
Files and hashes: 1: 2jede6KT-wWXlr-gV_HV5g4z3cE.roa (hash: mv6a2TTy4FTvxK1u9z+/AeZmzO5akrk+XnGtMMkB+UQ=)
2: 3vwmhsKavvGPQLMOfpUTJHpm7xM.crl (hash: 6exnzC/hdiTJIVb+4kC89ev8672UtUzrOuf3E314RYs=)
3: IJD_U3KWZ58BdYUivTasUkoSb14.roa (hash: QMy/+qKyMyM01JHQHllqOzvjbF1AM/QefZV5csA0T9s=)
4: NxF2Cyt5llnCNI_vXdmc9sDjjDg.roa (hash: R2BQ5eg/vIm8OWNUAn8Iiim/Pq6eL5zypKjZ8nuw8W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:48:5b:0c:7c:57:47:4e:ed:33:08:fc:30:1b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
Validity
Not Before: Jul 28 20:00:27 2025 GMT
Not After : Jul 29 20:00:27 2025 GMT
Subject: CN=f3e46757c9f1eef1e01576ae8df37bbb676e3d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f6:4e:16:02:b3:b4:75:ee:87:33:bb:6e:ca:
3a:78:6c:4c:b3:ed:75:e0:08:03:b1:9e:4b:b3:63:
c3:3c:e8:6d:4b:30:e3:84:d4:98:66:73:fc:5e:d4:
de:df:8d:73:6b:e0:be:19:a9:2d:33:b6:b5:f5:d7:
76:06:8e:cc:ab:0a:83:7f:83:a3:a7:b7:c5:5d:b7:
2c:b0:0d:44:4d:70:ce:cb:69:3c:0f:08:a7:d4:04:
74:4a:ca:9a:5a:75:cf:08:de:78:21:2f:12:b4:96:
0c:26:83:79:14:13:39:88:ef:b7:af:02:20:4e:59:
19:dc:3b:c5:a3:57:6d:1e:d6:f4:cc:73:b1:fc:7d:
b3:bd:4b:3f:31:1b:b0:90:ef:e0:bd:eb:2c:e9:2b:
4d:a4:49:ad:85:ee:a3:57:8c:b4:3e:c8:65:f4:cd:
91:ff:dc:dc:73:62:0b:11:e8:c2:8a:d4:35:df:b3:
0b:50:6b:bd:4b:ca:95:b8:58:3d:90:cf:ed:a8:fd:
4c:dc:3b:9b:9d:9b:f8:e8:89:67:c5:e4:9d:73:f7:
f1:ba:7d:ad:0e:9e:b8:58:40:27:fe:99:a5:b2:66:
19:44:7f:48:e7:87:40:c2:a4:12:ce:30:25:db:88:
9c:e5:ae:1b:b4:1a:77:32:69:8c:a6:17:99:c5:ff:
c1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E4:67:57:C9:F1:EE:F1:E0:15:76:AE:8D:F3:7B:BB:67:6E:3D:4F
X509v3 Authority Key Identifier:
keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:45:0f:d6:c6:18:9b:81:36:91:38:f1:62:f0:44:3b:ac:ea:
56:a4:5c:88:09:48:d3:05:fa:51:05:72:73:1d:b3:c4:75:fb:
b2:2e:b4:de:81:26:a0:62:30:f4:a3:df:b9:fd:ef:56:3b:cb:
30:4c:ff:64:ff:f5:40:9f:c2:de:07:01:54:c9:83:2f:c0:4b:
17:d9:db:a0:5a:e4:33:d9:47:05:f2:b3:cd:cf:82:b0:4b:82:
fb:53:0a:d4:5c:56:4c:df:88:10:62:e4:2a:b4:f2:ef:fc:64:
66:7e:67:03:67:93:44:a3:a1:a8:fe:cd:4d:ff:89:af:36:3a:
70:88:5d:91:27:af:d2:87:4e:34:16:e7:c5:33:56:4d:ac:d5:
42:c0:aa:d6:ef:2c:6d:d8:f7:c4:c2:bd:0c:17:29:48:3a:ad:
40:1d:c5:db:32:e2:fa:45:84:54:28:5b:12:8b:61:5f:a1:95:
6e:6e:80:e4:1e:95:49:04:f6:38:54:d4:01:c7:64:33:fa:b0:
0b:f5:db:88:93:30:23:93:5d:f9:f0:ff:d4:10:16:6e:9d:a1:
76:a9:0d:68:b7:d0:7c:19:9e:65:e9:6e:23:c6:22:61:b6:48:
b0:52:fa:52:71:22:97:16:85:3a:40:a8:1b:77:72:3c:b5:97:
8c:e8:1f:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSn0hbDHxXR07tMwj8MBubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZmMyNjg2YzI5YWJlZjE4ZjQwYjMwZTdlOTUxMzI0N2E2
NmVmMTMwHhcNMjUwNzI4MjAwMDI3WhcNMjUwNzI5MjAwMDI3WjAzMTEwLwYDVQQD
EyhmM2U0Njc1N2M5ZjFlZWYxZTAxNTc2YWU4ZGYzN2JiYjY3NmUzZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPZOFgKztHXuhzO7bso6eGxMs+11
4AgDsZ5Ls2PDPOhtSzDjhNSYZnP8XtTe341za+C+GaktM7a19dd2Bo7MqwqDf4Oj
p7fFXbcssA1ETXDOy2k8Dwin1AR0SsqaWnXPCN54IS8StJYMJoN5FBM5iO+3rwIg
TlkZ3DvFo1dtHtb0zHOx/H2zvUs/MRuwkO/gvess6StNpEmthe6jV4y0Pshl9M2R
/9zcc2ILEejCitQ137MLUGu9S8qVuFg9kM/tqP1M3DubnZv46IlnxeSdc/fxun2t
Dp64WEAn/pmlsmYZRH9I54dAwqQSzjAl24ic5a4btBp3MmmMpheZxf/BEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPkZ1fJ8e7x4BV2ro3ze7tnbj1PMB8GA1UdIwQY
MBaAFN78JobCmr7xj0CzDn6VEyR6Zu8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3Z3bWhzS2F2dkdQUUxNT2ZwVVRKSHBtN3hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNDUxNWUtODY0MS00NWIwLWI3NWYt
MDk2OTIxYzkxYzQxLzEvM3Z3bWhzS2F2dkdQUUxNT2ZwVVRKSHBtN3hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNDUxNWUtODY0MS00NWIwLWI3NWYtMDk2OTIxYzkxYzQx
LzEvM3Z3bWhzS2F2dkdQUUxNT2ZwVVRKSHBtN3hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUUP1sYY
m4E2kTjxYvBEO6zqVqRciAlI0wX6UQVycx2zxHX7si603oEmoGIw9KPfuf3vVjvL
MEz/ZP/1QJ/C3gcBVMmDL8BLF9nboFrkM9lHBfKzzc+CsEuC+1MK1FxWTN+IEGLk
KrTy7/xkZn5nA2eTRKOhqP7NTf+JrzY6cIhdkSev0odONBbnxTNWTazVQsCq1u8s
bdj3xMK9DBcpSDqtQB3F2zLi+kWEVChbEothX6GVbm6A5B6VSQT2OFTUAcdkM/qw
C/XbiJMwI5Nd+fD/1BAWbp2hdqkNaLfQfBmeZeluI8YiYbZIsFL6UnEilxaFOkCo
G3dyPLWXjOgfdA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 03:39:21 2025 by rpki-client