Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier: 4ADi8Pc9g397bjZVoHd8wo0yEBbQ7xcX+uzhz+TD22Y=
Subject key identifier: BD:27:D1:C5:85:04:57:79:87:FC:39:FA:5C:07:93:B0:48:5D:72:C8
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 01984A0A0E76EB789778AF7C6A2C7E59341A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number: 0C2A
Signing time: Sun 27 Jul 2025 04:00:29 +0000
Manifest this update: Sun 27 Jul 2025 04:00:29 +0000
Manifest next update: Mon 28 Jul 2025 04:00:29 +0000
Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: eTC46Tfhx4zqndbc0AreI8kC0pKcyjqS2Su3mBy24xs=)
2: Iq-f1EnfL9Yhl-QlX-qFh7tpN7I.roa (hash: WJuJSZpxmjSdIh4Z1HVT6GKRflZm//sdti8VMNi88hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:0e:76:eb:78:97:78:af:7c:6a:2c:7e:59:34:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Jul 27 04:00:29 2025 GMT
Not After : Jul 28 04:00:29 2025 GMT
Subject: CN=bd27d1c58504577987fc39fa5c0793b0485d72c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:fd:40:7e:62:aa:44:f0:c3:58:e7:c7:c3:
1b:34:37:cf:df:69:fb:5a:ac:82:6b:e0:e8:aa:a8:
f6:3d:2a:de:c3:7c:ca:31:4f:9c:79:e9:d1:1f:fc:
0b:61:a6:58:a6:4b:91:97:d3:d4:4e:76:87:87:d3:
03:24:be:60:9f:b9:bf:e7:2d:dd:23:c5:9a:62:a6:
85:b2:24:ca:7b:89:24:58:93:02:e9:95:9e:73:e4:
15:16:5c:d5:47:8b:4a:96:c8:4d:26:9c:a8:ac:36:
f8:08:36:50:5e:79:6e:05:9c:8e:36:d7:2b:bc:12:
d6:0d:6d:ab:c8:f8:13:15:a7:5f:e4:e3:24:22:ec:
c3:45:a5:fa:71:0b:44:f9:e1:c2:40:d9:45:9c:af:
ec:d5:c5:cd:46:40:ac:0c:40:b3:70:ac:e4:38:56:
b8:e4:ce:98:b7:c1:3e:4b:84:62:5e:5f:da:c1:04:
ca:9d:10:54:db:3e:17:ff:3a:c0:68:d6:1b:da:5b:
81:2d:eb:d3:d2:a3:88:05:2f:4e:53:76:24:96:74:
1a:c9:0e:a6:ff:b2:f2:af:0f:22:01:89:d3:ac:db:
56:8f:4a:77:04:5b:84:6d:11:2b:09:e3:2a:0d:2e:
8c:2e:36:f3:b8:0e:b8:3e:9c:cc:ef:eb:77:6e:71:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:27:D1:C5:85:04:57:79:87:FC:39:FA:5C:07:93:B0:48:5D:72:C8
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:46:c9:1a:19:be:c9:87:87:aa:ce:42:7e:7d:04:a9:22:82:
22:8e:ef:27:61:d7:da:2c:e5:6a:2c:89:34:ba:a9:bb:e9:18:
8a:6b:c9:0a:30:b4:f7:ba:69:3f:37:f4:d7:85:17:a0:e9:6e:
3a:cb:cc:21:a6:c3:9f:8a:d3:6d:3e:b4:b3:c0:1b:31:98:50:
e8:96:d1:7b:0a:09:68:1a:97:89:7a:ec:25:3f:aa:c9:00:ea:
5e:b2:de:3e:78:5a:49:b3:59:a6:5d:1d:c2:91:b6:b7:e4:c1:
be:88:1c:40:6e:28:9d:17:24:16:98:66:fd:3f:e7:27:1c:97:
b5:2b:8b:b7:bc:88:fe:57:f4:45:88:7b:94:8e:8b:aa:04:f4:
1e:5e:d4:ee:d7:7b:47:24:65:56:4f:6f:96:c2:73:19:87:fb:
36:ea:75:5f:ce:18:e2:5c:27:1a:c8:b9:bf:94:c7:85:4c:ce:
f6:5c:b6:08:a6:03:e6:e6:7d:d5:3a:d4:4a:96:d2:14:85:4e:
43:77:7d:73:15:c1:b7:9b:39:af:4c:4d:cd:2c:56:1c:f0:f4:
4b:5c:a8:cf:38:2d:be:2b:8f:e6:de:85:d9:dc:a0:2f:3e:f6:
2e:99:41:34:bf:4e:ff:f8:f7:5b:7b:a2:38:48:4f:1b:47:53:
d5:0f:55:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCg5263iXeK98aix+WTQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGRjYjU2Zjc5ZjRhMWRlZDhkOTU0ODIzMzM5NjFkMDI2
NGZhYTUwHhcNMjUwNzI3MDQwMDI5WhcNMjUwNzI4MDQwMDI5WjAzMTEwLwYDVQQD
EyhiZDI3ZDFjNTg1MDQ1Nzc5ODdmYzM5ZmE1YzA3OTNiMDQ4NWQ3MmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFT9QH5iqkTww1jnx8MbNDfP32n7
WqyCa+Doqqj2PSrew3zKMU+ceenRH/wLYaZYpkuRl9PUTnaHh9MDJL5gn7m/5y3d
I8WaYqaFsiTKe4kkWJMC6ZWec+QVFlzVR4tKlshNJpyorDb4CDZQXnluBZyONtcr
vBLWDW2ryPgTFadf5OMkIuzDRaX6cQtE+eHCQNlFnK/s1cXNRkCsDECzcKzkOFa4
5M6Yt8E+S4RiXl/awQTKnRBU2z4X/zrAaNYb2luBLevT0qOIBS9OU3YklnQayQ6m
/7Lyrw8iAYnTrNtWj0p3BFuEbRErCeMqDS6MLjbzuA64PpzM7+t3bnG4QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0n0cWFBFd5h/w5+lwHk7BIXXLIMB8GA1UdIwQY
MBaAFN1Ny1b3n0od7Y2VSCMzlh0CZPqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2Yt
MTc3YjViYTMyMzI3LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9hYjNlNzMtZDEzZC00ZWMyLWJmM2YtMTc3YjViYTMyMzI3
LzEvM1UzTFZ2ZWZTaDN0alpWSUl6T1dIUUprLXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkbJGhm+
yYeHqs5Cfn0EqSKCIo7vJ2HX2izlaiyJNLqpu+kYimvJCjC097ppPzf014UXoOlu
OsvMIabDn4rTbT60s8AbMZhQ6JbRewoJaBqXiXrsJT+qyQDqXrLePnhaSbNZpl0d
wpG2t+TBvogcQG4onRckFphm/T/nJxyXtSuLt7yI/lf0RYh7lI6LqgT0Hl7U7td7
RyRlVk9vlsJzGYf7Nup1X84Y4lwnGsi5v5THhUzO9ly2CKYD5uZ91TrUSpbSFIVO
Q3d9cxXBt5s5r0xNzSxWHPD0S1yozzgtviuP5t6F2dygLz72LplBNL9O//j3W3ui
OEhPG0dT1Q9VBA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:11:18 2025 by rpki-client