Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: WTwjzGSCbeCO8QLnLWqBEEKjyn9SdV3TdR5fHOkn4eg=
Subject key identifier: BD:9B:F8:2E:79:5B:9C:0A:16:93:E7:6F:E5:5D:BF:8B:98:8B:BE:F4
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 01985569A49B3D3C855B5291647767908D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 0700
Signing time: Tue 29 Jul 2025 09:00:43 +0000
Manifest this update: Tue 29 Jul 2025 09:00:43 +0000
Manifest next update: Wed 30 Jul 2025 09:00:43 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: JYIacLoKxj3/TJwQia4wMsHLN3JB7zgAqHW9tCp1ccc=)
2: xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa (hash: wP9kQODXoT56dWOB0bEFnWVWD/Y0ndzO5Fzna/QZSuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:a4:9b:3d:3c:85:5b:52:91:64:77:67:90:8d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Jul 29 09:00:43 2025 GMT
Not After : Jul 30 09:00:43 2025 GMT
Subject: CN=bd9bf82e795b9c0a1693e76fe55dbf8b988bbef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6c:b4:eb:48:da:84:e7:e3:f0:c4:36:06:07:
97:f8:9a:bb:9c:b5:8f:d3:b1:84:c6:a9:c2:c9:6b:
7b:7d:d2:54:f2:a9:7a:ef:fc:77:fd:10:56:06:08:
68:cf:69:99:51:98:f7:81:08:31:cf:59:1d:69:4d:
bf:f6:a1:eb:dc:ed:4c:55:54:4f:69:3b:10:4a:29:
76:b6:e4:91:ff:86:74:36:d1:47:fb:ff:87:81:cf:
fe:d5:4d:87:cb:22:73:3e:d4:2a:71:1d:af:23:b5:
dd:1c:d1:22:d5:ce:75:18:d7:c1:53:a6:a5:c4:04:
30:db:37:d8:44:32:dd:c7:f4:f9:e1:28:1c:36:53:
3c:80:bd:e5:3a:57:55:f7:af:a9:c1:89:aa:27:cc:
55:8c:aa:27:04:73:6b:2b:6c:b6:50:f2:4b:45:96:
ea:af:e0:a1:0c:26:c9:ab:00:13:2b:a5:9e:99:1a:
3b:bc:12:e4:0e:78:c3:2f:ac:ab:28:48:ab:eb:94:
2d:6f:71:00:40:b7:cd:db:d6:92:5b:2c:28:32:74:
be:01:62:42:01:52:ce:b6:cb:00:f6:3d:37:80:84:
3a:5f:db:8a:0a:be:f5:2e:d1:9d:53:b7:d0:ca:ba:
1a:13:dd:14:90:ed:7e:00:f7:df:c7:44:6d:ac:b9:
2b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9B:F8:2E:79:5B:9C:0A:16:93:E7:6F:E5:5D:BF:8B:98:8B:BE:F4
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:9a:d2:d5:88:3a:4e:d5:ec:54:2e:a3:ea:48:ff:7b:be:6e:
ea:42:e0:05:f3:fb:1b:32:38:f2:f2:05:8b:17:0f:df:40:52:
5e:41:76:9c:3e:57:79:98:23:e2:1f:f6:b1:4c:8b:7a:5a:04:
45:f5:5d:1a:01:2e:cd:72:4c:29:3a:99:88:9d:75:52:20:39:
a0:f7:69:e1:08:bd:2e:a0:0f:35:74:82:09:7e:6d:e3:dc:36:
58:86:8d:df:cb:7d:65:d0:63:10:45:3d:fe:6d:c8:d7:b0:3d:
f2:0c:7b:19:0a:80:49:f9:ef:06:58:ff:ad:da:9e:66:ba:fb:
29:08:d1:57:6c:0a:65:1b:c5:53:c6:a7:d5:49:70:55:2f:56:
bc:3f:dc:4e:e0:7a:8a:47:87:dc:9b:eb:20:b6:ae:10:c7:ad:
a9:43:e3:6a:92:a2:d3:da:b1:45:f5:27:73:63:7c:70:7f:8d:
86:f8:c6:45:3a:b7:d6:9c:d0:31:52:2b:10:4b:a8:e4:4a:59:
9d:be:48:23:12:75:99:1c:11:08:54:6f:0b:6f:eb:ff:29:64:
9f:43:5f:5d:95:f6:65:8a:fd:76:47:f5:ff:2f:0f:e2:e2:85:
28:52:27:b9:5d:d3:4c:8b:60:91:bf:ea:38:13:1a:60:36:ce:
0c:57:d0:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhVaaSbPTyFW1KRZHdnkI0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOGEzYTQzMzAxY2QyYzgwNDdlYjg1NDRmODBhYjRmZmNm
ZTlhY2YwHhcNMjUwNzI5MDkwMDQzWhcNMjUwNzMwMDkwMDQzWjAzMTEwLwYDVQQD
EyhiZDliZjgyZTc5NWI5YzBhMTY5M2U3NmZlNTVkYmY4Yjk4OGJiZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2y060jahOfj8MQ2BgeX+Jq7nLWP
07GExqnCyWt7fdJU8ql67/x3/RBWBghoz2mZUZj3gQgxz1kdaU2/9qHr3O1MVVRP
aTsQSil2tuSR/4Z0NtFH+/+Hgc/+1U2HyyJzPtQqcR2vI7XdHNEi1c51GNfBU6al
xAQw2zfYRDLdx/T54SgcNlM8gL3lOldV96+pwYmqJ8xVjKonBHNrK2y2UPJLRZbq
r+ChDCbJqwATK6WemRo7vBLkDnjDL6yrKEir65Qtb3EAQLfN29aSWywoMnS+AWJC
AVLOtssA9j03gIQ6X9uKCr71LtGdU7fQyroaE90UkO1+APffx0RtrLkrswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2b+C55W5wKFpPnb+Vdv4uYi770MB8GA1UdIwQY
MBaAFNyKOkMwHNLIBH64VE+Aq0/8/prPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kZjBmZjMtNTYxZS00Zjc3LWE3ZGQt
ZmU4NDQwNjBhNDZkLzEvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kZjBmZjMtNTYxZS00Zjc3LWE3ZGQtZmU4NDQwNjBhNDZk
LzEvM0lvNlF6QWMwc2dFZnJoVVQ0Q3JUX3otbXM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzJrS1Yg6
TtXsVC6j6kj/e75u6kLgBfP7GzI48vIFixcP30BSXkF2nD5XeZgj4h/2sUyLeloE
RfVdGgEuzXJMKTqZiJ11UiA5oPdp4Qi9LqAPNXSCCX5t49w2WIaN38t9ZdBjEEU9
/m3I17A98gx7GQqASfnvBlj/rdqeZrr7KQjRV2wKZRvFU8an1UlwVS9WvD/cTuB6
ikeH3JvrILauEMetqUPjapKi09qxRfUnc2N8cH+NhvjGRTq31pzQMVIrEEuo5EpZ
nb5IIxJ1mRwRCFRvC2/r/ylkn0NfXZX2ZYr9dkf1/y8P4uKFKFInuV3TTItgkb/q
OBMaYDbODFfQww==
-----END CERTIFICATE-----
Generated at Tue Jul 29 18:55:24 2025 by rpki-client