Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
File: 3YqroPRrqhRP2wk46RwU-UxhZQw.mft (raw, json)
Hash identifier: mfoYY+6+qIopyDnkSoUzv0egRnAjdKm9Oha+CFg3OMA=
Subject key identifier: BA:AA:6A:79:81:F5:F5:8F:1E:43:D6:F4:A4:EF:03:A4:4B:0E:30:63
Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
Certificate issuer: /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Certificate serial: 01984AAECADB7F016AAC87A250FD408A8194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
Manifest number: 0D62
Signing time: Sun 27 Jul 2025 07:00:25 +0000
Manifest this update: Sun 27 Jul 2025 07:00:25 +0000
Manifest next update: Mon 28 Jul 2025 07:00:25 +0000
Files and hashes: 1: 3YqroPRrqhRP2wk46RwU-UxhZQw.crl (hash: nM/RwUjBmmv6FjROcC7frabt+3BF+tOHuAQtrfqj7nE=)
2: jyRFM9_T_syhJNdrBbZtEXQjBxY.roa (hash: 3sN/6EgdGuf6mYlFqORSiJaf85S1hh85EE3f4pncjgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:ca:db:7f:01:6a:ac:87:a2:50:fd:40:8a:81:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Validity
Not Before: Jul 27 07:00:25 2025 GMT
Not After : Jul 28 07:00:25 2025 GMT
Subject: CN=baaa6a7981f5f58f1e43d6f4a4ef03a44b0e3063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:08:6e:d3:85:34:03:ae:19:ed:e2:94:e9:
7b:84:bc:2b:4e:37:0f:2c:bc:a6:4c:d8:e5:dc:1b:
ae:c4:37:2b:ff:cc:52:82:71:ee:73:e2:03:9f:d5:
e1:fb:a7:d8:c9:4c:cc:90:0f:cd:25:05:64:3e:9c:
6e:f2:44:9d:f0:73:65:85:b0:ca:44:ff:c6:2c:78:
35:97:9b:c8:bd:02:c1:85:8a:1c:9a:9d:2e:99:82:
84:e8:ae:67:67:46:af:db:d1:68:57:7b:9a:86:05:
30:85:82:2d:56:01:8d:3a:2c:26:a1:7f:a5:e6:82:
1b:ee:6a:d8:be:7e:58:c1:bc:46:e4:83:72:97:59:
0f:19:ce:f0:c8:41:50:5b:d0:87:01:63:e3:71:da:
26:2c:30:74:75:6b:8d:23:69:95:00:ff:c8:4e:48:
69:31:ee:6a:5a:8f:58:6d:09:66:08:17:35:72:f7:
ec:5d:f7:a9:6b:c2:34:e5:d0:57:34:c9:ef:99:bc:
63:18:2c:4a:04:7c:c0:12:3c:3a:bf:bc:d3:9f:ba:
06:18:60:86:3f:46:18:8b:d7:aa:ef:ec:5d:eb:9b:
3d:69:15:c7:4d:a6:75:c6:dc:c6:af:3a:d1:dc:ec:
3c:ba:ac:cf:23:5d:b9:1d:d2:c0:53:33:1e:ae:19:
26:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:6A:79:81:F5:F5:8F:1E:43:D6:F4:A4:EF:03:A4:4B:0E:30:63
X509v3 Authority Key Identifier:
keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:92:98:34:4e:9a:ef:4a:e8:d6:4d:b7:37:b2:03:67:05:a4:
2c:48:e5:1f:c0:19:b0:79:3a:84:c4:39:77:fe:e6:15:90:21:
ba:88:ab:0c:a0:a0:5d:0d:31:b5:cc:e8:55:52:d1:c6:f8:99:
89:3b:cb:10:07:12:65:fc:ca:fa:c6:82:13:78:eb:e6:a8:94:
59:ee:1d:cd:37:39:94:fd:11:e9:30:48:37:d3:8a:cd:35:ab:
24:fb:19:be:0c:23:25:aa:5d:d7:de:fa:a8:9d:62:8f:0b:a7:
d0:54:1f:b4:bb:9a:c3:3f:55:41:3f:e5:d5:7e:85:82:59:f0:
1f:9d:4c:05:f8:4e:f2:d0:81:13:00:b3:b7:5a:8c:e7:29:c8:
e9:5b:b2:d5:ca:96:61:b9:1a:2c:b1:10:76:32:1c:50:a9:74:
dc:62:f3:cc:29:0d:15:3d:cf:aa:f9:1d:2d:97:fa:80:a4:49:
e9:5b:b8:74:ea:07:e6:c0:38:6a:57:68:86:24:c8:d9:43:47:
39:02:a3:80:16:ce:14:8a:d9:a0:0a:e1:58:26:7a:3f:89:eb:
21:90:c2:34:a8:e9:df:be:84:ef:9d:28:4d:8f:59:e6:6d:cc:
49:27:a9:4b:fe:f5:1d:c3:25:51:80:47:85:2e:2e:ff:ce:5a:
af:64:13:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrsrbfwFqrIeiUP1AioGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOGFhYmEwZjQ2YmFhMTQ0ZmRiMDkzOGU5MWMxNGY5NGM2
MTY1MGMwHhcNMjUwNzI3MDcwMDI1WhcNMjUwNzI4MDcwMDI1WjAzMTEwLwYDVQQD
EyhiYWFhNmE3OTgxZjVmNThmMWU0M2Q2ZjRhNGVmMDNhNDRiMGUzMDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSwIbtOFNAOuGe3ilOl7hLwrTjcP
LLymTNjl3BuuxDcr/8xSgnHuc+IDn9Xh+6fYyUzMkA/NJQVkPpxu8kSd8HNlhbDK
RP/GLHg1l5vIvQLBhYocmp0umYKE6K5nZ0av29FoV3uahgUwhYItVgGNOiwmoX+l
5oIb7mrYvn5YwbxG5INyl1kPGc7wyEFQW9CHAWPjcdomLDB0dWuNI2mVAP/ITkhp
Me5qWo9YbQlmCBc1cvfsXfepa8I05dBXNMnvmbxjGCxKBHzAEjw6v7zTn7oGGGCG
P0YYi9eq7+xd65s9aRXHTaZ1xtzGrzrR3Ow8uqzPI125HdLAUzMerhkmywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqqanmB9fWPHkPW9KTvA6RLDjBjMB8GA1UdIwQY
MBaAFN2Kq6D0a6oUT9sJOOkcFPlMYWUMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xZmEyN2UtYWFmMC00YmUyLWE1MjIt
YTgwYzk0NzYxZDIzLzEvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xZmEyN2UtYWFmMC00YmUyLWE1MjItYTgwYzk0NzYxZDIz
LzEvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpKYNE6a
70ro1k23N7IDZwWkLEjlH8AZsHk6hMQ5d/7mFZAhuoirDKCgXQ0xtczoVVLRxviZ
iTvLEAcSZfzK+saCE3jr5qiUWe4dzTc5lP0R6TBIN9OKzTWrJPsZvgwjJapd1976
qJ1ijwun0FQftLuawz9VQT/l1X6FglnwH51MBfhO8tCBEwCzt1qM5ynI6Vuy1cqW
YbkaLLEQdjIcUKl03GLzzCkNFT3PqvkdLZf6gKRJ6Vu4dOoH5sA4aldohiTI2UNH
OQKjgBbOFIrZoArhWCZ6P4nrIZDCNKjp376E750oTY9Z5m3MSSepS/71HcMlUYBH
hS4u/85ar2QTNA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:02:31 2025 by rpki-client