Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: tKGlVcTz1fb4XwW6VQONpYsaqST/cqMzMksSt2EZhKM=
Subject key identifier: 57:EC:F7:F3:23:FE:70:8E:2C:66:3F:6C:AD:6C:43:5B:84:2F:91:79
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 0198597DBE1394D629084BEE184EB89AC226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 1607
Signing time: Wed 30 Jul 2025 04:01:09 +0000
Manifest this update: Wed 30 Jul 2025 04:01:09 +0000
Manifest next update: Thu 31 Jul 2025 04:01:09 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: sTif/vxbNRbAI3bSAwWGwXTvdXY7Y5dNVqOvn3pw5xw=)
2: d-cXZlvvdlyn7ox05EmpqUd6gwY.roa (hash: nBiz8J2UJroitgcJmWpKEDt0TmsVS2dSW257R8wSk2M=)
3: ddyzrC5BC4wxEQNwmkjcZcFPmY4.roa (hash: 0XE307HFpJ7wb9YEVzh633mz+Wdn4W7KWCgB9kPDSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:7d:be:13:94:d6:29:08:4b:ee:18:4e:b8:9a:c2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Jul 30 04:01:09 2025 GMT
Not After : Jul 31 04:01:09 2025 GMT
Subject: CN=57ecf7f323fe708e2c663f6cad6c435b842f9179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:ab:d5:8c:72:ed:b1:83:f3:f4:da:bd:79:
da:5d:7f:92:34:0f:48:3d:04:0f:05:f0:1e:91:e9:
9a:11:1b:1f:49:f6:09:9d:f8:78:07:5b:21:a8:5f:
d2:21:ba:05:eb:75:29:1f:4e:8d:e1:16:1d:da:8f:
86:47:77:da:60:36:41:73:78:db:45:bd:8b:ef:f1:
41:ef:be:f6:8f:33:f1:19:cf:29:45:3d:5f:36:f7:
b7:ae:be:7d:c6:64:52:54:fe:fc:c6:bc:eb:9f:5d:
77:51:6a:16:5a:b0:89:6f:e4:92:e1:39:d7:42:69:
15:66:e9:bf:46:29:e4:d9:98:0b:50:ce:92:c3:1b:
0d:9f:96:6c:20:ed:20:e2:75:c7:9f:08:50:db:0d:
09:17:a2:f8:88:c8:87:6f:43:4d:ea:69:54:f7:77:
71:9f:d9:5d:88:ef:1b:93:c9:62:24:5a:8c:76:0c:
4d:07:a2:c6:59:05:4f:78:2a:69:42:2d:36:c2:ef:
69:ee:73:dc:ba:81:1d:14:d0:b7:5d:13:f6:de:3c:
2c:81:ba:95:22:bb:2c:ff:6c:5e:68:76:fb:86:6e:
95:79:d1:71:dc:87:f1:6d:b1:6a:a4:ad:a9:cb:58:
ad:30:21:69:48:30:55:d1:e7:71:54:6d:21:43:be:
a0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EC:F7:F3:23:FE:70:8E:2C:66:3F:6C:AD:6C:43:5B:84:2F:91:79
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a8:c1:b6:91:aa:59:98:10:ba:d9:db:ba:0f:ed:cb:03:4d:
bb:4b:af:f8:b6:3a:68:2c:73:26:28:bc:14:f7:8c:44:81:3a:
b3:15:1b:7b:55:22:20:a1:34:a3:7d:0e:14:7a:f9:86:2e:bf:
33:1c:c5:79:de:c1:82:1b:4b:63:1a:7a:ec:80:2c:7f:c0:cc:
5e:6f:39:40:8f:ee:06:d6:7d:d4:c6:42:8b:de:a6:b4:ad:05:
bc:bf:5f:e4:6e:37:4b:b6:55:38:ad:3a:ad:9b:02:90:fb:af:
83:e5:fe:1c:bd:93:75:34:b7:a9:90:b3:00:60:7f:89:dd:ab:
70:b7:c6:64:bc:e6:c4:3b:d2:c2:bf:8c:7a:35:14:a6:c4:20:
1d:f5:b5:a3:4d:46:0b:f2:42:83:37:7f:85:86:20:c9:dc:88:
09:9e:b4:c3:8d:66:74:22:47:a8:b9:62:2d:08:47:e7:ce:5a:
16:14:7d:9f:fd:24:bb:7d:b6:80:25:89:55:6b:88:38:71:b3:
e2:3e:96:ec:7f:d1:68:b7:f0:71:cb:90:7b:08:dd:17:bd:96:
ba:55:96:4b:59:a7:ec:2c:f7:ca:d0:87:49:84:b1:20:b6:e3:
0a:2b:8d:98:18:fc:7a:95:dc:60:7d:d5:f5:b9:73:75:e8:7a:
38:f5:79:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhZfb4TlNYpCEvuGE64msImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjE4MGRkYzcxNDMxMDNmMDJlNjljYjljZGExOWMyMzk1
ZTU3YTEwHhcNMjUwNzMwMDQwMTA5WhcNMjUwNzMxMDQwMTA5WjAzMTEwLwYDVQQD
Eyg1N2VjZjdmMzIzZmU3MDhlMmM2NjNmNmNhZDZjNDM1Yjg0MmY5MTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmKr1Yxy7bGD8/TavXnaXX+SNA9I
PQQPBfAekemaERsfSfYJnfh4B1shqF/SIboF63UpH06N4RYd2o+GR3faYDZBc3jb
Rb2L7/FB7772jzPxGc8pRT1fNve3rr59xmRSVP78xrzrn113UWoWWrCJb+SS4TnX
QmkVZum/Rink2ZgLUM6SwxsNn5ZsIO0g4nXHnwhQ2w0JF6L4iMiHb0NN6mlU93dx
n9ldiO8bk8liJFqMdgxNB6LGWQVPeCppQi02wu9p7nPcuoEdFNC3XRP23jwsgbqV
Irss/2xeaHb7hm6VedFx3IfxbbFqpK2py1itMCFpSDBV0edxVG0hQ76g2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfs9/Mj/nCOLGY/bK1sQ1uEL5F5MB8GA1UdIwQY
MBaAFN6xgN3HFDED8C5py5zaGcI5XlehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mOTA4ODMtZTQ4MC00Y2YxLWFiZDIt
OTA5MWNkNzNkMzhjLzEvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mOTA4ODMtZTQ4MC00Y2YxLWFiZDItOTA5MWNkNzNkMzhj
LzEvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHajBtpGq
WZgQutnbug/tywNNu0uv+LY6aCxzJii8FPeMRIE6sxUbe1UiIKE0o30OFHr5hi6/
MxzFed7BghtLYxp67IAsf8DMXm85QI/uBtZ91MZCi96mtK0FvL9f5G43S7ZVOK06
rZsCkPuvg+X+HL2TdTS3qZCzAGB/id2rcLfGZLzmxDvSwr+MejUUpsQgHfW1o01G
C/JCgzd/hYYgydyICZ60w41mdCJHqLliLQhH585aFhR9n/0ku322gCWJVWuIOHGz
4j6W7H/RaLfwccuQewjdF72WulWWS1mn7Cz3ytCHSYSxILbjCiuNmBj8epXcYH3V
9blzdeh6OPV5IQ==
-----END CERTIFICATE-----
Generated at Wed Jul 30 05:16:58 2025 by rpki-client