
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: kByyHeYfJoxFXMpBbTtS87DX9yTyifAlA/s7P4+osX0=
Subject key identifier: EE:AC:C1:41:A7:F3:69:18:C0:9F:CE:8A:15:42:B7:FE:2F:E8:59:4C
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 01984B8A82C592FE854F737BB7742A14A970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 1543
Signing time: Sun 27 Jul 2025 11:00:25 +0000
Manifest this update: Sun 27 Jul 2025 11:00:25 +0000
Manifest next update: Mon 28 Jul 2025 11:00:25 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: 8+MUKMPyuiz8v4MnwQzZhWrlths69uox1oZWyoIzQq8=)
2: i93FbkwGzwrRV5pk719Azh7mnco.roa (hash: FbLtCYorp5+hnW87pG1j3ZHIdaixJG9L/nchejMVUes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:82:c5:92:fe:85:4f:73:7b:b7:74:2a:14:a9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Jul 27 11:00:25 2025 GMT
Not After : Jul 28 11:00:25 2025 GMT
Subject: CN=eeacc141a7f36918c09fce8a1542b7fe2fe8594c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:e1:8a:c2:87:b5:27:d2:14:e4:c7:17:84:
02:57:ee:62:b9:3d:3f:78:35:9d:d1:f0:f2:b8:84:
2c:e2:79:5f:e3:fb:a2:f8:45:58:62:8d:81:f1:ad:
03:25:9d:39:bd:50:10:87:9e:96:69:f8:62:49:a4:
c7:91:89:7c:af:2a:f6:da:89:35:12:eb:f0:25:e4:
0b:d4:72:8c:58:b5:fe:45:9c:e7:ca:9f:6d:43:53:
8d:8a:a4:d6:0d:73:8b:c8:38:5a:37:5f:50:4b:d9:
62:fd:4c:21:0b:72:77:8c:9f:a5:d5:55:dd:30:96:
79:be:e6:9f:63:e6:a0:58:13:e8:93:bc:c6:7b:64:
e6:06:d9:c9:0b:a1:b6:2a:bf:5d:12:38:72:9d:3d:
99:0b:82:2b:0b:87:79:98:63:f5:c2:44:34:49:1f:
de:ce:4e:70:47:1b:29:81:fa:13:a7:8b:d1:d8:7c:
38:50:08:c7:e0:26:0d:51:2a:bc:88:26:c2:84:4c:
2a:a2:07:41:8d:8f:db:9b:47:03:35:b9:56:e2:02:
8d:ef:98:5d:39:15:14:53:a9:30:dc:1e:6e:d1:34:
9d:40:5a:bc:ca:e4:9b:8e:1c:0b:c1:98:5f:57:59:
bc:32:1c:74:89:ba:1d:21:4e:4d:80:e5:98:99:16:
7d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AC:C1:41:A7:F3:69:18:C0:9F:CE:8A:15:42:B7:FE:2F:E8:59:4C
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ed:e1:99:69:c1:3d:db:e3:6c:5d:b4:54:09:ef:8a:a7:ff:
5c:84:f1:33:a6:21:a1:ab:29:d8:39:e5:a4:72:11:fe:9e:b2:
c6:ec:b5:ca:90:ac:1d:4d:40:c4:2b:f5:cc:05:67:cb:7e:e6:
3f:6d:72:5f:76:60:d9:b9:e7:e0:9b:4e:0d:f1:f1:c9:01:71:
10:e6:74:89:39:19:84:62:c5:40:49:0c:2c:a7:eb:51:25:43:
50:f3:08:53:c8:c7:05:55:ca:29:86:65:8d:57:29:0e:00:fa:
d4:c7:48:8f:36:0b:30:9d:cf:f0:b3:08:e1:3c:28:e4:a5:27:
4f:e0:98:0e:75:39:8f:25:09:f1:98:89:84:bf:d6:dc:0f:ca:
6e:70:ba:13:d1:1b:6d:3d:40:21:32:b0:52:60:b9:49:03:db:
01:a7:05:3a:e8:c9:44:d5:74:fb:b0:a1:48:bd:52:0d:51:a1:
62:8d:74:ac:7d:d6:17:e1:09:55:f5:4f:92:31:58:0d:18:a1:
0b:da:3d:2b:17:0d:b0:db:4e:d5:f1:f9:9c:f9:47:ee:d2:86:
a7:d5:b9:65:a7:a5:a7:b4:df:bd:ee:bb:8d:aa:a2:39:c1:0b:
ee:f4:a9:8f:99:c8:fe:07:b0:ba:c0:52:af:6b:3d:de:0a:1d:
5a:5f:65:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLioLFkv6FT3N7t3QqFKlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmY4NWJiOGEzNzU5NTIzZTBjYzlmOGE5MWRiZGFmNDc0
ZDZiN2MwHhcNMjUwNzI3MTEwMDI1WhcNMjUwNzI4MTEwMDI1WjAzMTEwLwYDVQQD
EyhlZWFjYzE0MWE3ZjM2OTE4YzA5ZmNlOGExNTQyYjdmZTJmZTg1OTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsjhisKHtSfSFOTHF4QCV+5iuT0/
eDWd0fDyuIQs4nlf4/ui+EVYYo2B8a0DJZ05vVAQh56WafhiSaTHkYl8ryr22ok1
EuvwJeQL1HKMWLX+RZznyp9tQ1ONiqTWDXOLyDhaN19QS9li/UwhC3J3jJ+l1VXd
MJZ5vuafY+agWBPok7zGe2TmBtnJC6G2Kr9dEjhynT2ZC4IrC4d5mGP1wkQ0SR/e
zk5wRxspgfoTp4vR2Hw4UAjH4CYNUSq8iCbChEwqogdBjY/bm0cDNblW4gKN75hd
ORUUU6kw3B5u0TSdQFq8yuSbjhwLwZhfV1m8Mhx0ibodIU5NgOWYmRZ9qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6swUGn82kYwJ/OihVCt/4v6FlMMB8GA1UdIwQY
MBaAFNz/hbuKN1lSPgzJ+Kkdva9HTWt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYt
NWJjMzAyYjRiNWZjLzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYtNWJjMzAyYjRiNWZj
LzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHe3hmWnB
PdvjbF20VAnviqf/XITxM6Yhoasp2DnlpHIR/p6yxuy1ypCsHU1AxCv1zAVny37m
P21yX3Zg2bnn4JtODfHxyQFxEOZ0iTkZhGLFQEkMLKfrUSVDUPMIU8jHBVXKKYZl
jVcpDgD61MdIjzYLMJ3P8LMI4Two5KUnT+CYDnU5jyUJ8ZiJhL/W3A/KbnC6E9Eb
bT1AITKwUmC5SQPbAacFOujJRNV0+7ChSL1SDVGhYo10rH3WF+EJVfVPkjFYDRih
C9o9KxcNsNtO1fH5nPlH7tKGp9W5Zaelp7Tfve67jaqiOcEL7vSpj5nI/gewusBS
r2s93godWl9ljA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 16:20:25 2025 by rpki-client