Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
File: 3-4r9D8hqBxJLG5qn8bwdNLwohc.mft (raw, json)
Hash identifier: bjyejl3fhs1Y5Mr9+6N22zB/GOrCXmeBWKQX1Y/fKmw=
Subject key identifier: 27:95:20:36:C3:5A:89:89:B6:75:E5:52:F0:7C:DB:83:F6:15:27:6E
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 0198530DF305DB7941C0308358D622D51B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
Manifest number: 1610
Signing time: Mon 28 Jul 2025 22:01:19 +0000
Manifest this update: Mon 28 Jul 2025 22:01:19 +0000
Manifest next update: Tue 29 Jul 2025 22:01:19 +0000
Files and hashes: 1: 3-4r9D8hqBxJLG5qn8bwdNLwohc.crl (hash: d50NoBa0B/Oof75VJ4jzBvGxxLSsFVV14iWW2B/Ww3c=)
2: Low4CRi4iGKYokty-NINmJn09rg.roa (hash: Mly1uM7PqUcjuRWWihLVa+ejMa5zwEjs5HqRkIM9ZCc=)
3: TUldFuXRlNkhcxG2k3pbkLp8w6k.roa (hash: u8w+hKuVRJcapFna3Gt95nB+zwn2rJ1IH60Do+ZSEr0=)
4: VFLtaw7ddcrkuS71SLZjd28hT9Y.roa (hash: wkImuoriz8/Wt+wr39TPtXLgxrVgYHqbWY2XyO00qX4=)
5: fWDdDEZ5-7TJ7ifcAQ9Kizx3VI0.roa (hash: 9iAjE9rwQQFIjLwRuw0Wl4wwOwQae4btRIJRt6LJVxE=)
6: iYMgW4EcYcU5AKm4CceLlPmJSsA.roa (hash: 7zWW49XDo1LsXGWIP2om4UTMjsubF7Ml4DbV3OJ7N00=)
7: mWQQr9Df8Gxi-vy8YAXzFkBEGAc.roa (hash: z+245YsTzlJ8Yat/3J5h5H154DAsYclcNAuZzX8bEFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:f3:05:db:79:41:c0:30:83:58:d6:22:d5:1b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Jul 28 22:01:19 2025 GMT
Not After : Jul 29 22:01:19 2025 GMT
Subject: CN=27952036c35a8989b675e552f07cdb83f615276e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:4c:24:b1:22:94:a6:49:65:f7:ca:94:d1:
08:55:e6:7b:cb:de:cb:9f:40:da:f0:c6:ab:da:15:
85:47:e3:3e:2d:79:6a:6e:98:32:86:b7:46:bc:c6:
bb:71:df:5c:c2:c4:34:b0:72:e8:a2:a0:43:4a:5b:
34:da:2b:9d:bd:13:f0:9a:fb:d9:67:ae:46:12:f8:
57:ab:a6:02:a9:b6:e9:81:ad:7d:a1:9a:fd:73:eb:
55:e7:98:ad:ea:e1:09:b6:72:25:2f:c6:11:5a:71:
5a:a1:38:db:fd:74:75:80:b8:09:e5:77:33:21:3d:
fb:2c:44:bd:a1:40:bf:05:92:ab:4b:db:43:b4:eb:
d9:a9:f3:5b:15:f1:78:7b:e9:98:25:0a:45:91:38:
ca:87:25:ba:ac:01:dd:70:3f:ec:56:6d:9d:ef:56:
d2:8d:29:d3:d5:72:ed:df:77:64:17:1b:11:35:b8:
64:27:2c:8c:f6:f7:3a:5e:96:6e:15:98:23:7d:db:
d1:3f:ca:a5:71:f5:72:7a:b8:75:37:03:f0:e6:bf:
cd:1f:d1:ad:7e:fd:e7:07:98:2d:cd:de:27:a0:de:
62:d5:25:37:0b:c2:7f:6a:8f:24:e4:e2:6b:f1:7f:
c3:11:07:3f:30:2f:4c:e1:d7:fa:60:9d:48:93:bc:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:95:20:36:C3:5A:89:89:B6:75:E5:52:F0:7C:DB:83:F6:15:27:6E
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bd:48:40:b0:45:92:0b:f1:f2:32:31:c4:53:f8:4a:4e:03:
b9:e6:e0:48:06:7b:f4:b1:ab:02:57:30:80:4a:f1:46:10:44:
79:7b:ed:8c:27:75:4f:7c:42:d5:5e:41:b8:82:14:0a:fe:a4:
b5:18:48:fe:b1:ef:7a:4f:ef:ee:66:07:5f:0d:c4:75:85:bd:
b8:5f:86:67:ac:4c:63:df:9e:98:33:6b:fb:cc:cd:19:37:93:
5b:f0:6f:37:0b:24:4b:e5:0f:fe:d6:90:ce:db:0b:3b:af:41:
d3:07:c3:a5:05:3a:7a:26:bd:ca:6c:93:36:00:88:0b:d6:1e:
ed:e9:da:5d:dc:18:8e:c6:7f:ef:4e:25:fc:80:49:0c:45:dc:
b4:4c:f5:3f:70:bc:60:7d:53:04:d0:8d:18:3c:1b:d2:a6:9f:
a9:c5:a6:15:32:56:67:3b:86:cf:11:c1:91:09:4a:8c:32:b4:
ee:6f:83:61:22:fe:ad:95:f8:78:e0:54:82:df:4d:22:7a:77:
43:a2:c7:6f:94:f4:fa:ad:98:78:ef:66:65:ae:a8:a9:88:8a:
89:26:3d:06:5d:2d:44:f3:55:12:b1:76:05:87:95:95:69:fd:
66:44:bb:21:ae:93:cd:88:52:f8:73:c1:7b:82:40:39:c3:9c:
cf:cf:30:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDfMF23lBwDCDWNYi1RtnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZWUyYmY0M2YyMWE4MWM0OTJjNmU2YTlmYzZmMDc0ZDJm
MGEyMTcwHhcNMjUwNzI4MjIwMTE5WhcNMjUwNzI5MjIwMTE5WjAzMTEwLwYDVQQD
EygyNzk1MjAzNmMzNWE4OTg5YjY3NWU1NTJmMDdjZGI4M2Y2MTUyNzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw81MJLEilKZJZffKlNEIVeZ7y97L
n0Da8Mar2hWFR+M+LXlqbpgyhrdGvMa7cd9cwsQ0sHLooqBDSls02iudvRPwmvvZ
Z65GEvhXq6YCqbbpga19oZr9c+tV55it6uEJtnIlL8YRWnFaoTjb/XR1gLgJ5Xcz
IT37LES9oUC/BZKrS9tDtOvZqfNbFfF4e+mYJQpFkTjKhyW6rAHdcD/sVm2d71bS
jSnT1XLt33dkFxsRNbhkJyyM9vc6XpZuFZgjfdvRP8qlcfVyerh1NwPw5r/NH9Gt
fv3nB5gtzd4noN5i1SU3C8J/ao8k5OJr8X/DEQc/MC9M4df6YJ1Ik7y3AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeVIDbDWomJtnXlUvB824P2FSduMB8GA1UdIwQY
MBaAFN/uK/Q/IagcSSxuap/G8HTS8KIXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zYjNiZTAtNTRhNy00MTBmLTlkMTIt
MjhkNzhlYjlmMmRjLzEvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zYjNiZTAtNTRhNy00MTBmLTlkMTItMjhkNzhlYjlmMmRj
LzEvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABr1IQLBF
kgvx8jIxxFP4Sk4DuebgSAZ79LGrAlcwgErxRhBEeXvtjCd1T3xC1V5BuIIUCv6k
tRhI/rHvek/v7mYHXw3EdYW9uF+GZ6xMY9+emDNr+8zNGTeTW/BvNwskS+UP/taQ
ztsLO69B0wfDpQU6eia9ymyTNgCIC9Ye7enaXdwYjsZ/704l/IBJDEXctEz1P3C8
YH1TBNCNGDwb0qafqcWmFTJWZzuGzxHBkQlKjDK07m+DYSL+rZX4eOBUgt9NInp3
Q6LHb5T0+q2YeO9mZa6oqYiKiSY9Bl0tRPNVErF2BYeVlWn9ZkS7Ia6TzYhS+HPB
e4JAOcOcz88w4w==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:34:26 2025 by rpki-client