Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: SXJqRy1+jbbEQf5wqcAkjn9uNH89Z/Hvvf7uGlwA0hc=
Subject key identifier: 58:0A:12:9E:44:41:31:8C:29:19:A5:6A:C8:2D:5A:A2:46:E9:27:1C
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 019848C07E178437D36D0063020A35E8EDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 0FBC
Signing time: Sat 26 Jul 2025 22:00:31 +0000
Manifest this update: Sat 26 Jul 2025 22:00:31 +0000
Manifest next update: Sun 27 Jul 2025 22:00:31 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: Uu+uTHtkK5u8WYuc+KQ/gkotPCbqI5L0TdH1P+lXfVw=)
2: 6f05f7w22zRcUpz28tjM6XCdsYk.roa (hash: kl4KaLs8etslFAKNgVQw6su1C8PWL6O+HJhYp1T4Tak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:7e:17:84:37:d3:6d:00:63:02:0a:35:e8:ed:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Jul 26 22:00:31 2025 GMT
Not After : Jul 27 22:00:31 2025 GMT
Subject: CN=580a129e4441318c2919a56ac82d5aa246e9271c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:47:93:68:d2:a7:32:bf:ac:7e:8e:42:a1:
a1:54:cd:93:a1:63:0c:49:3a:65:80:21:7d:f2:4b:
5d:f0:4a:0c:74:78:78:42:65:3d:b2:8f:32:b3:00:
29:b2:b9:fd:f7:36:ff:28:75:94:8b:83:fe:04:51:
c7:1e:95:83:5f:d2:f4:60:f5:d5:b4:e1:33:59:2f:
93:7e:0d:2b:6d:93:fe:06:67:a9:9e:79:84:ea:cf:
7e:4f:01:ac:aa:10:e8:01:bc:45:c9:57:52:cd:f2:
94:75:94:a5:0b:a6:91:e1:36:46:56:d1:30:af:66:
fa:03:0b:e8:c8:0a:7a:9a:12:ca:92:08:d1:35:16:
0d:2b:6e:bf:9f:3b:60:e3:ae:df:ec:54:d0:76:e4:
f9:3a:9e:ae:47:09:18:32:95:6a:9a:62:b3:26:15:
a5:13:ab:7f:a9:07:13:68:45:1e:c8:f9:fa:ca:81:
ad:d4:74:ea:1d:02:e5:2f:31:f0:d8:3c:f1:d7:60:
89:e9:26:d6:96:ae:bb:b1:6a:23:b8:d3:60:cb:f9:
30:5e:99:12:4f:c9:8e:7e:03:95:f9:c3:fb:8a:ca:
18:3c:46:67:1e:f9:cc:84:29:ee:52:c2:ce:66:7c:
13:93:8a:6a:32:b1:e7:0e:7a:9e:fa:8d:e6:6b:ae:
37:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0A:12:9E:44:41:31:8C:29:19:A5:6A:C8:2D:5A:A2:46:E9:27:1C
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6b:e1:c2:d0:66:1b:ed:98:dc:c8:fb:37:95:4f:35:b3:c5:
dc:2a:98:ac:8e:e1:b6:75:8b:7a:c7:6f:3a:94:2f:b6:d5:cf:
53:a8:7e:a9:f6:37:40:55:97:23:1f:78:5c:68:51:44:01:df:
f3:88:14:b1:14:20:97:61:28:09:d8:fa:2f:66:10:52:a1:f9:
96:64:94:cb:bf:77:a1:3d:7a:bb:67:48:ab:7d:4f:eb:7a:4e:
68:0e:c7:fc:ab:7e:69:ea:0b:1a:68:da:8d:b6:6f:b0:56:52:
25:c3:d7:e0:40:96:f0:60:6f:d5:08:ca:ab:0f:ab:c9:11:21:
31:0e:e5:e6:fb:c7:78:23:cf:1b:62:1e:d4:58:44:85:de:25:
d8:c3:af:0a:51:16:25:82:cf:fe:53:9c:2d:93:f4:08:ee:7c:
c3:a1:e8:99:80:48:c4:07:79:5b:f9:6e:9d:43:4a:38:c8:07:
f8:ee:92:0c:d6:6c:04:a8:b2:f0:67:ef:ee:6e:32:e8:fd:3b:
aa:94:8e:a2:b4:33:cc:90:b7:0a:44:c8:2a:5c:56:42:3e:6c:
74:74:11:7d:6f:d9:17:6a:fa:f5:76:59:40:b4:6b:c6:31:e7:
7b:49:8a:69:12:74:04:3e:54:3c:fd:03:66:f6:47:1a:b9:f7:
e5:48:b1:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwH4XhDfTbQBjAgo16O2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjY2E1MjIxOTZmZDA5YmFlNzM5YjZiZDIzMjJlNWViOTBk
YTRmYjkwHhcNMjUwNzI2MjIwMDMxWhcNMjUwNzI3MjIwMDMxWjAzMTEwLwYDVQQD
Eyg1ODBhMTI5ZTQ0NDEzMThjMjkxOWE1NmFjODJkNWFhMjQ2ZTkyNzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5dHk2jSpzK/rH6OQqGhVM2ToWMM
STplgCF98ktd8EoMdHh4QmU9so8yswApsrn99zb/KHWUi4P+BFHHHpWDX9L0YPXV
tOEzWS+Tfg0rbZP+BmepnnmE6s9+TwGsqhDoAbxFyVdSzfKUdZSlC6aR4TZGVtEw
r2b6AwvoyAp6mhLKkgjRNRYNK26/nztg467f7FTQduT5Op6uRwkYMpVqmmKzJhWl
E6t/qQcTaEUeyPn6yoGt1HTqHQLlLzHw2Dzx12CJ6SbWlq67sWojuNNgy/kwXpkS
T8mOfgOV+cP7isoYPEZnHvnMhCnuUsLOZnwTk4pqMrHnDnqe+o3ma643kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgKEp5EQTGMKRmlasgtWqJG6SccMB8GA1UdIwQY
MBaAFNzKUiGW/Qm65zm2vSMi5euQ2k+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMt
M2IyNTBhZTE4OTM2LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMtM2IyNTBhZTE4OTM2
LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAumvhwtBm
G+2Y3Mj7N5VPNbPF3CqYrI7htnWLesdvOpQvttXPU6h+qfY3QFWXIx94XGhRRAHf
84gUsRQgl2EoCdj6L2YQUqH5lmSUy793oT16u2dIq31P63pOaA7H/Kt+aeoLGmja
jbZvsFZSJcPX4ECW8GBv1QjKqw+ryREhMQ7l5vvHeCPPG2Ie1FhEhd4l2MOvClEW
JYLP/lOcLZP0CO58w6HomYBIxAd5W/lunUNKOMgH+O6SDNZsBKiy8Gfv7m4y6P07
qpSOorQzzJC3CkTIKlxWQj5sdHQRfW/ZF2r69XZZQLRrxjHne0mKaRJ0BD5UPP0D
ZvZHGrn35UixtA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:38 2025 by rpki-client