Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: DO8Yqve8W0KjCwOfIevgY6dt6gAh03DwADte4TcdLfw=
Subject key identifier: 4F:7F:85:D1:33:79:FE:AD:62:CD:5A:D3:27:71:66:26:69:AF:93:1E
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 019847777E2BBC48B54A6F97096EA5455B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0B0D
Signing time: Sat 26 Jul 2025 16:01:10 +0000
Manifest this update: Sat 26 Jul 2025 16:01:10 +0000
Manifest next update: Sun 27 Jul 2025 16:01:10 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: QGBJBAmLmKZUVOGfvzrXT5tyGCR+t9gnjE3ld5K1WGk=)
2: 4NcSUJ4Kg8dewIwP8RGgWPLVsGw.roa (hash: NfguGRutDpTl33g3TT2hnx9Rfi2f9fnIaQJYs24UAYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:7e:2b:bc:48:b5:4a:6f:97:09:6e:a5:45:5b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Jul 26 16:01:10 2025 GMT
Not After : Jul 27 16:01:10 2025 GMT
Subject: CN=4f7f85d13379fead62cd5ad32771662669af931e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:a8:4d:a6:8f:ce:f2:b6:fb:4d:c1:5b:4b:
14:4f:b1:2d:e6:ca:60:eb:46:fe:ef:24:1d:87:16:
47:79:61:ca:79:ee:50:e7:32:3b:aa:dc:0c:79:d1:
fa:5f:bb:3a:08:d0:e8:5f:8b:c2:36:76:3b:ca:d4:
5b:a3:66:53:5b:d5:6f:ee:27:e3:c2:4b:14:c6:f1:
27:69:81:ec:50:6c:25:cc:be:fc:3b:47:eb:dc:f2:
52:22:f8:c0:4e:22:5c:7a:09:dc:d2:1a:b6:df:7d:
11:6e:60:de:69:ee:07:83:41:cc:1f:ae:3d:df:c3:
a6:e4:21:c2:fe:37:a3:2b:df:57:a9:67:28:f8:a0:
dc:e6:76:0c:f3:dd:36:6d:ea:4a:0e:4b:6f:cd:a5:
bf:ad:36:49:3d:3a:92:8e:a1:d0:d9:e4:1b:f5:93:
79:10:27:11:16:38:d3:83:75:78:06:18:31:45:3e:
c9:ab:aa:17:a0:17:14:8d:d2:55:4a:42:12:89:bb:
95:c2:93:34:80:79:d2:cb:af:c8:39:f5:25:b7:44:
f8:8b:8f:05:66:71:3e:20:0b:71:8a:ea:83:58:26:
fe:6b:d9:a7:c1:be:a9:f2:13:c6:08:7f:a9:f9:d6:
63:36:3c:cc:4c:7b:17:b0:97:4c:77:6b:d7:f0:4b:
70:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7F:85:D1:33:79:FE:AD:62:CD:5A:D3:27:71:66:26:69:AF:93:1E
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:51:a6:c9:2d:b3:f9:c6:22:48:a6:7e:c3:1f:88:81:29:35:
e5:35:7c:d1:c0:d8:a3:cf:3f:96:2a:dc:e6:cb:e8:1f:a5:08:
c3:6d:53:1b:3d:42:00:53:fa:79:1e:9a:53:a2:b8:96:66:14:
8c:4f:e3:79:31:98:93:e1:7f:51:a4:3c:e6:85:d6:d1:13:dd:
39:5b:83:31:22:04:77:97:8e:ba:80:d9:59:15:8a:5e:b3:2d:
47:e1:69:a5:21:15:8e:e1:e4:ee:67:6e:c8:36:a7:90:e7:30:
0b:03:59:ce:9c:de:36:93:52:27:e7:8a:9b:92:94:04:ed:c0:
fb:35:6b:98:76:b4:2c:a8:2e:58:05:13:2f:8e:7a:ce:de:c1:
70:be:15:aa:54:bb:9c:7e:53:57:41:86:be:bc:a0:26:df:2b:
f6:05:00:5b:c9:79:25:26:2c:77:d0:aa:b3:9a:c2:31:f8:1e:
18:47:fc:31:84:ad:00:fe:18:1f:68:27:ae:9d:33:9d:e3:ca:
97:3c:2b:2c:a7:f6:8b:a6:37:e3:63:f8:43:90:8d:cc:b9:66:
7e:69:31:04:a7:f8:49:1f:7a:bb:04:68:58:23:26:6a:24:17:
f4:c8:24:56:19:50:7d:81:8a:6d:63:09:e2:30:d2:23:ae:24:
0d:17:d3:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd34rvEi1Sm+XCW6lRVuWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDc0OGNkNDcxNGE1Y2M4N2NhZmI4NDMwZmI4MTI0OGIw
OTQwNzkwHhcNMjUwNzI2MTYwMTEwWhcNMjUwNzI3MTYwMTEwWjAzMTEwLwYDVQQD
Eyg0ZjdmODVkMTMzNzlmZWFkNjJjZDVhZDMyNzcxNjYyNjY5YWY5MzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg2oTaaPzvK2+03BW0sUT7Et5spg
60b+7yQdhxZHeWHKee5Q5zI7qtwMedH6X7s6CNDoX4vCNnY7ytRbo2ZTW9Vv7ifj
wksUxvEnaYHsUGwlzL78O0fr3PJSIvjATiJcegnc0hq2330RbmDeae4Hg0HMH649
38Om5CHC/jejK99XqWco+KDc5nYM8902bepKDktvzaW/rTZJPTqSjqHQ2eQb9ZN5
ECcRFjjTg3V4BhgxRT7Jq6oXoBcUjdJVSkISibuVwpM0gHnSy6/IOfUlt0T4i48F
ZnE+IAtxiuqDWCb+a9mnwb6p8hPGCH+p+dZjNjzMTHsXsJdMd2vX8EtwDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9/hdEzef6tYs1a0ydxZiZpr5MeMB8GA1UdIwQY
MBaAFN1HSM1HFKXMh8r7hDD7gSSLCUB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80YzU1YWYtNWU5Yi00MTk3LTg2ZmIt
Mzc1NDVkYTA1NmJkLzEvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80YzU1YWYtNWU5Yi00MTk3LTg2ZmItMzc1NDVkYTA1NmJk
LzEvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFGmyS2z
+cYiSKZ+wx+IgSk15TV80cDYo88/lirc5svoH6UIw21TGz1CAFP6eR6aU6K4lmYU
jE/jeTGYk+F/UaQ85oXW0RPdOVuDMSIEd5eOuoDZWRWKXrMtR+FppSEVjuHk7mdu
yDankOcwCwNZzpzeNpNSJ+eKm5KUBO3A+zVrmHa0LKguWAUTL456zt7BcL4VqlS7
nH5TV0GGvrygJt8r9gUAW8l5JSYsd9Cqs5rCMfgeGEf8MYStAP4YH2gnrp0znePK
lzwrLKf2i6Y342P4Q5CNzLlmfmkxBKf4SR96uwRoWCMmaiQX9MgkVhlQfYGKbWMJ
4jDSI64kDRfTgA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:18:03 2025 by rpki-client