Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json)
Hash identifier: +C39box/xL4j7paEzAt1IE5Rzi1JMZZPESFxI2YWWIc=
Subject key identifier: 9C:D4:84:56:24:28:91:42:78:21:51:8E:A1:45:83:F0:A0:24:C6:5B
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 01984A41A0AB6D947A2BB17CA97B45979FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
Manifest number: 0BAD
Signing time: Sun 27 Jul 2025 05:01:11 +0000
Manifest this update: Sun 27 Jul 2025 05:01:11 +0000
Manifest next update: Mon 28 Jul 2025 05:01:11 +0000
Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: 6J/xExXjPAEbGOq30WOJrkaEn5nodKXMbKVFFNP3Ybc=)
2: qHsLN52OLV40PkdsNg1LTDhrI1k.roa (hash: o2jlcmcZCFuQ0+N7Kss7ufNJs+2izJmB43Pkb+WDd2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:a0:ab:6d:94:7a:2b:b1:7c:a9:7b:45:97:9f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: Jul 27 05:01:11 2025 GMT
Not After : Jul 28 05:01:11 2025 GMT
Subject: CN=9cd48456242891427821518ea14583f0a024c65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:58:fa:41:f9:1d:b4:dd:a1:fc:ad:70:d6:d1:
de:b4:ca:15:a8:e1:8c:26:00:7e:56:15:61:cd:76:
48:06:50:8b:3e:ff:cb:6d:6c:88:69:a4:94:25:33:
36:78:80:c8:0c:ff:15:3b:d8:bf:a1:77:0d:65:4e:
f6:4b:92:b4:4b:49:40:76:ed:0d:2c:f6:65:7e:71:
93:24:80:b5:78:f8:79:62:99:11:ba:d4:e4:4d:c2:
bc:2e:fc:de:51:ee:1e:90:7b:e5:ad:d0:32:12:a2:
46:69:b2:ca:19:64:b9:44:70:d6:05:d6:de:1e:fb:
1a:c4:50:77:e1:d2:df:37:7d:ac:53:cd:28:bc:08:
61:c3:cc:7c:e2:bd:2c:0b:35:a6:57:2a:21:bd:51:
3d:9f:2c:c5:72:1c:2d:42:fb:ea:28:51:6d:6e:c8:
74:5c:cd:10:27:be:ef:da:0c:6b:fb:06:1a:b0:0a:
a9:e1:a3:9f:b9:ca:48:b8:8b:34:b2:a0:22:c2:04:
92:da:ed:45:ae:ac:1a:e6:9e:d2:00:0e:e4:50:0a:
b2:c7:03:18:8a:33:62:a0:0e:e2:31:be:68:7f:8b:
27:7c:5e:52:3d:0f:20:64:8a:b0:9a:96:71:01:16:
dc:d8:0d:74:95:c1:a5:d5:92:04:79:fa:1a:53:49:
34:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D4:84:56:24:28:91:42:78:21:51:8E:A1:45:83:F0:A0:24:C6:5B
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cc:98:50:70:25:ed:36:47:0c:a4:de:58:9c:1b:62:fd:0b:
85:18:16:98:bc:54:5b:c8:2c:be:6e:3d:ec:f7:37:b9:0f:34:
5f:bc:81:cf:16:ca:77:b6:f6:66:6b:5f:9a:05:87:27:db:cd:
8b:e7:7f:fc:9e:85:6e:e8:c5:6b:0f:33:26:22:18:80:dc:c5:
1f:60:df:fd:e2:61:bc:21:54:dd:fe:1e:16:ac:d3:2a:cd:02:
9d:e0:3a:99:c7:10:d2:0b:f0:f8:7c:17:54:e4:5f:b0:01:2b:
97:6e:d2:76:1f:c9:3d:b6:ac:82:92:92:60:f3:c3:06:cd:41:
82:30:d2:4a:00:ba:00:4c:3f:64:33:c5:f9:19:21:6b:ba:6a:
dc:c4:6f:9b:8b:05:8c:20:bd:e6:aa:e2:67:05:39:ff:0c:97:
3a:a3:cc:ea:bf:f3:f4:72:91:22:4a:4a:69:a0:24:62:b7:4d:
d8:30:a1:40:74:93:ff:de:86:df:11:e8:e7:75:08:cc:d7:e4:
9c:36:c2:a5:ec:1a:c0:ca:99:2b:7f:0e:c6:c8:12:ac:70:f1:
a5:fd:3f:77:51:2d:25:6d:fd:c0:bc:77:68:fe:e6:8c:36:5c:
e4:fc:0d:5b:1f:6a:22:0a:37:b4:f9:e6:00:a5:9d:15:79:34:
23:aa:f1:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQaCrbZR6K7F8qXtFl5/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDNhYTlhNGZlOWQ2MGM1Y2Y4NTNhOTI0ODIyMjY5ZjFj
Yzc0NTIwHhcNMjUwNzI3MDUwMTExWhcNMjUwNzI4MDUwMTExWjAzMTEwLwYDVQQD
Eyg5Y2Q0ODQ1NjI0Mjg5MTQyNzgyMTUxOGVhMTQ1ODNmMGEwMjRjNjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVj6QfkdtN2h/K1w1tHetMoVqOGM
JgB+VhVhzXZIBlCLPv/LbWyIaaSUJTM2eIDIDP8VO9i/oXcNZU72S5K0S0lAdu0N
LPZlfnGTJIC1ePh5YpkRutTkTcK8LvzeUe4ekHvlrdAyEqJGabLKGWS5RHDWBdbe
HvsaxFB34dLfN32sU80ovAhhw8x84r0sCzWmVyohvVE9nyzFchwtQvvqKFFtbsh0
XM0QJ77v2gxr+wYasAqp4aOfucpIuIs0sqAiwgSS2u1Frqwa5p7SAA7kUAqyxwMY
ijNioA7iMb5of4snfF5SPQ8gZIqwmpZxARbc2A10lcGl1ZIEefoaU0k02wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzUhFYkKJFCeCFRjqFFg/CgJMZbMB8GA1UdIwQY
MBaAFNwDqppP6dYMXPhTqSSCImnxzHRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kODRlMWUtY2M1My00Y2MyLWFhYjkt
MWNhNzY2ZmJlZWJhLzEvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kODRlMWUtY2M1My00Y2MyLWFhYjktMWNhNzY2ZmJlZWJh
LzEvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8yYUHAl
7TZHDKTeWJwbYv0LhRgWmLxUW8gsvm497Pc3uQ80X7yBzxbKd7b2ZmtfmgWHJ9vN
i+d//J6FbujFaw8zJiIYgNzFH2Df/eJhvCFU3f4eFqzTKs0CneA6mccQ0gvw+HwX
VORfsAErl27Sdh/JPbasgpKSYPPDBs1BgjDSSgC6AEw/ZDPF+Rkha7pq3MRvm4sF
jCC95qriZwU5/wyXOqPM6r/z9HKRIkpKaaAkYrdN2DChQHST/96G3xHo53UIzNfk
nDbCpewawMqZK38OxsgSrHDxpf0/d1EtJW39wLx3aP7mjDZc5PwNWx9qIgo3tPnm
AKWdFXk0I6rxag==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:09:02 2025 by rpki-client