Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File: 3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier: ao6adsn88MHdxQGQoCd9m40aw69yNdE6ZZKkFF/1MtQ=
Subject key identifier: BC:32:0F:07:C5:01:7B:C0:BB:B0:3D:43:AC:4E:91:56:FC:88:F3:20
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial: 01984777A2E588B701F1581F9038733FE554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number: 1248
Signing time: Sat 26 Jul 2025 16:01:19 +0000
Manifest this update: Sat 26 Jul 2025 16:01:19 +0000
Manifest next update: Sun 27 Jul 2025 16:01:19 +0000
Files and hashes: 1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: LuBG/iztU0o0DiZ2wuocaSbaKCI0S7RvamUeFtRyShE=)
2: qlMHdAg_ZeG5jpZEikZxyiq5rOM.roa (hash: r9NbCVDLWns0v6U+hfflkmDI70L6VCrJW0Q5+div1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:a2:e5:88:b7:01:f1:58:1f:90:38:73:3f:e5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Validity
Not Before: Jul 26 16:01:19 2025 GMT
Not After : Jul 27 16:01:19 2025 GMT
Subject: CN=bc320f07c5017bc0bbb03d43ac4e9156fc88f320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:4a:df:47:8b:16:ff:51:31:4d:c4:46:49:
9c:c6:aa:d9:07:08:3a:ff:66:05:a4:8a:35:ff:54:
fd:95:4c:48:95:b4:81:06:37:ba:98:fc:36:49:f2:
3c:1e:6c:ec:d3:d6:70:1b:23:13:b7:11:d7:e4:16:
c8:22:6f:e8:06:a4:24:ce:16:e8:39:b8:2a:e1:2c:
a2:57:e9:d5:77:ee:15:ea:fc:78:88:e3:e3:06:23:
28:eb:90:05:9a:17:14:47:76:a5:78:fc:bc:99:c8:
74:58:1e:e8:06:5f:03:02:ed:58:78:ca:31:95:7c:
15:c3:cd:96:0d:e2:9b:7b:a4:6d:a4:78:cf:7b:01:
c2:db:fe:0b:ef:d4:65:a4:9e:cc:d2:e3:ef:1b:2d:
10:9c:83:cc:a3:0a:13:9e:da:c2:2f:4a:b7:76:4c:
95:c4:00:77:02:cc:c5:55:9c:90:e2:0d:c6:35:8c:
31:5a:99:12:98:69:3e:89:86:00:1b:20:4f:82:92:
15:bc:02:8e:1f:e9:9d:36:ca:00:dd:1e:3e:c7:9c:
0a:d6:31:e7:4a:88:63:22:1d:0e:6a:03:5f:0c:58:
cb:80:4d:8c:5f:87:f7:db:d2:ed:9c:d5:3b:9a:c8:
4f:15:d9:ed:5b:4f:d3:98:32:f4:ac:39:1b:71:03:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:32:0F:07:C5:01:7B:C0:BB:B0:3D:43:AC:4E:91:56:FC:88:F3:20
X509v3 Authority Key Identifier:
keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1f:8c:f8:85:74:15:27:2f:4c:49:ba:ab:92:46:f1:8c:b3:
cd:ea:e3:08:57:84:f6:27:7a:b9:17:9c:ae:1c:4a:85:4d:88:
f5:1e:65:f1:58:d0:24:6f:f0:6f:4b:f9:a1:24:28:3e:de:fe:
15:08:00:55:60:4f:cf:a2:70:df:23:7e:94:98:8c:c3:4e:97:
b4:f4:07:b0:5f:50:a1:2d:44:fd:4b:1f:b2:92:fe:6e:7f:43:
46:ef:81:9b:a2:e5:cd:30:65:0d:71:3a:85:ab:a9:d0:4b:d9:
8a:93:f6:a8:17:5c:04:3a:cb:7b:35:d7:4c:bf:2d:49:c8:43:
4b:ad:41:2d:0d:0f:77:75:81:3b:40:d5:b0:e1:3b:48:1a:a4:
31:06:c9:21:3c:d3:d9:93:1c:a5:48:53:5f:b0:de:7a:bb:77:
5c:44:8d:c2:55:52:da:b0:67:dc:fd:e8:0b:b9:c4:2d:09:a8:
de:b6:2e:61:d7:5c:f2:b0:b2:d3:bf:24:d2:7f:50:a6:66:48:
71:fb:0c:b3:3c:07:ea:1d:d8:d9:30:cd:6b:f0:44:51:bf:f0:
38:7a:1c:b5:91:0e:86:87:84:05:70:c6:f1:f6:b0:75:03:2b:
73:15:e3:63:67:ca:7e:ea:51:f8:68:fb:91:16:e2:04:c0:6a:
4c:5e:55:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd6LliLcB8VgfkDhzP+VUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNmM2MDM1MDQyY2M1MzI1MTZlYmMxOTY4ZjQxYmZmZjRi
ODUzN2UwHhcNMjUwNzI2MTYwMTE5WhcNMjUwNzI3MTYwMTE5WjAzMTEwLwYDVQQD
EyhiYzMyMGYwN2M1MDE3YmMwYmJiMDNkNDNhYzRlOTE1NmZjODhmMzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqhK30eLFv9RMU3ERkmcxqrZBwg6
/2YFpIo1/1T9lUxIlbSBBje6mPw2SfI8Hmzs09ZwGyMTtxHX5BbIIm/oBqQkzhbo
Obgq4SyiV+nVd+4V6vx4iOPjBiMo65AFmhcUR3alePy8mch0WB7oBl8DAu1YeMox
lXwVw82WDeKbe6RtpHjPewHC2/4L79RlpJ7M0uPvGy0QnIPMowoTntrCL0q3dkyV
xAB3AszFVZyQ4g3GNYwxWpkSmGk+iYYAGyBPgpIVvAKOH+mdNsoA3R4+x5wK1jHn
SohjIh0OagNfDFjLgE2MX4f329LtnNU7mshPFdntW0/TmDL0rDkbcQNiIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwyDwfFAXvAu7A9Q6xOkVb8iPMgMB8GA1UdIwQY
MBaAFN5sYDUELMUyUW68GWj0G//0uFN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM214Z05RUXN4VEpSYnJ3WmFQUWJfX1M0VTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jMmJiNGQtODQ4My00N2NlLWJiMGEt
ZjVmNDkwZDJjMTYzLzEvM214Z05RUXN4VEpSYnJ3WmFQUWJfX1M0VTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9jMmJiNGQtODQ4My00N2NlLWJiMGEtZjVmNDkwZDJjMTYz
LzEvM214Z05RUXN4VEpSYnJ3WmFQUWJfX1M0VTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOx+M+IV0
FScvTEm6q5JG8YyzzerjCFeE9id6uRecrhxKhU2I9R5l8VjQJG/wb0v5oSQoPt7+
FQgAVWBPz6Jw3yN+lJiMw06XtPQHsF9QoS1E/UsfspL+bn9DRu+Bm6LlzTBlDXE6
haup0EvZipP2qBdcBDrLezXXTL8tSchDS61BLQ0Pd3WBO0DVsOE7SBqkMQbJITzT
2ZMcpUhTX7Deert3XESNwlVS2rBn3P3oC7nELQmo3rYuYddc8rCy078k0n9QpmZI
cfsMszwH6h3Y2TDNa/BEUb/wOHoctZEOhoeEBXDG8fawdQMrcxXjY2fKfupR+Gj7
kRbiBMBqTF5Vfg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 02:03:14 2025 by rpki-client