Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
File: a3bJMU-szahJARCzTnmUbdjrrTo.mft (raw, json)
Hash identifier: 9xc1WbnyRi8Xw4DqTJETX4Y4qOlN/YaXbPEf3ENs3+g=
Subject key identifier: D7:9C:9E:7C:5E:2D:E3:D1:84:7C:88:0B:13:88:6C:3B:50:EC:73:19
Authority key identifier: 6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
Certificate issuer: /CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Certificate serial: 01984965766814213916F7C9688566779532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
Manifest number: 0CE2
Signing time: Sun 27 Jul 2025 01:00:42 +0000
Manifest this update: Sun 27 Jul 2025 01:00:42 +0000
Manifest next update: Mon 28 Jul 2025 01:00:42 +0000
Files and hashes: 1: GQ4okKYObDE-j1xycURkWS4ZSu4.roa (hash: WJRKBv0neQmanj6UIle0b8oMi28WgQBdTYQH6BO3sRs=)
2: a3bJMU-szahJARCzTnmUbdjrrTo.crl (hash: ToVeNEAY1u/fCGguSfiVNjxnkJgBt75cANU62FNGESw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:76:68:14:21:39:16:f7:c9:68:85:66:77:95:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Validity
Not Before: Jul 27 01:00:42 2025 GMT
Not After : Jul 28 01:00:42 2025 GMT
Subject: CN=d79c9e7c5e2de3d1847c880b13886c3b50ec7319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d8:23:b2:d6:56:bd:40:d3:4e:cb:df:1d:c3:
01:d6:b1:e8:67:e4:ac:aa:67:3a:2b:f9:25:65:79:
fb:da:3a:f3:f5:46:c7:d8:22:c2:a5:0b:36:a5:55:
30:a5:ae:7e:2a:ea:7e:1b:9a:7d:a2:2b:b6:0c:1b:
8f:4d:ae:2a:1b:d5:2e:ca:0d:95:ec:a3:5e:b5:2f:
c5:57:cb:a3:d2:fb:ad:13:c5:d6:fd:9b:88:bc:a7:
24:0e:fa:cd:f6:a6:c9:b5:4b:33:35:0e:a1:dc:f2:
f6:29:44:26:97:fb:16:26:75:53:59:d8:8c:42:6d:
5e:0f:13:b7:45:fb:3f:f9:93:e5:06:2c:bd:94:2b:
0e:5b:0f:9f:9f:ed:c7:7c:2c:92:0f:e1:a2:65:f7:
0d:4b:76:76:4b:54:5f:d6:1e:54:6d:53:62:87:c7:
95:e1:01:2c:da:27:fa:c8:c5:2c:18:78:54:77:24:
a3:bf:3b:13:13:c5:9d:54:ea:9a:f8:37:a0:f2:d9:
91:57:d1:73:ca:2e:38:a3:2a:ac:81:5f:b9:ff:34:
ca:1a:f9:83:95:1a:da:3c:e6:56:50:f0:34:bb:06:
83:e8:f4:9f:fb:28:8d:58:e3:b7:58:8a:9d:7a:f5:
a9:33:d1:b2:19:5b:e0:ad:0f:e2:36:54:2b:af:6d:
e7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9C:9E:7C:5E:2D:E3:D1:84:7C:88:0B:13:88:6C:3B:50:EC:73:19
X509v3 Authority Key Identifier:
keyid:6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7f:47:9c:48:f8:99:6b:97:99:77:c0:21:64:f7:38:e6:bc:
7f:25:de:7d:d2:17:e5:09:cc:90:36:80:21:66:18:19:2b:0e:
06:a7:1c:c0:e3:4d:f9:c3:7d:52:34:d2:2e:43:8c:e9:55:69:
c0:77:09:12:30:63:49:bf:da:3a:b5:ba:81:ef:b7:6a:36:f2:
4d:8e:88:26:65:d1:79:d0:0e:ff:5f:e8:fc:e6:6a:26:ff:c0:
ea:b0:e0:67:9b:fa:17:e4:1c:c4:71:df:8f:1a:e0:2d:3a:ae:
7d:97:6f:80:ef:9a:4c:44:10:d0:10:b8:d0:e7:ba:48:bb:f4:
1c:50:a3:cc:66:08:4d:98:5a:47:74:87:aa:09:1b:30:da:4c:
92:ca:73:e2:e1:e2:a2:b8:e9:6a:12:d6:22:78:ec:e9:8e:0a:
73:5e:69:4e:a3:76:8e:c4:c2:3b:b2:5f:c7:4e:ad:bf:e5:83:
3f:9f:91:16:53:ba:1d:b9:1d:9c:ba:37:cd:8e:2e:ca:a9:d2:
c1:87:83:71:03:cf:ba:17:06:58:6a:ca:d5:41:a5:0e:18:eb:
5c:67:cb:bd:72:0b:ce:83:2f:1d:4a:bc:3d:db:27:6a:48:b3:
88:65:c2:40:70:55:55:aa:b1:fc:9c:ee:78:5e:17:1e:79:01:
82:df:f5:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZXZoFCE5FvfJaIVmd5UyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNzZjOTMxNGZhY2NkYTg0OTAxMTBiMzRlNzk5NDZkZDhl
YmFkM2EwHhcNMjUwNzI3MDEwMDQyWhcNMjUwNzI4MDEwMDQyWjAzMTEwLwYDVQQD
EyhkNzljOWU3YzVlMmRlM2QxODQ3Yzg4MGIxMzg4NmMzYjUwZWM3MzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtgjstZWvUDTTsvfHcMB1rHoZ+Ss
qmc6K/klZXn72jrz9UbH2CLCpQs2pVUwpa5+Kup+G5p9oiu2DBuPTa4qG9Uuyg2V
7KNetS/FV8uj0vutE8XW/ZuIvKckDvrN9qbJtUszNQ6h3PL2KUQml/sWJnVTWdiM
Qm1eDxO3Rfs/+ZPlBiy9lCsOWw+fn+3HfCySD+GiZfcNS3Z2S1Rf1h5UbVNih8eV
4QEs2if6yMUsGHhUdySjvzsTE8WdVOqa+Deg8tmRV9Fzyi44oyqsgV+5/zTKGvmD
lRraPOZWUPA0uwaD6PSf+yiNWOO3WIqdevWpM9GyGVvgrQ/iNlQrr23nyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNecnnxeLePRhHyICxOIbDtQ7HMZMB8GA1UdIwQY
MBaAFGt2yTFPrM2oSQEQs055lG3Y6606MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTNiSk1VLXN6YWhKQVJDelRubVViZGpyclRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zYWQ0NTMtNGRmZi00NDNhLWJmNjEt
ODgxYzEwYzRmNzA0LzEvYTNiSk1VLXN6YWhKQVJDelRubVViZGpyclRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8zYWQ0NTMtNGRmZi00NDNhLWJmNjEtODgxYzEwYzRmNzA0
LzEvYTNiSk1VLXN6YWhKQVJDelRubVViZGpyclRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAin9HnEj4
mWuXmXfAIWT3OOa8fyXefdIX5QnMkDaAIWYYGSsOBqccwONN+cN9UjTSLkOM6VVp
wHcJEjBjSb/aOrW6ge+3ajbyTY6IJmXRedAO/1/o/OZqJv/A6rDgZ5v6F+QcxHHf
jxrgLTqufZdvgO+aTEQQ0BC40Oe6SLv0HFCjzGYITZhaR3SHqgkbMNpMkspz4uHi
orjpahLWInjs6Y4Kc15pTqN2jsTCO7Jfx06tv+WDP5+RFlO6HbkdnLo3zY4uyqnS
wYeDcQPPuhcGWGrK1UGlDhjrXGfLvXILzoMvHUq8PdsnakiziGXCQHBVVaqx/Jzu
eF4XHnkBgt/1YA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:43 2025 by rpki-client