Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
File: 3Prn1OadQuT0yV2Z9IK5qUTb78g.mft (raw, json)
Hash identifier: Xn+5QS8nuPNqgbta7TLjB9E2Uh46cTJzumDAfn2/YuU=
Subject key identifier: C5:ED:40:B6:26:01:D7:33:6D:F2:0E:9A:79:E8:0A:45:2A:81:5A:CA
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial: 0198432C334C2BC94B32653285D9EC88B9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
Manifest number: 12E4
Signing time: Fri 25 Jul 2025 20:00:26 +0000
Manifest this update: Fri 25 Jul 2025 20:00:26 +0000
Manifest next update: Sat 26 Jul 2025 20:00:26 +0000
Files and hashes: 1: 3Prn1OadQuT0yV2Z9IK5qUTb78g.crl (hash: Z0RFwhpQjvlNt88JCwnejm/iIwi4JMcJyaAF59AGSbQ=)
2: AFa9BeMRC9KZa5ESZVY3qezRhqo.roa (hash: kFgjZZQAO7DQ4A//2mPuGomN/dVKyDVTDikOVl1cxRM=)
3: oTU6jls5Cbp2h-8jJVa1y-YZLoo.roa (hash: UlQbXDO/2Z5fLH/VOiXf6qQdUrJ+q43vGjJDK0Fi6XA=)
4: onN6KmPVXQwrcGzs19GCsiDsKrQ.roa (hash: z68kDOoDWacxs1gAQw1w/1PdDLWcZUVC2dAlyVoGWL0=)
5: rrglEeDtNMMTRuZ3vbypZH_RQmE.roa (hash: urqCGELvaxYkBx+UEtrFXZNDg3RBmJzxwZn3ZWt36zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:2c:33:4c:2b:c9:4b:32:65:32:85:d9:ec:88:b9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Validity
Not Before: Jul 25 20:00:26 2025 GMT
Not After : Jul 26 20:00:26 2025 GMT
Subject: CN=c5ed40b62601d7336df20e9a79e80a452a815aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:68:eb:1f:e1:6e:7d:7a:fa:5c:7c:c5:12:11:
3a:cf:95:ad:11:04:db:ff:b5:42:d8:56:09:22:d7:
fb:a0:97:5c:7e:a8:89:0e:21:cd:8c:88:f3:a3:39:
40:72:24:9e:79:db:2d:c5:e7:21:6b:80:77:68:11:
a1:dd:97:5f:51:8a:99:eb:45:6a:09:12:27:cd:52:
04:76:1f:cc:2b:cd:11:ac:90:2c:89:25:4b:01:92:
18:2d:fb:ba:b4:01:48:bc:52:1c:99:4f:69:e1:6c:
ac:da:e9:b9:6b:11:c4:8f:09:39:09:85:06:fa:3e:
2b:a8:80:75:89:51:a9:2d:e0:13:c9:0e:98:a2:9f:
9b:e4:32:db:1e:8e:36:f0:d8:dc:5f:04:22:77:ad:
c7:4f:90:a3:c5:f3:40:3d:ae:c8:15:5d:03:b1:a0:
dd:90:db:86:80:6f:ad:74:c1:e8:9e:e4:e9:2e:3a:
8f:3b:4d:d3:3d:b7:00:2f:14:6b:0e:77:02:fe:be:
6c:9e:f2:a6:04:48:24:03:7e:9e:48:b5:2d:54:66:
ae:b1:31:ef:22:23:a2:6a:d1:43:de:f5:dd:6b:ef:
50:3d:67:c7:82:aa:36:d8:f6:18:b8:14:63:31:6c:
7f:ae:dc:6a:34:99:c1:23:f5:7f:38:fc:07:fd:a7:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:ED:40:B6:26:01:D7:33:6D:F2:0E:9A:79:E8:0A:45:2A:81:5A:CA
X509v3 Authority Key Identifier:
keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6f:c3:fb:af:39:9b:6b:5b:1e:58:a3:4e:e6:98:c4:48:b0:
6c:d0:e1:85:4a:42:28:09:0a:f4:5d:12:94:16:4a:5e:84:b3:
1b:e0:ca:09:b6:19:9b:4e:cd:aa:01:8b:57:60:26:2f:63:db:
f0:db:35:81:7f:72:de:99:b8:05:6e:e4:0d:c8:c6:23:4f:ff:
c8:88:b7:aa:26:9e:e1:ab:2a:cc:52:24:b6:74:45:14:33:ec:
ee:5d:87:b8:88:e1:99:07:4b:76:24:13:2e:68:18:f1:ca:61:
3d:70:e9:fd:fc:cd:75:45:56:4f:5a:fa:a4:25:d0:c3:ea:22:
9c:89:10:34:08:a4:40:e0:77:e4:04:c2:c0:34:aa:09:2c:2d:
0b:28:e9:03:f2:a7:75:24:6d:2a:2f:6b:29:a2:97:ac:6b:7d:
e7:42:7a:d3:5f:6a:db:22:62:34:89:0c:ea:5d:26:4c:d9:2a:
e1:66:c3:73:dc:a3:d5:68:10:21:5d:0e:e1:9b:21:57:4e:c3:
03:5c:86:fc:6a:de:d9:22:32:9b:60:f9:0c:58:c1:7a:13:d2:
27:ba:13:aa:05:e7:12:68:84:27:62:cc:53:7b:70:6a:4f:27:
a4:80:ac:21:6e:b9:18:da:16:a3:3e:8b:0f:d9:65:f2:1f:6e:
06:62:e4:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhDLDNMK8lLMmUyhdnsiLnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmFlN2Q0ZTY5ZDQyZTRmNGM5NWQ5OWY0ODJiOWE5NDRk
YmVmYzgwHhcNMjUwNzI1MjAwMDI2WhcNMjUwNzI2MjAwMDI2WjAzMTEwLwYDVQQD
EyhjNWVkNDBiNjI2MDFkNzMzNmRmMjBlOWE3OWU4MGE0NTJhODE1YWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmjrH+FufXr6XHzFEhE6z5WtEQTb
/7VC2FYJItf7oJdcfqiJDiHNjIjzozlAciSeedstxecha4B3aBGh3ZdfUYqZ60Vq
CRInzVIEdh/MK80RrJAsiSVLAZIYLfu6tAFIvFIcmU9p4Wys2um5axHEjwk5CYUG
+j4rqIB1iVGpLeATyQ6Yop+b5DLbHo428NjcXwQid63HT5CjxfNAPa7IFV0DsaDd
kNuGgG+tdMHonuTpLjqPO03TPbcALxRrDncC/r5snvKmBEgkA36eSLUtVGausTHv
IiOiatFD3vXda+9QPWfHgqo22PYYuBRjMWx/rtxqNJnBI/V/OPwH/adhlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXtQLYmAdczbfIOmnnoCkUqgVrKMB8GA1UdIwQY
MBaAFNz659TmnULk9MldmfSCualE2+/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYt
MzcyNzNkZjM5MDFjLzEvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYtMzcyNzNkZjM5MDFj
LzEvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPG/D+685
m2tbHlijTuaYxEiwbNDhhUpCKAkK9F0SlBZKXoSzG+DKCbYZm07NqgGLV2AmL2Pb
8Ns1gX9y3pm4BW7kDcjGI0//yIi3qiae4asqzFIktnRFFDPs7l2HuIjhmQdLdiQT
LmgY8cphPXDp/fzNdUVWT1r6pCXQw+oinIkQNAikQOB35ATCwDSqCSwtCyjpA/Kn
dSRtKi9rKaKXrGt950J6019q2yJiNIkM6l0mTNkq4WbDc9yj1WgQIV0O4ZshV07D
A1yG/Gre2SIym2D5DFjBehPSJ7oTqgXnEmiEJ2LMU3twak8npICsIW65GNoWoz6L
D9ll8h9uBmLkow==
-----END CERTIFICATE-----
Generated at Sat Jul 26 05:34:54 2025 by rpki-client