Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
File: 3y4c6U6IoT84_n-UO3lBa8B6HfA.mft (raw, json)
Hash identifier: TnKeV6G9lE6KLc01kel08nX7yDu+aSO3Kx3WhBQ8YYI=
Subject key identifier: 82:3C:9D:84:28:CD:23:1B:FE:A3:D7:60:8E:E9:28:A3:80:C7:0E:F9
Authority key identifier: DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
Certificate issuer: /CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Certificate serial: 019849D33BEFA6691C0B8B9E836A4038EFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:36 +0000
Manifest this update: Sun 27 Jul 2025 03:00:36 +0000
Manifest next update: Mon 28 Jul 2025 03:00:36 +0000
Files and hashes: 1: 3y4c6U6IoT84_n-UO3lBa8B6HfA.crl (hash: 1hWrMVIJE6TPIO8lEMABkDf24mqrEF/3Ccvtz8GhlU8=)
2: cssion0g3PJ3Xd3t2jaSsbUDiLU.roa (hash: n63LUbsK0+15N0vAETIk0kewzsiQZdMNrmzn6fJSfQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:3b:ef:a6:69:1c:0b:8b:9e:83:6a:40:38:ef:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Validity
Not Before: Jul 27 03:00:36 2025 GMT
Not After : Jul 28 03:00:36 2025 GMT
Subject: CN=823c9d8428cd231bfea3d7608ee928a380c70ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:f8:58:94:9d:ba:5a:ea:b1:03:d4:84:ae:
92:fb:5e:fb:37:55:ad:7b:3c:76:ef:b7:f6:23:e7:
63:cc:90:07:7f:b2:b3:b0:dd:4c:64:60:df:74:da:
08:b2:75:00:50:90:8a:36:66:a4:96:95:11:e2:a7:
25:18:f9:88:b1:cb:a6:8d:1e:e3:8b:43:ae:d5:0a:
33:e3:0a:33:f3:27:ca:d6:88:60:a3:13:78:70:54:
b4:d5:14:4b:a4:6c:40:48:3d:8f:10:67:3b:26:0f:
89:ef:f7:84:1c:1b:fa:c8:75:22:01:10:40:b9:73:
f9:b7:52:23:9c:3d:1b:4e:8e:bf:34:b5:c5:dd:98:
a9:f3:01:a8:3b:2b:96:50:ee:7a:97:32:90:6a:fd:
2c:af:c3:05:5f:cb:05:b0:7b:cc:8f:b3:0c:1c:aa:
28:7a:26:32:bf:e6:43:8f:18:ca:62:c5:80:59:50:
8d:55:f4:86:3e:ac:45:3d:0d:1d:d4:d3:f2:0d:ce:
05:c3:33:7e:82:01:5e:a1:65:5f:f4:49:3c:70:93:
76:1e:2b:ea:5b:35:91:a4:9e:5d:ce:16:0a:73:78:
f2:ed:8a:86:a8:62:6d:ef:6f:88:ae:40:c5:8e:20:
27:9b:87:4c:ee:cd:43:c5:cf:de:46:f5:39:8f:74:
f3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3C:9D:84:28:CD:23:1B:FE:A3:D7:60:8E:E9:28:A3:80:C7:0E:F9
X509v3 Authority Key Identifier:
keyid:DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7b:2f:06:3f:8b:3d:6e:ab:ed:e3:4c:d4:aa:99:1a:9d:c4:
b7:c8:76:14:0c:46:d8:bd:28:2d:a5:c3:b5:38:a3:c7:e1:e8:
68:74:67:a9:2b:67:39:7d:26:95:38:d9:65:f3:73:75:b4:b6:
19:fc:0b:47:d0:16:90:b7:c3:33:9e:14:44:ac:21:e6:1f:2a:
a3:6e:7e:c3:e4:db:17:14:9a:c7:be:41:a7:58:eb:42:d3:42:
60:7a:cc:d9:83:30:55:07:22:cb:64:da:67:9c:c6:dc:f0:e8:
aa:98:b8:a3:5e:6c:e7:a2:b4:ec:bf:e0:4d:31:84:d1:39:58:
d5:34:b7:79:5b:47:f4:14:f8:ef:c6:14:46:1f:0f:62:53:3c:
6f:bb:b2:98:5b:66:3e:e8:1c:d1:be:fb:d1:7c:85:f8:35:c1:
4a:90:47:69:ab:ef:a9:16:f6:fd:23:27:58:09:16:d8:ec:31:
49:8d:3b:57:20:fe:78:1e:f2:17:00:1c:10:20:cc:9e:da:c9:
db:0c:64:6e:43:7c:9a:0f:dd:f5:99:9e:53:31:af:2c:4a:13:
b9:37:91:2e:ff:fe:a0:d3:22:9a:15:e3:f0:fd:f1:3c:46:c3:
8a:dd:80:3e:c3:25:0c:74:a8:16:5e:cd:a5:f6:43:32:21:6e:
18:97:ce:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0zvvpmkcC4ueg2pAOO/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMmUxY2U5NGU4OGExM2YzOGZlN2Y5NDNiNzk0MTZiYzA3
YTFkZjAwHhcNMjUwNzI3MDMwMDM2WhcNMjUwNzI4MDMwMDM2WjAzMTEwLwYDVQQD
Eyg4MjNjOWQ4NDI4Y2QyMzFiZmVhM2Q3NjA4ZWU5MjhhMzgwYzcwZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPL4WJSdulrqsQPUhK6S+177N1Wt
ezx277f2I+djzJAHf7KzsN1MZGDfdNoIsnUAUJCKNmaklpUR4qclGPmIscumjR7j
i0Ou1Qoz4woz8yfK1ohgoxN4cFS01RRLpGxASD2PEGc7Jg+J7/eEHBv6yHUiARBA
uXP5t1IjnD0bTo6/NLXF3Zip8wGoOyuWUO56lzKQav0sr8MFX8sFsHvMj7MMHKoo
eiYyv+ZDjxjKYsWAWVCNVfSGPqxFPQ0d1NPyDc4FwzN+ggFeoWVf9Ek8cJN2Hivq
WzWRpJ5dzhYKc3jy7YqGqGJt72+IrkDFjiAnm4dM7s1Dxc/eRvU5j3TzzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFII8nYQozSMb/qPXYI7pKKOAxw75MB8GA1UdIwQY
MBaAFN8uHOlOiKE/OP5/lDt5QWvAeh3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3k0YzZVNklvVDg0X24tVU8zbEJhOEI2SGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83OGQ4ZjQtM2UwZi00YmJlLTkyMTQt
NTM3NGM3ZTBmZmExLzEvM3k0YzZVNklvVDg0X24tVU8zbEJhOEI2SGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83OGQ4ZjQtM2UwZi00YmJlLTkyMTQtNTM3NGM3ZTBmZmEx
LzEvM3k0YzZVNklvVDg0X24tVU8zbEJhOEI2SGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXsvBj+L
PW6r7eNM1KqZGp3Et8h2FAxG2L0oLaXDtTijx+HoaHRnqStnOX0mlTjZZfNzdbS2
GfwLR9AWkLfDM54URKwh5h8qo25+w+TbFxSax75Bp1jrQtNCYHrM2YMwVQciy2Ta
Z5zG3PDoqpi4o15s56K07L/gTTGE0TlY1TS3eVtH9BT478YURh8PYlM8b7uymFtm
Pugc0b770XyF+DXBSpBHaavvqRb2/SMnWAkW2OwxSY07VyD+eB7yFwAcECDMntrJ
2wxkbkN8mg/d9ZmeUzGvLEoTuTeRLv/+oNMimhXj8P3xPEbDit2APsMlDHSoFl7N
pfZDMiFuGJfOsw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:43:32 2025 by rpki-client