Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier: tlq93i4gw8Qu9QJEJStw7QYHQd9EGyVmUZtfpdcHSbc=
Subject key identifier: 9E:10:9A:A2:76:8A:FD:83:81:32:43:9E:D2:B7:3E:E8:C8:B7:26:8F
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial: 01983DCF21A309CE149FE7F4215971A09B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number: 0595
Signing time: Thu 24 Jul 2025 19:00:41 +0000
Manifest this update: Thu 24 Jul 2025 19:00:41 +0000
Manifest next update: Fri 25 Jul 2025 19:00:41 +0000
Files and hashes: 1: 5Glc2B08f5NNNCUv9fqw3ZiV604.roa (hash: qKV0O/uQL4URhMfYX9S0ZOufXlqcIe3xRJXIrY3RJwE=)
2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: wSEIhsUb0RS2SbwLzDCP22dg/cz/zZtGT7G6lkF8VEA=)
3: wzyOntPyHe2_vob8ftvNa_NHz8Q.roa (hash: jsopFRalC2C1iJbieVLkelaTdE/c46JWYuJBBa2M4iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:cf:21:a3:09:ce:14:9f:e7:f4:21:59:71:a0:9b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Validity
Not Before: Jul 24 19:00:41 2025 GMT
Not After : Jul 25 19:00:41 2025 GMT
Subject: CN=9e109aa2768afd838132439ed2b73ee8c8b7268f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:29:e9:e4:09:ec:d5:b0:f0:35:db:b3:1f:
65:eb:e7:20:99:d4:c9:3a:93:be:c3:15:6f:03:9b:
9b:a0:bf:13:36:e3:e6:64:b1:7e:55:1c:5e:92:d5:
c1:d7:1f:53:89:4c:94:26:a9:4f:46:c8:17:e7:5e:
1e:77:05:f7:56:d2:ff:b1:c9:ac:51:bd:5c:d5:e7:
dc:f0:e7:91:12:60:d1:50:5f:c6:54:cb:83:06:41:
03:99:78:ff:08:19:5f:40:7c:dd:df:d1:a8:34:00:
8c:ed:34:91:16:79:98:f2:b2:18:0e:aa:04:a8:c3:
8e:42:47:09:4e:fa:bd:16:ae:b6:5a:62:e8:f6:cd:
90:f0:e2:78:5c:44:d2:f4:3d:11:ef:6a:71:3c:8e:
ac:7e:df:51:09:ed:0b:5a:63:20:0a:9d:a8:dd:2b:
fe:f7:c8:ae:ab:f6:c7:31:7a:48:40:b6:69:7a:b9:
1d:70:08:be:83:fe:43:38:ff:bf:51:ca:ae:0e:4f:
ae:5c:0d:b0:c2:06:fe:c7:a5:92:ae:f2:c3:a0:7b:
66:b4:ca:35:27:ec:a3:0d:11:62:41:00:5c:59:e6:
ea:ae:f2:ad:cb:45:4e:a0:f1:3f:c2:3b:2b:a8:d4:
ef:a6:d5:18:32:90:88:8b:9e:62:27:e5:5d:04:b6:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:10:9A:A2:76:8A:FD:83:81:32:43:9E:D2:B7:3E:E8:C8:B7:26:8F
X509v3 Authority Key Identifier:
keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b6:5a:61:c3:de:14:51:4b:3b:82:b7:c2:a6:9e:5f:26:93:
67:17:81:a9:d3:f3:02:aa:29:49:3e:4d:b0:d0:3b:14:a2:d8:
f4:41:0b:30:3f:08:fa:bb:0d:bd:b8:3c:55:e2:10:aa:2d:7c:
de:dc:70:e2:25:0d:ec:8f:75:3d:1e:cd:0f:79:18:bb:9d:e2:
a0:41:e1:b8:d2:c5:90:50:ef:ed:e7:9d:48:c1:7d:2f:15:52:
81:4d:1f:f1:d3:e8:4f:41:3f:e6:d8:0b:58:d2:45:69:de:2b:
69:2b:d9:6f:cf:ec:cc:a2:de:41:ee:62:7c:7b:c4:6a:3e:25:
a8:20:b5:6c:b2:83:dd:17:09:f8:6b:b4:5d:ff:23:58:1a:a4:
9d:32:e7:14:86:74:45:c7:7c:fe:66:7b:d0:c8:e5:36:79:b5:
ac:a7:59:b0:2a:eb:00:8f:49:95:7a:4b:c0:dd:43:65:de:c1:
a7:ea:be:3e:6c:0b:81:4e:55:15:4f:b6:4a:d0:1c:4b:e4:a2:
c9:c2:3a:84:91:7b:99:fd:40:5f:76:a0:a2:a4:5d:e8:53:bd:
a3:47:4b:82:e0:b9:e3:e8:87:40:55:89:82:9e:93:60:9a:2a:
c8:f1:b8:53:6e:e5:af:aa:08:ff:d7:89:c3:88:a8:8a:05:cf:
06:31:eb:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg9zyGjCc4Un+f0IVlxoJsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZWRjM2E2M2RmMTdiYjRiZjM0NTYwOTU3OTY3ZTU5YThi
M2UzYTEwHhcNMjUwNzI0MTkwMDQxWhcNMjUwNzI1MTkwMDQxWjAzMTEwLwYDVQQD
Eyg5ZTEwOWFhMjc2OGFmZDgzODEzMjQzOWVkMmI3M2VlOGM4YjcyNjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIUp6eQJ7NWw8DXbsx9l6+cgmdTJ
OpO+wxVvA5uboL8TNuPmZLF+VRxektXB1x9TiUyUJqlPRsgX514edwX3VtL/scms
Ub1c1efc8OeREmDRUF/GVMuDBkEDmXj/CBlfQHzd39GoNACM7TSRFnmY8rIYDqoE
qMOOQkcJTvq9Fq62WmLo9s2Q8OJ4XETS9D0R72pxPI6sft9RCe0LWmMgCp2o3Sv+
98iuq/bHMXpIQLZperkdcAi+g/5DOP+/UcquDk+uXA2wwgb+x6WSrvLDoHtmtMo1
J+yjDRFiQQBcWebqrvKty0VOoPE/wjsrqNTvptUYMpCIi55iJ+VdBLbPwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4QmqJ2iv2DgTJDntK3PujItyaPMB8GA1UdIwQY
MBaAFK/tw6Y98Xu0vzRWCVeWflmos+OhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci0zRHBqM3hlN1NfTkZZSlY1Wi1XYWl6NDZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84MjRkOGQtYjA0Ni00NmY2LTg2Yjgt
OWI4YWNlNDI4MWYzLzEvci0zRHBqM3hlN1NfTkZZSlY1Wi1XYWl6NDZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi84MjRkOGQtYjA0Ni00NmY2LTg2YjgtOWI4YWNlNDI4MWYz
LzEvci0zRHBqM3hlN1NfTkZZSlY1Wi1XYWl6NDZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7ZaYcPe
FFFLO4K3wqaeXyaTZxeBqdPzAqopST5NsNA7FKLY9EELMD8I+rsNvbg8VeIQqi18
3txw4iUN7I91PR7ND3kYu53ioEHhuNLFkFDv7eedSMF9LxVSgU0f8dPoT0E/5tgL
WNJFad4raSvZb8/szKLeQe5ifHvEaj4lqCC1bLKD3RcJ+Gu0Xf8jWBqknTLnFIZ0
Rcd8/mZ70MjlNnm1rKdZsCrrAI9JlXpLwN1DZd7Bp+q+PmwLgU5VFU+2StAcS+Si
ycI6hJF7mf1AX3agoqRd6FO9o0dLguC54+iHQFWJgp6TYJoqyPG4U27lr6oI/9eJ
w4ioigXPBjHrYg==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:30:46 2025 by rpki-client