Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
File: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft (raw, json)
Hash identifier: m7uNzUA6wYzFW/Aj168xjXRTHYQRtROm3xAO4Jkx2oc=
Subject key identifier: 6B:D2:0B:62:82:CC:21:8D:83:C3:48:66:0E:D1:A3:88:D4:DA:52:EF
Authority key identifier: DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
Certificate issuer: /CN=df180e0543d471dcf0d83860d6be6395c2b88888
Certificate serial: 0198477843CF74E80A73A50A8D7E50678A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
Manifest number: 095C
Signing time: Sat 26 Jul 2025 16:02:00 +0000
Manifest this update: Sat 26 Jul 2025 16:02:00 +0000
Manifest next update: Sun 27 Jul 2025 16:02:00 +0000
Files and hashes: 1: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl (hash: D8v22jqrR2JlsVilk8uFzdcv4HUxjRwjT9x7Sn/b8sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:43:cf:74:e8:0a:73:a5:0a:8d:7e:50:67:8a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df180e0543d471dcf0d83860d6be6395c2b88888
Validity
Not Before: Jul 26 16:02:00 2025 GMT
Not After : Jul 27 16:02:00 2025 GMT
Subject: CN=6bd20b6282cc218d83c348660ed1a388d4da52ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:53:cf:ca:8d:bb:7a:31:64:aa:e2:29:34:
e9:ed:b0:e9:e3:53:78:4a:a8:44:47:93:53:0c:76:
2d:d4:81:e8:46:9c:bd:a4:43:f2:ac:df:20:46:51:
df:4d:db:80:71:23:24:e3:a8:c4:40:11:01:a4:ae:
96:37:c4:f0:2c:83:84:e2:a1:da:70:f2:ba:8a:e9:
d3:51:25:ba:72:06:e5:be:dc:03:ce:ed:47:ac:3e:
ff:86:ec:6d:43:20:4a:ca:f2:69:ea:eb:33:5d:27:
27:0f:4d:e7:51:c1:a5:d5:7a:e3:a1:08:38:64:89:
82:06:2c:94:fc:58:22:0e:66:a9:b3:01:1d:e9:6c:
86:48:47:e9:51:1d:80:e3:ca:60:e0:94:ef:67:a0:
01:a5:1f:a4:ee:35:0f:fc:99:d5:d4:f5:3d:2c:5e:
3e:4c:94:21:84:a4:9f:2f:36:eb:a0:fd:ee:83:ef:
98:d3:cc:56:3c:5d:73:ec:f2:e4:51:dc:5a:d4:8e:
17:56:f2:54:ae:f6:3d:db:ca:dd:55:57:4d:35:ae:
90:db:0f:ef:32:1e:cb:fa:a4:14:2a:8d:1d:24:32:
a5:09:32:55:cc:ec:fa:a9:b9:71:8c:46:f8:ef:ad:
d2:a8:42:a8:1c:77:78:28:bf:53:a2:8e:92:67:dc:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D2:0B:62:82:CC:21:8D:83:C3:48:66:0E:D1:A3:88:D4:DA:52:EF
X509v3 Authority Key Identifier:
keyid:DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d9:36:86:be:ab:96:a6:83:68:e5:e7:6b:64:88:f9:5d:36:
96:72:44:37:b7:82:3a:dc:d1:86:89:bb:05:43:16:a7:f5:76:
ca:85:90:b0:00:0a:e8:c1:c7:b3:3a:b5:be:06:1b:c7:36:bc:
73:44:1c:70:a1:bc:90:bf:a6:2b:4a:36:aa:42:bc:08:ed:e8:
cd:0f:40:70:7a:52:0b:b3:37:8e:1c:01:88:28:0d:e7:a8:c1:
1b:13:3c:6b:42:6a:5c:58:5a:f2:90:b4:09:bc:04:46:b1:36:
f7:96:70:17:0e:95:c9:79:19:58:08:b6:8d:d8:84:32:05:08:
dd:18:22:a7:a4:3f:72:55:5a:c2:5f:c4:ed:fd:e4:de:2a:b3:
fb:a3:dd:13:aa:02:2e:21:b6:2f:00:81:7e:a6:d6:f8:04:c1:
ac:26:a7:f7:00:70:df:77:e2:9b:33:b2:be:73:8f:99:5e:37:
97:13:8d:cd:a8:62:28:f6:f4:2a:29:f3:d3:a5:22:0a:7d:b7:
87:ed:57:71:74:21:09:7e:df:53:6e:45:ee:69:eb:ca:15:a3:
d5:09:69:15:15:a5:98:0b:24:fa:b4:64:aa:43:62:57:d2:b9:
a1:c0:23:5f:2f:b8:f2:10:c7:f6:74:da:ae:0f:42:26:ce:a6:
bd:e1:c3:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHeEPPdOgKc6UKjX5QZ4p4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTgwZTA1NDNkNDcxZGNmMGQ4Mzg2MGQ2YmU2Mzk1YzJi
ODg4ODgwHhcNMjUwNzI2MTYwMjAwWhcNMjUwNzI3MTYwMjAwWjAzMTEwLwYDVQQD
Eyg2YmQyMGI2MjgyY2MyMThkODNjMzQ4NjYwZWQxYTM4OGQ0ZGE1MmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1clTz8qNu3oxZKriKTTp7bDp41N4
SqhER5NTDHYt1IHoRpy9pEPyrN8gRlHfTduAcSMk46jEQBEBpK6WN8TwLIOE4qHa
cPK6iunTUSW6cgblvtwDzu1HrD7/huxtQyBKyvJp6uszXScnD03nUcGl1XrjoQg4
ZImCBiyU/FgiDmapswEd6WyGSEfpUR2A48pg4JTvZ6ABpR+k7jUP/JnV1PU9LF4+
TJQhhKSfLzbroP3ug++Y08xWPF1z7PLkUdxa1I4XVvJUrvY928rdVVdNNa6Q2w/v
Mh7L+qQUKo0dJDKlCTJVzOz6qblxjEb4763SqEKoHHd4KL9Too6SZ9wYxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvSC2KCzCGNg8NIZg7Ro4jU2lLvMB8GA1UdIwQY
MBaAFN8YDgVD1HHc8Ng4YNa+Y5XCuIiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hnT0JVUFVjZHp3MkRoZzFyNWpsY0s0aUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zMGY0MTAtODJiYi00MTFhLWIyYmMt
YzRiMTQ0NmMwZDhiLzEvM3hnT0JVUFVjZHp3MkRoZzFyNWpsY0s0aUlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8zMGY0MTAtODJiYi00MTFhLWIyYmMtYzRiMTQ0NmMwZDhi
LzEvM3hnT0JVUFVjZHp3MkRoZzFyNWpsY0s0aUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdk2hr6r
lqaDaOXna2SI+V02lnJEN7eCOtzRhom7BUMWp/V2yoWQsAAK6MHHszq1vgYbxza8
c0QccKG8kL+mK0o2qkK8CO3ozQ9AcHpSC7M3jhwBiCgN56jBGxM8a0JqXFha8pC0
CbwERrE295ZwFw6VyXkZWAi2jdiEMgUI3Rgip6Q/clVawl/E7f3k3iqz+6PdE6oC
LiG2LwCBfqbW+ATBrCan9wBw33fimzOyvnOPmV43lxONzahiKPb0Kinz06UiCn23
h+1XcXQhCX7fU25F7mnryhWj1QlpFRWlmAsk+rRkqkNiV9K5ocAjXy+48hDH9nTa
rg9CJs6mveHD0A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:09:02 2025 by rpki-client