Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json)
Hash identifier: sgWnAT+rcgeIiDRiDLHVvaijKWViCVvKsUJ7LhlUvWY=
Subject key identifier: 88:E7:9B:E3:07:52:11:5B:96:D1:46:89:D1:B2:8F:DC:56:8D:EC:0C
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 01984AE5E1F354B2DAEE6FF93E1C1C5BBA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
Manifest number: 0928
Signing time: Sun 27 Jul 2025 08:00:36 +0000
Manifest this update: Sun 27 Jul 2025 08:00:36 +0000
Manifest next update: Mon 28 Jul 2025 08:00:36 +0000
Files and hashes: 1: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: szr2idxl7ThAwLwArPpyATKmNrBZFc43ve3pbNveIuI=)
2: 3jwAJkscmhb8NSw4un_w0ZUqE_E.roa (hash: /Q2oG/fmxx/4QlsXXEqOyxHV9Ye6s1RkScscquc109A=)
3: 4mOa1eiOJdcewQ4JsIW-qskCauo.roa (hash: iU5a4TzwFm2kJsvICm/D9T1ZRQoz++Cq67dw1/HeL2g=)
4: CXGUOccTDu6x1YyIQfa-qjSpPdk.roa (hash: r4qpBtId2VEmuyzWlIPXdikWdV98Yneiil1e7VOsia4=)
5: IlOsEMD7ILB9j5FhhZ10NN6XXx0.roa (hash: gwOuiCu86d+6YjbDxDzDd3u72bl4nQy8FzU+NPDlo3k=)
6: cMeqdhzIVxayTI5Te-oZwPQzjz0.roa (hash: opO/yGSPCMGlHiRXXAkyr0DveRWYRoFkmjqGZrYYDFc=)
7: dsfkSXYJLfZWJjDQMc0Y0owm7FA.roa (hash: W0p5k/KWht0yDd7EzO060gDAd+rVO0Q+Y0m/UDAfM10=)
8: z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa (hash: hGK3SDsyu3nnm6fMnZyOrn3oCumiT/HHk1hSsPcxxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:e1:f3:54:b2:da:ee:6f:f9:3e:1c:1c:5b:ba:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Jul 27 08:00:36 2025 GMT
Not After : Jul 28 08:00:36 2025 GMT
Subject: CN=88e79be30752115b96d14689d1b28fdc568dec0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:c3:be:80:f2:c3:8f:6d:b8:12:ac:fa:14:
98:55:05:02:43:89:a7:7b:ca:c4:dc:e0:87:71:e5:
c1:ee:c6:fe:14:d2:11:e8:85:a1:a9:a0:12:16:62:
53:08:d1:87:33:71:63:a3:48:a3:d3:e6:f4:e2:e9:
49:01:cf:4b:7c:c6:ef:bf:76:9d:21:4c:eb:c9:1f:
45:dc:44:9a:ec:16:29:b2:28:2e:39:71:1c:d8:23:
aa:59:72:7f:34:d5:ac:61:51:c7:01:2d:09:46:56:
2c:94:b9:29:69:40:f2:80:d3:92:92:1a:04:f8:c0:
f5:2f:ba:d6:b3:16:ba:36:19:89:ec:0c:8e:0e:64:
dd:52:1b:b5:3d:69:4d:ed:58:2d:db:39:52:8d:9e:
5c:d2:fe:11:a0:e3:de:a3:fb:83:53:5d:71:f8:46:
26:8b:27:51:17:a7:2c:40:3d:a4:e7:a7:39:36:8c:
e9:29:dc:69:b3:df:8b:de:ca:84:f2:11:d1:a7:ac:
62:8a:d0:68:0a:05:e7:04:e9:6e:a7:d3:4a:b8:b6:
b0:de:22:68:d3:b0:dd:87:70:a7:af:bf:52:d7:45:
aa:10:33:b0:00:09:dd:20:ce:e3:03:71:8a:bf:3a:
d7:c6:6a:5f:1e:85:7d:36:bf:b7:3b:bc:ad:9e:aa:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E7:9B:E3:07:52:11:5B:96:D1:46:89:D1:B2:8F:DC:56:8D:EC:0C
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a0:03:89:3c:29:2d:3d:f7:fc:0f:72:b8:fd:28:47:c4:bd:
ea:9c:da:15:e1:34:85:f3:35:6b:79:ab:2f:c6:61:90:79:d8:
62:cc:2c:f3:0d:e0:b8:87:a8:e5:39:0e:c5:bb:a5:52:0c:ab:
19:ce:11:3c:d2:5a:da:0f:7d:19:c3:0a:99:1d:d9:60:fd:7a:
b0:55:9e:51:c2:2e:58:dc:ca:23:cd:de:ec:2c:00:43:f7:04:
bb:4d:55:a6:5d:e8:f4:66:b5:f8:81:cc:8b:b0:5c:5c:c9:21:
83:60:b6:6d:a2:6e:fb:96:1f:1b:32:34:e9:64:1c:37:35:a2:
a2:24:8c:94:a0:b0:8e:c3:dd:b8:1f:c7:a6:16:f4:04:fc:17:
da:3f:4c:f4:cd:21:1b:b8:62:87:9d:e7:0c:cd:b7:75:bc:2f:
5d:00:03:c4:cd:40:91:40:80:b8:42:09:b6:00:1f:36:d4:5c:
0a:2a:33:58:94:a8:12:63:56:d9:b4:77:4d:50:45:a8:43:c2:
15:62:bf:54:6f:d2:20:c9:28:05:fc:3d:16:cc:01:77:b5:92:
1d:0c:51:0f:17:96:f9:2f:67:9f:58:6d:0b:a3:76:0a:db:50:
c3:b5:9f:cf:ba:c1:44:41:e5:6d:e4:a1:ac:f9:11:43:fd:c8:
9d:8d:30:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5eHzVLLa7m/5PhwcW7oRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMWRhZWNkMzBhZWI3NDY1MmJiZGRhNWRhZDk2NzZjZTQ4
OGFhNDkwHhcNMjUwNzI3MDgwMDM2WhcNMjUwNzI4MDgwMDM2WjAzMTEwLwYDVQQD
Eyg4OGU3OWJlMzA3NTIxMTViOTZkMTQ2ODlkMWIyOGZkYzU2OGRlYzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRfDvoDyw49tuBKs+hSYVQUCQ4mn
e8rE3OCHceXB7sb+FNIR6IWhqaASFmJTCNGHM3Fjo0ij0+b04ulJAc9LfMbvv3ad
IUzryR9F3ESa7BYpsiguOXEc2COqWXJ/NNWsYVHHAS0JRlYslLkpaUDygNOSkhoE
+MD1L7rWsxa6NhmJ7AyODmTdUhu1PWlN7Vgt2zlSjZ5c0v4RoOPeo/uDU11x+EYm
iydRF6csQD2k56c5NozpKdxps9+L3sqE8hHRp6xiitBoCgXnBOlup9NKuLaw3iJo
07Ddh3Cnr79S10WqEDOwAAndIM7jA3GKvzrXxmpfHoV9Nr+3O7ytnqqRtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjnm+MHUhFbltFGidGyj9xWjewMMB8GA1UdIwQY
MBaAFN0drs0wrrdGUrvdpdrZZ2zkiKpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct
MDYwYWMwODkwOTY2LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTctMDYwYWMwODkwOTY2
LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKaADiTwp
LT33/A9yuP0oR8S96pzaFeE0hfM1a3mrL8ZhkHnYYsws8w3guIeo5TkOxbulUgyr
Gc4RPNJa2g99GcMKmR3ZYP16sFWeUcIuWNzKI83e7CwAQ/cEu01Vpl3o9Ga1+IHM
i7BcXMkhg2C2baJu+5YfGzI06WQcNzWioiSMlKCwjsPduB/Hphb0BPwX2j9M9M0h
G7hih53nDM23dbwvXQADxM1AkUCAuEIJtgAfNtRcCiozWJSoEmNW2bR3TVBFqEPC
FWK/VG/SIMkoBfw9FswBd7WSHQxRDxeW+S9nn1htC6N2CttQw7Wfz7rBREHlbeSh
rPkRQ/3InY0wHg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:54:29 2025 by rpki-client