Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: cV7x8vTreVz7fFb4gEoWwBgdRwwmKNxqgwd3AtFfuiA=
Subject key identifier: 16:78:CE:6D:9E:95:7A:64:A8:16:6B:D0:67:88:67:12:74:76:AF:02
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 01983FBE7D11500198FD31046E322A9BB682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 15FC
Signing time: Fri 25 Jul 2025 04:01:45 +0000
Manifest this update: Fri 25 Jul 2025 04:01:45 +0000
Manifest next update: Sat 26 Jul 2025 04:01:45 +0000
Files and hashes: 1: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: 0TqpcIaaPpnXDE4y2yY4paxwOfCDxRYpNrKUcKkiqfc=)
2: KW800OmJGIdT7uikc0QcQ975IG4.roa (hash: dwHKNqVSICACPiCia+yUDPbsR26gug+E9f0Pra0zV6s=)
3: cEC9bPBmfz9Z43qJKU1IUGSC0lI.roa (hash: 4mEdeYIHzDK/DCJ4cVdrdS7DkgcRn2OeioiYgUbofOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:be:7d:11:50:01:98:fd:31:04:6e:32:2a:9b:b6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Jul 25 04:01:45 2025 GMT
Not After : Jul 26 04:01:45 2025 GMT
Subject: CN=1678ce6d9e957a64a8166bd0678867127476af02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:cf:06:83:6d:1a:06:24:d2:0f:99:a4:78:
f9:61:aa:05:b0:35:11:0c:69:79:64:77:ec:e2:66:
06:30:36:67:e5:dd:2c:66:74:ab:8c:95:ff:5f:4d:
b9:e7:b7:b2:7e:2f:9b:6d:9c:e7:08:47:4d:4a:8a:
4c:1d:07:11:0d:70:3a:6a:86:a1:81:24:f2:19:c8:
d9:fb:d4:85:1f:09:5a:1a:25:4d:24:b3:3b:2e:13:
e0:d8:7c:29:6d:d7:e9:f7:ba:3d:5d:4a:7c:5f:5a:
b1:fd:00:03:4a:58:9c:93:d1:fd:25:f5:90:e5:cc:
7c:37:72:17:53:d0:81:5b:17:2c:9a:96:9f:4c:95:
e9:92:8a:5f:b5:7d:fb:b8:3a:df:40:21:35:29:ff:
3e:3a:83:49:dc:9f:ef:1c:51:d2:f0:37:4d:64:16:
90:6a:5d:22:e5:8a:95:5b:7f:e8:18:35:81:af:a6:
1c:d5:62:5f:b5:9b:5e:04:21:7f:cf:d4:b1:b5:3e:
fc:3e:7e:16:6c:39:32:6c:4d:26:a3:85:04:bf:20:
c3:f0:53:7e:75:a4:7b:fe:26:c7:88:d5:d8:9c:ad:
ae:63:df:90:6d:72:44:c6:3d:f1:c1:06:28:af:63:
9d:88:92:96:89:2e:4c:83:b4:f0:51:69:46:34:37:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:78:CE:6D:9E:95:7A:64:A8:16:6B:D0:67:88:67:12:74:76:AF:02
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c5:93:b5:64:b7:63:af:dc:e6:85:08:6a:d4:b1:96:fb:27:
6d:6f:f5:26:76:12:c2:fc:60:4f:a7:42:a2:bf:66:82:03:a4:
40:f9:db:41:08:f7:57:66:fb:41:12:b0:7f:dc:a7:88:a0:74:
38:e0:b8:f4:d1:c5:cf:58:e7:c9:cd:94:67:6c:1e:c0:3a:93:
59:e2:13:99:fb:66:c9:03:7f:72:9d:61:3c:94:9e:fa:23:3a:
99:f8:a1:c9:bc:c5:7a:56:4c:a7:14:42:65:23:c4:d1:29:c5:
0e:54:56:47:7c:52:d7:8e:5f:1a:de:c6:fb:82:30:23:b1:5f:
ea:5e:ed:c6:cf:92:c0:09:e7:82:c0:a7:04:b8:04:e9:e9:e1:
70:a9:0a:77:e7:79:a0:4b:49:ad:3b:ea:c5:de:be:94:78:98:
59:99:52:7a:47:65:53:0b:f9:83:1b:2c:47:d4:79:22:5a:eb:
0a:a2:16:04:9f:51:8f:ba:79:2f:3f:6d:ae:a2:87:7b:f1:ba:
6f:2b:5e:1c:42:0d:25:29:64:f2:cf:4b:9f:7e:dc:dd:2c:2f:
4c:2b:74:97:99:01:05:4a:9c:e9:43:78:bf:b7:23:b0:2b:b1:
f2:15:29:5c:34:cf:d6:11:67:a7:23:04:50:c8:79:c3:2e:7b:
4e:0d:c2:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg/vn0RUAGY/TEEbjIqm7aCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTliYWE4Yzg4MGE5NDU5ZGM1ZjQ0ZDY3NWRlYTRlZjk2
ZGJkZWYwHhcNMjUwNzI1MDQwMTQ1WhcNMjUwNzI2MDQwMTQ1WjAzMTEwLwYDVQQD
EygxNjc4Y2U2ZDllOTU3YTY0YTgxNjZiZDA2Nzg4NjcxMjc0NzZhZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5TPBoNtGgYk0g+ZpHj5YaoFsDUR
DGl5ZHfs4mYGMDZn5d0sZnSrjJX/X02557eyfi+bbZznCEdNSopMHQcRDXA6aoah
gSTyGcjZ+9SFHwlaGiVNJLM7LhPg2Hwpbdfp97o9XUp8X1qx/QADSlick9H9JfWQ
5cx8N3IXU9CBWxcsmpafTJXpkopftX37uDrfQCE1Kf8+OoNJ3J/vHFHS8DdNZBaQ
al0i5YqVW3/oGDWBr6Yc1WJftZteBCF/z9SxtT78Pn4WbDkybE0mo4UEvyDD8FN+
daR7/ibHiNXYnK2uY9+QbXJExj3xwQYor2OdiJKWiS5Mg7TwUWlGNDeIkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZ4zm2elXpkqBZr0GeIZxJ0dq8CMB8GA1UdIwQY
MBaAFN4ZuqjIgKlFncX0TWdd6k75bb3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjct
ODk0OWU3NTFiMjE5LzEvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjctODk0OWU3NTFiMjE5
LzEvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsWTtWS3
Y6/c5oUIatSxlvsnbW/1JnYSwvxgT6dCor9mggOkQPnbQQj3V2b7QRKwf9yniKB0
OOC49NHFz1jnyc2UZ2wewDqTWeITmftmyQN/cp1hPJSe+iM6mfihybzFelZMpxRC
ZSPE0SnFDlRWR3xS145fGt7G+4IwI7Ff6l7txs+SwAnngsCnBLgE6enhcKkKd+d5
oEtJrTvqxd6+lHiYWZlSekdlUwv5gxssR9R5IlrrCqIWBJ9Rj7p5Lz9trqKHe/G6
byteHEINJSlk8s9Ln37c3SwvTCt0l5kBBUqc6UN4v7cjsCux8hUpXDTP1hFnpyME
UMh5wy57Tg3CVA==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:56:46 2025 by rpki-client