Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
File: 3Mx29__HFoYLOtY56_kdxN1hMAA.mft (raw, json)
Hash identifier: 4Tzb5KPgQnhgFPsy1E4JrvaIECxxh2eX4upo3xxUsmk=
Subject key identifier: B2:69:4B:09:FD:9D:47:AF:D1:A2:EA:5D:02:EF:08:BA:5D:36:FF:6A
Authority key identifier: DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00
Certificate issuer: /CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000
Certificate serial: 01984776961F1F811B1249A3C72C8DED6302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
Manifest number: 09C3
Signing time: Sat 26 Jul 2025 16:00:10 +0000
Manifest this update: Sat 26 Jul 2025 16:00:10 +0000
Manifest next update: Sun 27 Jul 2025 16:00:10 +0000
Files and hashes: 1: 3Mx29__HFoYLOtY56_kdxN1hMAA.crl (hash: YP+62ACh/vcwKnkRYWEVNNt0/RhI2ZFN4fYfAPP1R1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:96:1f:1f:81:1b:12:49:a3:c7:2c:8d:ed:63:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccc76f7ffc716860b3ad639ebf91dc4dd613000
Validity
Not Before: Jul 26 16:00:10 2025 GMT
Not After : Jul 27 16:00:10 2025 GMT
Subject: CN=b2694b09fd9d47afd1a2ea5d02ef08ba5d36ff6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:c4:7e:e1:6e:a7:71:d1:ed:36:72:39:27:
5f:97:e2:ca:97:97:73:be:a4:a5:b5:f7:03:0e:d0:
ea:b7:39:cf:f1:47:c7:02:fb:10:1c:db:d2:44:7f:
51:62:10:88:90:64:3a:16:b4:03:27:20:06:66:9f:
f2:1c:6f:c0:5c:11:fc:10:12:fe:ec:df:63:be:fa:
6b:e9:7b:20:95:59:6a:d8:78:1e:ad:80:c1:36:1b:
92:d7:a0:f3:57:65:b2:8c:ef:cb:21:76:80:7b:90:
96:eb:23:d6:ab:23:82:43:54:86:97:47:3a:b5:c1:
e1:3e:58:3c:3f:3a:8e:68:f9:02:c5:3a:9a:e8:0c:
cd:56:63:b9:5f:5d:13:98:2c:f5:85:c6:3a:e0:8e:
a8:ef:00:2c:b2:47:85:33:8b:1b:0d:e3:0e:49:e7:
0d:ae:c8:46:a8:31:0c:a2:74:49:fe:8c:43:bd:58:
a4:6e:45:cd:62:0d:86:52:9b:34:58:7c:26:ff:4f:
b7:66:1e:d5:e5:79:a7:1a:f3:e5:87:ae:58:6c:9c:
fd:20:a6:98:bd:53:a0:5c:77:49:bf:90:ba:d0:f4:
9a:4e:38:35:59:2a:6e:80:fb:b2:1d:7d:ae:8f:61:
ac:c7:2c:d6:26:e8:25:19:8a:1c:c1:94:f5:5c:d2:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:69:4B:09:FD:9D:47:AF:D1:A2:EA:5D:02:EF:08:BA:5D:36:FF:6A
X509v3 Authority Key Identifier:
keyid:DC:CC:76:F7:FF:C7:16:86:0B:3A:D6:39:EB:F9:1D:C4:DD:61:30:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Mx29__HFoYLOtY56_kdxN1hMAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/18a67e-7cbd-4c45-889c-ae7b89174710/1/3Mx29__HFoYLOtY56_kdxN1hMAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:20:98:15:f1:42:85:3e:6f:cc:b5:43:28:eb:84:18:99:60:
84:85:97:73:26:1f:73:51:7e:af:e1:79:f4:e5:d4:ed:67:ab:
d5:30:05:60:a4:0a:46:27:93:74:40:f0:b3:79:90:1b:7f:2c:
75:a4:ee:b0:b4:61:42:75:b2:b3:1b:ca:7b:bd:53:5c:57:c0:
4b:9e:41:a3:f6:f8:a8:26:fd:d1:55:7d:71:9c:2f:a3:e8:8c:
17:e3:27:81:20:bb:f0:ee:60:9e:8d:6b:3e:72:1e:0f:e3:2d:
6e:16:77:0d:a4:1e:b1:fb:36:6c:45:f7:d8:3b:00:fb:14:84:
cb:55:36:77:53:a8:77:d0:e0:65:54:f2:a2:b0:8a:f6:c9:4f:
66:55:d7:5c:31:3a:b8:f2:3b:df:93:d0:74:3b:56:85:6b:f9:
de:96:17:4c:d8:8f:05:f7:8a:49:f3:d3:46:12:06:bf:ce:e1:
a4:c8:d4:dc:cd:02:cb:7c:5b:58:d8:10:0c:a6:c6:a1:09:9c:
3a:e4:06:39:51:d0:23:84:53:41:ed:41:7b:e8:ca:4c:bb:af:
b1:d4:de:2b:8e:38:ec:c0:4f:50:d3:99:72:41:79:70:0f:e7:
10:3c:49:ee:94:25:28:eb:72:ad:93:e8:2e:fb:97:eb:b6:95:
de:41:3d:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdpYfH4EbEkmjxyyN7WMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjY2M3NmY3ZmZjNzE2ODYwYjNhZDYzOWViZjkxZGM0ZGQ2
MTMwMDAwHhcNMjUwNzI2MTYwMDEwWhcNMjUwNzI3MTYwMDEwWjAzMTEwLwYDVQQD
EyhiMjY5NGIwOWZkOWQ0N2FmZDFhMmVhNWQwMmVmMDhiYTVkMzZmZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcDEfuFup3HR7TZyOSdfl+LKl5dz
vqSltfcDDtDqtznP8UfHAvsQHNvSRH9RYhCIkGQ6FrQDJyAGZp/yHG/AXBH8EBL+
7N9jvvpr6XsglVlq2HgerYDBNhuS16DzV2WyjO/LIXaAe5CW6yPWqyOCQ1SGl0c6
tcHhPlg8PzqOaPkCxTqa6AzNVmO5X10TmCz1hcY64I6o7wAsskeFM4sbDeMOSecN
rshGqDEMonRJ/oxDvVikbkXNYg2GUps0WHwm/0+3Zh7V5XmnGvPlh65YbJz9IKaY
vVOgXHdJv5C60PSaTjg1WSpugPuyHX2uj2GsxyzWJuglGYocwZT1XNIE/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJpSwn9nUev0aLqXQLvCLpdNv9qMB8GA1UdIwQY
MBaAFNzMdvf/xxaGCzrWOev5HcTdYTAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM014MjlfX0hGb1lMT3RZNTZfa2R4TjFoTUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xOGE2N2UtN2NiZC00YzQ1LTg4OWMt
YWU3Yjg5MTc0NzEwLzEvM014MjlfX0hGb1lMT3RZNTZfa2R4TjFoTUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xOGE2N2UtN2NiZC00YzQ1LTg4OWMtYWU3Yjg5MTc0NzEw
LzEvM014MjlfX0hGb1lMT3RZNTZfa2R4TjFoTUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayCYFfFC
hT5vzLVDKOuEGJlghIWXcyYfc1F+r+F59OXU7Wer1TAFYKQKRieTdEDws3mQG38s
daTusLRhQnWysxvKe71TXFfAS55Bo/b4qCb90VV9cZwvo+iMF+MngSC78O5gno1r
PnIeD+MtbhZ3DaQesfs2bEX32DsA+xSEy1U2d1Ood9DgZVTyorCK9slPZlXXXDE6
uPI735PQdDtWhWv53pYXTNiPBfeKSfPTRhIGv87hpMjU3M0Cy3xbWNgQDKbGoQmc
OuQGOVHQI4RTQe1Be+jKTLuvsdTeK4447MBPUNOZckF5cA/nEDxJ7pQlKOtyrZPo
LvuX67aV3kE9xQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:02:05 2025 by rpki-client