Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier: z0ydYUx9cPy+CMEwQhj26jSrTKEoVMxD5GHsKFhn63s=
Subject key identifier: 52:DD:C3:EC:99:13:8E:AA:C9:AD:C8:FD:36:3A:DF:48:87:30:4A:68
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 0198530EC49251F1A094FBAFDC22411C0304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number: 0D3C
Signing time: Mon 28 Jul 2025 22:02:13 +0000
Manifest this update: Mon 28 Jul 2025 22:02:13 +0000
Manifest next update: Tue 29 Jul 2025 22:02:13 +0000
Files and hashes: 1: 3f1U8HcG3gg1d7c-AMV0OeLqnk4.roa (hash: 6g/YiGFM7SXH1avma+AWhdPQYeSM8xFquer6wIrnMrw=)
2: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: Y6/23o8CIazmHKUXewFjeJK8kGrC5dUnr8yR9QwY8Wg=)
3: LKSIMzg2qS8EWL02SO5YPjrz_I0.roa (hash: ZtwqDuK6zfdHnP5iApdAnlCr/naZTEL8mOtuOOiHgUY=)
4: uKO3HquanWKUmJ90M8YK1DIe1PA.roa (hash: XUrZ548wn+DveWLDDAs++NbjxnozKfTkNs4dRtLEX4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:c4:92:51:f1:a0:94:fb:af:dc:22:41:1c:03:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Jul 28 22:02:13 2025 GMT
Not After : Jul 29 22:02:13 2025 GMT
Subject: CN=52ddc3ec99138eaac9adc8fd363adf4887304a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:9b:e9:89:70:90:ac:d6:81:d0:a0:17:b7:
45:c0:37:17:b9:83:98:a7:bf:93:68:22:28:25:be:
cc:a3:c5:88:15:88:08:1b:68:67:71:ec:9f:bb:ed:
bb:d2:36:db:48:12:39:f5:17:02:36:51:4c:78:48:
a1:c1:6a:a1:65:61:58:e6:3b:08:b0:71:52:2e:37:
07:5e:a9:fa:88:2d:56:3c:03:71:5f:70:6e:b3:95:
6d:30:05:a1:d9:2f:94:84:6c:a6:e9:5e:2a:44:58:
00:7f:19:d1:15:39:89:cc:5f:b9:29:4d:9f:74:af:
36:b6:79:86:98:d0:8f:0f:dc:00:bd:b3:2d:1e:e3:
e4:03:33:36:0d:f4:b7:a0:2a:af:c0:b3:b8:e2:aa:
08:77:42:8e:10:35:6e:0c:9c:a8:3f:aa:a8:dd:86:
3b:3c:ae:ef:d0:b5:aa:06:0e:80:a8:c0:dc:c2:e3:
33:68:4b:5f:f9:5c:23:89:ae:64:04:06:05:d3:eb:
68:84:4a:0e:96:e3:1d:1e:f3:6b:d2:9d:69:eb:25:
e1:b0:51:22:18:59:ae:46:f4:24:6c:b2:3c:d4:ce:
fc:9a:37:f1:7f:44:f5:ed:6f:e8:8c:6f:c3:70:47:
09:e3:66:67:ab:76:20:48:28:9b:01:96:e5:a2:bd:
2f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DD:C3:EC:99:13:8E:AA:C9:AD:C8:FD:36:3A:DF:48:87:30:4A:68
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:3f:0a:33:55:5a:4c:00:f3:8e:03:1c:1a:db:10:a8:ec:a4:
c5:de:02:f9:bc:d8:b2:ed:24:9f:e2:bd:1e:df:1d:4f:2d:55:
97:0d:10:0c:ce:1b:c6:04:32:3d:40:fd:77:eb:4e:99:49:eb:
81:95:c1:ad:02:81:e1:1e:d8:61:dd:2c:c6:7b:93:1e:cd:83:
0c:65:65:33:57:86:10:c6:5f:d4:70:ff:88:d2:23:86:1e:a4:
0a:90:50:bb:ba:43:c1:8d:1e:b5:f6:c0:44:ac:15:18:e4:97:
3d:52:20:79:68:2b:d4:d7:4d:9d:2c:6e:2b:73:ca:52:c3:58:
9b:d3:24:5a:e9:aa:4c:92:55:0d:13:59:0b:8e:5e:93:8e:e3:
73:75:3c:98:a2:e5:d1:0c:32:08:89:fd:9b:79:fe:16:7c:e1:
ab:ce:ee:19:f9:98:5a:03:5b:f3:d8:1f:76:84:74:a4:8f:03:
4b:2a:ea:f1:2a:cc:89:31:26:8f:ea:fc:fb:f6:84:61:24:65:
67:5e:01:49:cb:5c:2b:9c:c7:d5:2c:aa:3b:95:b5:05:62:0a:
dc:5f:24:10:97:13:68:03:08:0e:d4:45:a2:fa:75:a4:c9:28:
c6:a2:87:fe:fe:80:ef:ba:c6:5f:24:22:34:16:26:3c:c8:be:
62:38:b0:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDsSSUfGglPuv3CJBHAMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZDg1ODJiMDI0Mzg2M2M1NzJjZTI1Nzg2Y2NiMzZmZjc5
NWIyMmUwHhcNMjUwNzI4MjIwMjEzWhcNMjUwNzI5MjIwMjEzWjAzMTEwLwYDVQQD
Eyg1MmRkYzNlYzk5MTM4ZWFhYzlhZGM4ZmQzNjNhZGY0ODg3MzA0YTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7Gb6YlwkKzWgdCgF7dFwDcXuYOY
p7+TaCIoJb7Mo8WIFYgIG2hnceyfu+270jbbSBI59RcCNlFMeEihwWqhZWFY5jsI
sHFSLjcHXqn6iC1WPANxX3Bus5VtMAWh2S+UhGym6V4qRFgAfxnRFTmJzF+5KU2f
dK82tnmGmNCPD9wAvbMtHuPkAzM2DfS3oCqvwLO44qoId0KOEDVuDJyoP6qo3YY7
PK7v0LWqBg6AqMDcwuMzaEtf+Vwjia5kBAYF0+tohEoOluMdHvNr0p1p6yXhsFEi
GFmuRvQkbLI81M78mjfxf0T17W/ojG/DcEcJ42Znq3YgSCibAZblor0vmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLdw+yZE46qya3I/TY630iHMEpoMB8GA1UdIwQY
MBaAFN7YWCsCQ4Y8VyziV4bMs2/3lbIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3RoWUt3SkRoanhYTE9KWGhzeXpiX2VWc2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jYTUxMGMtYjZkMS00ZWIzLThkZDEt
NDk4ZjRjMTBiNjU1LzEvM3RoWUt3SkRoanhYTE9KWGhzeXpiX2VWc2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jYTUxMGMtYjZkMS00ZWIzLThkZDEtNDk4ZjRjMTBiNjU1
LzEvM3RoWUt3SkRoanhYTE9KWGhzeXpiX2VWc2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3T8KM1Va
TADzjgMcGtsQqOykxd4C+bzYsu0kn+K9Ht8dTy1Vlw0QDM4bxgQyPUD9d+tOmUnr
gZXBrQKB4R7YYd0sxnuTHs2DDGVlM1eGEMZf1HD/iNIjhh6kCpBQu7pDwY0etfbA
RKwVGOSXPVIgeWgr1NdNnSxuK3PKUsNYm9MkWumqTJJVDRNZC45ek47jc3U8mKLl
0QwyCIn9m3n+Fnzhq87uGfmYWgNb89gfdoR0pI8DSyrq8SrMiTEmj+r8+/aEYSRl
Z14BSctcK5zH1SyqO5W1BWIK3F8kEJcTaAMIDtRFovp1pMkoxqKH/v6A77rGXyQi
NBYmPMi+YjiwxQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 00:54:52 2025 by rpki-client