Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: ZK/VC7CqLmYqw+lRyA7hV2NyDpAo8sWg7/Vhd57ER70=
Subject key identifier: 52:B7:99:FE:FD:15:22:07:98:2E:DD:B9:A9:14:FB:8E:1E:7B:EB:B4
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019922FA98D3AE8ED0C2F1C8A67AAD9DDAED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 1111
Signing time: Sun 07 Sep 2025 07:01:12 +0000
Manifest this update: Sun 07 Sep 2025 07:01:12 +0000
Manifest next update: Mon 08 Sep 2025 07:01:12 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: 4+fS2CUp2RAzd9Jvdnn7Gy9Fwxp0EogvP6uVRnJPE4c=)
2: FmBFQOhNzhtYDdGU28d2mOWYxkg.roa (hash: AVAVJ+z2q5E9uU0vpHh6beNWBbBTBuDWNk3vwtJ8KHM=)
3: a8dfbuD_49og8AJXwHhNJcwaxsI.roa (hash: W1ipPbq868Ly393rgOf3eds1bM0F3aTAdVR1mM1YvM4=)
4: ebI6lo6FFyrxH7BnniqczSoCpEU.roa (hash: VWIQku3g+eu08iWePk/+zF+lAvowuzYaw8AhxuX9/iY=)
5: iEjwphsnsCkTvYcagBPKufnt2-g.roa (hash: exQmAtQ6POft9PaSsq76nVkrM+e0e7z6aqVk5GRVWO8=)
6: n11ZJorlH1hZHcOrMkN5woOVejs.roa (hash: qO1znHdZkcnjjGqE4Hx9Dgh/NFBxbtAoTeajvo0zDfk=)
7: rhaUzcqQYW4tC3EdQCdaNLWOPbA.roa (hash: PvCUNKVTR3gGQiqq6yWqtNwJ314FXo4VLynnYKTFbJo=)
8: uEehilTaJNTK6wTZHHdxxqFauYo.roa (hash: tRIraXpN8mX3nJ3uL7fIgHQ/edV3rhiXldnw6ddpk0I=)
9: x6Fr-1VeTypvMg38CuYZL6Aoelo.roa (hash: ajAlNUJcOgM2msZH/aiPOA3cqagu5/2Oq4Xgzqwcm3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:98:d3:ae:8e:d0:c2:f1:c8:a6:7a:ad:9d:da:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Sep 7 07:01:12 2025 GMT
Not After : Sep 8 07:01:12 2025 GMT
Subject: CN=52b799fefd152207982eddb9a914fb8e1e7bebb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:6a:ea:da:99:35:b5:1f:1b:03:96:f0:2c:
3a:28:45:4c:6d:7e:81:47:fa:45:b9:32:8a:6b:d7:
24:17:c0:94:fe:4f:2f:cb:d8:13:d2:ba:e7:79:75:
93:33:d6:19:df:04:84:14:f5:6e:25:79:74:45:2d:
3d:80:03:1c:b0:f4:ba:a8:3b:08:7b:53:87:5c:ad:
37:c4:47:41:a3:d7:ae:24:8b:29:85:30:69:f5:54:
8d:69:2e:0a:ed:f8:73:ac:28:7a:e9:b7:f5:af:62:
e4:45:6a:f0:99:dc:5d:19:4a:4f:92:42:49:52:2e:
61:22:1a:6c:5e:72:4a:a0:ee:80:21:b4:e0:2f:ee:
7e:57:11:1a:2a:31:13:79:fa:d7:76:cd:44:52:22:
e8:83:3c:4d:ac:8a:93:aa:19:2e:94:d1:2b:52:3f:
98:7a:cb:47:d0:b9:56:2a:73:80:4e:1e:fe:ef:f2:
78:42:ae:58:43:c6:da:90:d2:ec:63:1c:e2:ff:b2:
95:fe:69:a2:8f:d1:fc:ea:9c:e1:60:18:22:4a:48:
f4:7a:0c:d6:02:37:41:3e:a2:89:67:f2:d5:99:14:
7f:25:31:3d:7d:c2:af:40:3d:06:53:ac:12:a5:5c:
ac:b9:67:63:30:4c:9d:cb:b3:52:56:31:59:c1:3a:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B7:99:FE:FD:15:22:07:98:2E:DD:B9:A9:14:FB:8E:1E:7B:EB:B4
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:28:03:90:df:51:be:a2:1c:67:55:5e:09:72:5c:60:65:d1:
99:5f:ed:57:6c:11:70:af:cb:e5:09:9a:82:0f:8b:71:a5:41:
55:47:bf:1d:4d:38:19:09:73:89:48:87:40:0d:f3:70:3d:74:
b6:05:87:46:04:47:0a:93:eb:66:c4:9f:73:b6:36:f6:ee:56:
5e:e5:37:35:c4:c2:27:a6:47:a6:0c:c5:d0:ef:01:46:82:98:
2c:79:29:17:72:65:dc:d7:48:78:4c:46:59:5b:de:2f:30:23:
98:17:c9:80:37:8f:6b:6e:8e:83:f3:b2:55:c0:75:94:55:db:
4f:13:26:f5:68:c9:38:d9:a4:1a:c0:1a:74:a2:bb:8e:1d:9f:
a7:67:b4:4b:b4:56:36:da:06:e4:f9:37:e7:39:d2:e3:9b:d1:
31:b0:86:61:b1:8f:c9:82:8c:17:82:fe:ec:48:ab:4f:71:d4:
be:09:d8:43:d9:5a:af:4a:19:c4:d4:d2:f4:6c:1f:94:cf:7a:
c2:a9:55:de:93:a4:03:49:ad:6f:26:ba:be:a9:18:d8:16:2c:
8a:04:1e:f5:0c:43:0d:55:81:50:24:90:da:f8:36:38:ce:cb:
3c:2a:8b:73:65:67:dc:9a:cd:59:16:c8:2c:77:d4:75:4e:39:
87:a8:f3:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+pjTro7QwvHIpnqtndrtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3
NGNjYjcwHhcNMjUwOTA3MDcwMTEyWhcNMjUwOTA4MDcwMTEyWjAzMTEwLwYDVQQD
Eyg1MmI3OTlmZWZkMTUyMjA3OTgyZWRkYjlhOTE0ZmI4ZTFlN2JlYmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq55q6tqZNbUfGwOW8Cw6KEVMbX6B
R/pFuTKKa9ckF8CU/k8vy9gT0rrneXWTM9YZ3wSEFPVuJXl0RS09gAMcsPS6qDsI
e1OHXK03xEdBo9euJIsphTBp9VSNaS4K7fhzrCh66bf1r2LkRWrwmdxdGUpPkkJJ
Ui5hIhpsXnJKoO6AIbTgL+5+VxEaKjETefrXds1EUiLogzxNrIqTqhkulNErUj+Y
estH0LlWKnOATh7+7/J4Qq5YQ8bakNLsYxzi/7KV/mmij9H86pzhYBgiSkj0egzW
AjdBPqKJZ/LVmRR/JTE9fcKvQD0GU6wSpVysuWdjMEydy7NSVjFZwTpbWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFK3mf79FSIHmC7duakU+44ee+u0MB8GA1UdIwQY
MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt
NmJhYTNiNTQ4ZDIzLzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz
LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCgDkN9R
vqIcZ1VeCXJcYGXRmV/tV2wRcK/L5Qmagg+LcaVBVUe/HU04GQlziUiHQA3zcD10
tgWHRgRHCpPrZsSfc7Y29u5WXuU3NcTCJ6ZHpgzF0O8BRoKYLHkpF3Jl3NdIeExG
WVveLzAjmBfJgDePa26Og/OyVcB1lFXbTxMm9WjJONmkGsAadKK7jh2fp2e0S7RW
NtoG5Pk35znS45vRMbCGYbGPyYKMF4L+7EirT3HUvgnYQ9lar0oZxNTS9GwflM96
wqlV3pOkA0mtbya6vqkY2BYsigQe9QxDDVWBUCSQ2vg2OM7LPCqLc2Vn3JrNWRbI
LHfUdU45h6jzAQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:09 2025 by rpki-client