Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: 5DXeci21Y/HVzWjsZvqC8HN6D+pMabMV/8reTlnOx4M=
Subject key identifier: F2:CD:10:A6:07:A6:46:A9:CE:A2:EB:45:AD:DC:42:C2:C5:49:E2:02
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 019927EA429BF04D5CCCB9DD9EFD482E95DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 1608
Signing time: Mon 08 Sep 2025 06:01:27 +0000
Manifest this update: Mon 08 Sep 2025 06:01:27 +0000
Manifest next update: Tue 09 Sep 2025 06:01:27 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: 9A1hhrQsZ2813i0of4bfK8uHiDJZlo/7UwQu3NQzIh0=)
2: KC65iLduV38Y-_4YeZcOkvub1x0.roa (hash: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:ea:42:9b:f0:4d:5c:cc:b9:dd:9e:fd:48:2e:95:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Sep 8 06:01:27 2025 GMT
Not After : Sep 9 06:01:27 2025 GMT
Subject: CN=f2cd10a607a646a9cea2eb45addc42c2c549e202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:10:a2:20:d7:31:a1:f9:8d:3a:94:5c:4a:8b:
ad:4e:3a:c5:31:09:20:53:56:e4:82:36:21:f5:2b:
db:8d:1e:b2:5c:0c:a0:53:52:58:cc:61:7b:58:6d:
3d:e6:37:a3:59:39:ab:b1:68:10:cb:6c:68:05:fa:
c4:12:e1:28:cc:3a:43:92:64:6c:51:78:3a:44:bf:
49:72:14:68:a9:71:e7:e3:36:d3:96:c6:73:37:67:
2d:87:a3:7a:0e:3a:d5:ab:9b:9b:a8:43:1a:75:bf:
c7:b4:3d:57:dd:cb:77:53:a6:e6:01:f8:19:15:e0:
40:20:02:40:df:41:82:d0:5c:c3:d1:c9:70:8b:63:
fd:30:c9:92:36:e3:a2:7a:d2:df:fc:05:1d:60:17:
bd:59:81:4e:e1:55:3e:48:bd:f6:57:77:ae:c4:b2:
94:8b:61:06:2b:44:17:ee:3b:03:20:40:fd:4d:ca:
de:4c:69:77:54:c8:68:95:16:ad:92:23:a6:0b:ce:
fd:42:27:ba:1d:89:a3:f3:72:d7:92:9b:91:25:a0:
3f:23:e2:37:74:07:85:5b:b4:dd:8e:75:2e:58:7f:
b5:44:18:60:24:49:f5:6c:7c:8c:fe:fb:07:8d:7f:
93:91:de:2a:32:80:91:92:1b:d0:19:a8:0f:0e:c4:
81:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CD:10:A6:07:A6:46:A9:CE:A2:EB:45:AD:DC:42:C2:C5:49:E2:02
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:83:d9:8d:7c:c9:62:24:01:27:bb:c4:7e:66:65:68:fe:53:
af:5d:f5:e7:86:22:1f:ec:0d:4d:b7:8d:43:7e:4d:61:8f:22:
98:7e:d4:ea:ad:97:e3:b6:f3:5f:d4:7a:26:a0:7e:82:7a:54:
0c:36:f3:13:b3:49:5d:a3:c1:55:03:95:96:5c:2d:f7:ce:18:
3e:48:75:70:fe:0a:37:36:db:0e:95:76:9f:5b:d5:38:b5:9b:
14:38:69:a6:ba:a6:8a:40:7a:8f:83:2a:b6:c7:63:31:57:95:
b9:84:01:2f:be:fb:60:54:9a:81:bc:f6:5f:83:d9:3d:39:d8:
35:38:ae:19:e1:f4:34:01:d3:32:48:8d:e8:3a:49:37:ce:fd:
49:ea:2f:52:7d:ec:31:8f:16:0d:be:08:56:4e:60:0c:3f:66:
ea:07:f1:25:cc:f1:f1:b1:a3:3e:34:a0:e9:7b:c8:fe:29:5c:
80:ff:a0:b4:6c:bd:59:d4:b8:e7:f0:7b:98:ad:ca:b6:ed:91:
74:cf:00:9c:ee:af:b0:5a:bb:fa:e3:fe:ea:1d:a2:2d:30:4c:
17:96:23:58:c0:e3:75:be:31:a1:10:db:5b:d7:3c:a8:8e:ad:
13:1a:b6:50:39:41:f8:aa:fb:ee:3c:b2:05:e1:a9:78:a1:f4:
d7:6e:53:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkn6kKb8E1czLndnv1ILpXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGRlYTRlYTI1NDZkN2EwMTlhNGVmODI0M2I1ZWI2MzU2
NWM4NDcwHhcNMjUwOTA4MDYwMTI3WhcNMjUwOTA5MDYwMTI3WjAzMTEwLwYDVQQD
EyhmMmNkMTBhNjA3YTY0NmE5Y2VhMmViNDVhZGRjNDJjMmM1NDllMjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xCiINcxofmNOpRcSoutTjrFMQkg
U1bkgjYh9SvbjR6yXAygU1JYzGF7WG095jejWTmrsWgQy2xoBfrEEuEozDpDkmRs
UXg6RL9JchRoqXHn4zbTlsZzN2cth6N6DjrVq5ubqEMadb/HtD1X3ct3U6bmAfgZ
FeBAIAJA30GC0FzD0clwi2P9MMmSNuOietLf/AUdYBe9WYFO4VU+SL32V3euxLKU
i2EGK0QX7jsDIED9TcreTGl3VMholRatkiOmC879Qie6HYmj83LXkpuRJaA/I+I3
dAeFW7TdjnUuWH+1RBhgJEn1bHyM/vsHjX+Tkd4qMoCRkhvQGagPDsSBuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLNEKYHpkapzqLrRa3cQsLFSeICMB8GA1UdIwQY
MBaAFNwN6k6iVG16AZpO+CQ7XrY1ZchHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMt
M2Q0YjI4M2YzMjJkLzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMtM2Q0YjI4M2YzMjJk
LzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIPZjXzJ
YiQBJ7vEfmZlaP5Tr13154YiH+wNTbeNQ35NYY8imH7U6q2X47bzX9R6JqB+gnpU
DDbzE7NJXaPBVQOVllwt984YPkh1cP4KNzbbDpV2n1vVOLWbFDhpprqmikB6j4Mq
tsdjMVeVuYQBL777YFSagbz2X4PZPTnYNTiuGeH0NAHTMkiN6DpJN879SeovUn3s
MY8WDb4IVk5gDD9m6gfxJczx8bGjPjSg6XvI/ilcgP+gtGy9WdS45/B7mK3Ktu2R
dM8AnO6vsFq7+uP+6h2iLTBMF5YjWMDjdb4xoRDbW9c8qI6tExq2UDlB+Kr77jyy
BeGpeKH0125TSA==
-----END CERTIFICATE-----
Generated at Mon Sep 8 16:06:02 2025 by rpki-client