Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier: 1LR64T4HL1gxW9Gw7+qJ1sELCiPMkYjWxT9H6fh5F6c=
Subject key identifier: CC:20:73:E5:88:7F:F8:0D:F3:6F:9A:1D:CB:24:E0:77:69:72:6D:29
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 0198665E67C7A575A873F7FDEF70A9CD7B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number: 0CF7
Signing time: Fri 01 Aug 2025 16:01:59 +0000
Manifest this update: Fri 01 Aug 2025 16:01:59 +0000
Manifest next update: Sat 02 Aug 2025 16:01:59 +0000
Files and hashes: 1: QrB38IR31JfmSrfp5ttgTReGTWo.roa (hash: tObzEsfYNmXi9X+/o+rGLlyYSek2LoSQ9N7PVMYEfqA=)
2: n3iPjhImnBjarzP2Rj2tOx0dNiE.roa (hash: lUEC9I8tI5NUjUJh9guJCH2H+g0KkZWinekNZT2+2Io=)
3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: uF64txKFlDghh6c1aUtKgyXgQmu//gL2+4KNK0/20mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 16:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:66:5e:67:c7:a5:75:a8:73:f7:fd:ef:70:a9:cd:7b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Aug 1 16:01:59 2025 GMT
Not After : Aug 2 16:01:59 2025 GMT
Subject: CN=cc2073e5887ff80df36f9a1dcb24e07769726d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:a9:7d:78:46:0b:7e:02:6f:d1:68:42:be:
90:80:50:c9:35:e7:d6:8e:db:9b:d8:79:09:33:57:
93:d2:7f:7d:de:a6:64:d5:dd:8b:4f:31:71:9d:2b:
02:0c:db:36:d3:49:44:17:db:24:6d:91:9f:27:54:
24:6a:0c:24:e0:b5:1a:70:7d:ff:27:4d:78:c3:8d:
2f:0a:b8:b8:cb:50:5e:99:b0:f3:e2:ef:c0:ea:8c:
56:08:2e:76:d2:c1:05:37:28:54:62:f2:f4:34:f8:
7e:e1:db:6f:63:40:88:27:95:9f:c3:b2:d8:5e:f6:
92:08:b8:78:1b:b3:e2:6f:86:76:b1:8d:d8:c6:f0:
0d:87:37:76:1b:62:d7:e9:f4:f0:96:6f:c0:f6:37:
e4:68:66:2e:6c:13:cb:2d:c7:8a:db:7f:08:f2:cd:
79:46:b4:91:4d:b4:86:46:32:9b:68:f2:4a:12:5f:
36:79:92:d0:5f:6e:1e:6b:cf:12:7a:fd:10:94:0e:
05:7a:bd:7b:1c:48:88:99:33:ff:ec:4a:ee:e1:e3:
58:c0:76:91:0b:e2:35:f9:7e:f4:90:94:85:10:6e:
ea:e0:2e:4d:aa:90:82:cb:5c:b8:de:f9:eb:68:dd:
27:28:e1:6a:fa:1a:e5:7b:c3:a4:da:cd:17:7b:6a:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:20:73:E5:88:7F:F8:0D:F3:6F:9A:1D:CB:24:E0:77:69:72:6D:29
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:62:21:c8:bc:72:b0:5f:ef:39:ce:b0:31:d6:0e:8c:2e:86:
40:eb:d5:69:80:c1:0e:65:af:00:58:b8:d6:be:eb:5d:c3:c0:
b0:44:19:ad:c5:e4:4c:72:2e:e3:71:57:d3:67:50:f0:e0:31:
a0:0f:45:97:5b:1e:b6:69:0c:34:6a:1c:1a:1b:05:7a:31:33:
a2:80:20:42:81:01:5b:96:43:bc:2d:1b:7f:4b:ef:68:4f:4b:
eb:47:2a:cb:79:8e:53:9a:ac:11:2f:f6:92:8c:25:8d:08:e5:
d8:b0:0e:a8:78:c9:b7:30:09:0a:a8:a2:98:79:69:f6:74:1d:
fb:49:62:31:cf:cf:cf:da:0c:a5:8a:dd:2b:6f:41:b5:b3:1e:
e6:08:4f:ac:ea:e2:56:60:ff:ac:6a:54:09:f7:02:ae:91:a8:
1b:bd:ea:9b:53:45:26:58:a6:d9:e2:49:fc:ce:31:5b:3c:11:
02:b4:b2:f6:83:4a:3a:18:83:05:22:d8:47:09:a7:d8:99:bd:
d4:62:c5:c0:d5:0a:18:b0:d8:23:b1:7e:45:c9:46:cf:6a:33:
4e:b0:45:91:ac:15:e5:47:9d:c0:36:c7:46:93:cb:0f:28:93:
d4:b8:40:99:65:93:9f:17:ca:11:b9:0b:8b:c8:2c:4a:d9:54:
6d:b5:de:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhmXmfHpXWoc/f973CpzXs3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYmRlYWQ0ZjFkMWM4ZGRhOTZkMWNkMTc4OWQ5ZGQzZTIz
YmYxNTMwHhcNMjUwODAxMTYwMTU5WhcNMjUwODAyMTYwMTU5WjAzMTEwLwYDVQQD
EyhjYzIwNzNlNTg4N2ZmODBkZjM2ZjlhMWRjYjI0ZTA3NzY5NzI2ZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNepfXhGC34Cb9FoQr6QgFDJNefW
jtub2HkJM1eT0n993qZk1d2LTzFxnSsCDNs200lEF9skbZGfJ1Qkagwk4LUacH3/
J014w40vCri4y1BembDz4u/A6oxWCC520sEFNyhUYvL0NPh+4dtvY0CIJ5Wfw7LY
XvaSCLh4G7Pib4Z2sY3YxvANhzd2G2LX6fTwlm/A9jfkaGYubBPLLceK238I8s15
RrSRTbSGRjKbaPJKEl82eZLQX24ea88Sev0QlA4Fer17HEiImTP/7Eru4eNYwHaR
C+I1+X70kJSFEG7q4C5NqpCCy1y43vnraN0nKOFq+hrle8Ok2s0Xe2rr0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwgc+WIf/gN82+aHcsk4Hdpcm0pMB8GA1UdIwQY
MBaAFK696tTx0cjdqW0c0XidndPiO/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjIt
ODgzN2NhNjllMzk2LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjItODgzN2NhNjllMzk2
LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwmIhyLxy
sF/vOc6wMdYOjC6GQOvVaYDBDmWvAFi41r7rXcPAsEQZrcXkTHIu43FX02dQ8OAx
oA9Fl1setmkMNGocGhsFejEzooAgQoEBW5ZDvC0bf0vvaE9L60cqy3mOU5qsES/2
kowljQjl2LAOqHjJtzAJCqiimHlp9nQd+0liMc/Pz9oMpYrdK29BtbMe5ghPrOri
VmD/rGpUCfcCrpGoG73qm1NFJlim2eJJ/M4xWzwRArSy9oNKOhiDBSLYRwmn2Jm9
1GLFwNUKGLDYI7F+RclGz2ozTrBFkawV5UedwDbHRpPLDyiT1LhAmWWTnxfKEbkL
i8gsStlUbbXe9A==
-----END CERTIFICATE-----
Generated at Fri Aug 1 23:31:30 2025 by rpki-client