Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
File: 03o_Gc-XFmpEQiB-Em8qA7bL65g.mft (raw, json)
Hash identifier: 2gegfmCHshalBPHCRajf6kFjaDQ3C4C5rqGOqeK7oB8=
Subject key identifier: 8E:F7:07:02:E2:5C:D0:C6:80:68:04:B3:49:B5:E7:22:FB:A2:0A:DA
Authority key identifier: D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
Certificate issuer: /CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
Certificate serial: 0199180968FD98BF557CCFDE8F17000764E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
Manifest number: 1669
Signing time: Fri 05 Sep 2025 04:01:33 +0000
Manifest this update: Fri 05 Sep 2025 04:01:33 +0000
Manifest next update: Sat 06 Sep 2025 04:01:33 +0000
Files and hashes: 1: 03o_Gc-XFmpEQiB-Em8qA7bL65g.crl (hash: BKbjpCWkRJm+XRkgp3J3Hi/mqrKO7Nb1Znmg+FiTxXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:68:fd:98:bf:55:7c:cf:de:8f:17:00:07:64:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
Validity
Not Before: Sep 5 04:01:33 2025 GMT
Not After : Sep 6 04:01:33 2025 GMT
Subject: CN=8ef70702e25cd0c6806804b349b5e722fba20ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:19:50:27:39:77:19:be:23:43:d0:a7:b0:
9c:21:6c:45:e4:b2:df:84:62:22:01:47:17:8d:b0:
e2:7c:60:34:7c:e4:92:2a:c9:ed:1c:54:f3:12:dd:
96:85:57:57:81:08:bd:e4:c2:ab:54:d0:1b:5a:82:
41:e4:a1:38:db:57:e9:69:a1:de:3b:35:b5:ac:fa:
8b:95:74:61:60:10:25:7d:ed:69:b6:2e:44:e5:bf:
e9:73:8d:1a:58:8f:69:35:f4:f7:76:c5:10:75:38:
f8:6d:d4:e1:ae:8c:b7:b3:22:b6:00:54:b7:17:0d:
83:6e:6a:8e:81:99:9a:0d:4e:1f:1f:d1:e9:23:d2:
45:0e:9f:57:22:c3:b1:55:ab:7c:d6:0b:20:20:25:
fb:38:ee:70:ac:2c:4b:98:ed:04:ab:18:70:e6:11:
fd:ee:78:4b:90:76:b9:f5:85:98:0d:5f:af:db:31:
80:fc:87:c3:3f:37:27:2d:86:79:40:17:0b:75:ee:
8d:18:b2:cf:b3:fd:1c:d1:fa:85:ee:e0:70:8e:45:
a1:7f:cb:d1:fb:34:52:48:5c:c0:3d:17:67:58:55:
68:34:49:20:f8:de:9d:b4:01:9a:b3:75:bd:26:5b:
ba:e1:d0:5d:22:3c:a4:27:83:09:9e:d0:bf:65:b1:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F7:07:02:E2:5C:D0:C6:80:68:04:B3:49:B5:E7:22:FB:A2:0A:DA
X509v3 Authority Key Identifier:
keyid:D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fd:df:bc:37:e9:20:d4:b6:b2:ea:4e:c8:8c:67:40:ba:b2:
4a:64:42:4f:55:8f:92:c2:d3:db:20:1b:e5:6e:16:06:e7:ca:
89:eb:1e:57:56:d8:6e:40:a9:4e:4b:09:41:d4:5a:dd:3e:b0:
4c:3a:22:44:1b:7e:fe:c0:cc:c3:bb:14:92:e6:c9:97:47:16:
88:97:bf:21:a7:07:af:1c:dd:7d:46:a8:97:c9:b7:bb:de:e0:
b7:ea:e8:e0:30:43:4e:d5:38:69:c3:15:c2:ed:c0:70:80:59:
4b:8a:a2:51:0f:47:16:19:9b:dc:7f:f3:ef:a8:25:45:41:47:
6c:41:b2:1c:4a:2b:af:9d:e8:35:2b:6a:7e:c5:b3:1e:40:09:
6d:0f:59:58:95:ae:6c:c5:79:73:de:2d:df:e4:b3:62:f1:50:
cb:aa:d9:be:e3:50:28:6c:db:8f:2f:ec:c3:1a:29:f4:a3:10:
4e:be:92:ca:07:65:c5:7d:d9:50:d2:83:23:44:a6:15:e3:9f:
2f:3d:a7:1c:1d:b0:29:fd:7f:d8:2a:fd:26:44:96:2c:7b:0c:
32:95:89:fa:d9:b9:0f:e9:95:70:0a:5f:0a:9e:a5:26:6b:2a:
5a:7a:e0:09:39:a8:aa:c9:5d:46:09:9c:93:f5:6b:ba:b8:02:
b0:3e:35:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCWj9mL9VfM/ejxcAB2TjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzN2EzZjE5Y2Y5NzE2NmE0NDQyMjA3ZTEyNmYyYTAzYjZj
YmViOTgwHhcNMjUwOTA1MDQwMTMzWhcNMjUwOTA2MDQwMTMzWjAzMTEwLwYDVQQD
Eyg4ZWY3MDcwMmUyNWNkMGM2ODA2ODA0YjM0OWI1ZTcyMmZiYTIwYWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArywZUCc5dxm+I0PQp7CcIWxF5LLf
hGIiAUcXjbDifGA0fOSSKsntHFTzEt2WhVdXgQi95MKrVNAbWoJB5KE421fpaaHe
OzW1rPqLlXRhYBAlfe1pti5E5b/pc40aWI9pNfT3dsUQdTj4bdThroy3syK2AFS3
Fw2DbmqOgZmaDU4fH9HpI9JFDp9XIsOxVat81gsgICX7OO5wrCxLmO0Eqxhw5hH9
7nhLkHa59YWYDV+v2zGA/IfDPzcnLYZ5QBcLde6NGLLPs/0c0fqF7uBwjkWhf8vR
+zRSSFzAPRdnWFVoNEkg+N6dtAGas3W9Jlu64dBdIjykJ4MJntC/ZbHAgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI73BwLiXNDGgGgEs0m15yL7ograMB8GA1UdIwQY
MBaAFNN6PxnPlxZqREIgfhJvKgO2y+uYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDNvX0djLVhGbXBFUWlCLUVtOHFBN2JMNjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xMjE1MzctNGMyZi00MjQ4LWFkMzMt
MjZhNzc2NjBjYzI3LzEvMDNvX0djLVhGbXBFUWlCLUVtOHFBN2JMNjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xMjE1MzctNGMyZi00MjQ4LWFkMzMtMjZhNzc2NjBjYzI3
LzEvMDNvX0djLVhGbXBFUWlCLUVtOHFBN2JMNjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACv3fvDfp
INS2supOyIxnQLqySmRCT1WPksLT2yAb5W4WBufKieseV1bYbkCpTksJQdRa3T6w
TDoiRBt+/sDMw7sUkubJl0cWiJe/IacHrxzdfUaol8m3u97gt+ro4DBDTtU4acMV
wu3AcIBZS4qiUQ9HFhmb3H/z76glRUFHbEGyHEorr53oNStqfsWzHkAJbQ9ZWJWu
bMV5c94t3+SzYvFQy6rZvuNQKGzbjy/swxop9KMQTr6SygdlxX3ZUNKDI0SmFeOf
Lz2nHB2wKf1/2Cr9JkSWLHsMMpWJ+tm5D+mVcApfCp6lJmsqWnrgCTmoqsldRgmc
k/VrurgCsD41nw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:35:48 2025 by rpki-client