Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier: ZBx0JxeYAuYFgIimICajVLMcy6KO8NwuHRKU7XXeTas=
Subject key identifier: A6:CB:D7:95:84:95:B6:0E:2D:5E:5B:26:E0:A9:25:8C:EF:D8:58:5E
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 019922C39C39D0696D6EA618BA455418DB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number: 11E8
Signing time: Sun 07 Sep 2025 06:01:08 +0000
Manifest this update: Sun 07 Sep 2025 06:01:08 +0000
Manifest next update: Mon 08 Sep 2025 06:01:08 +0000
Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: jZN7B9IPtwGgvs1edZJXT0f5HHsO4VxNXviYcxV8eiA=)
2: RNkRhX3yK-TkHlh9YWWsykby_Dc.roa (hash: vp+4Wych+XwTPbr9Bjf9hawO/Jnhv86eVFw3KntPsww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:9c:39:d0:69:6d:6e:a6:18:ba:45:54:18:db:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Sep 7 06:01:08 2025 GMT
Not After : Sep 8 06:01:08 2025 GMT
Subject: CN=a6cbd7958495b60e2d5e5b26e0a9258cefd8585e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:33:0d:22:53:69:3c:1c:32:0d:3f:1c:b6:
66:69:54:74:52:e2:40:3e:92:86:eb:06:84:2d:28:
2a:60:d2:e0:43:d1:19:bf:de:f9:d8:a6:56:81:18:
d3:01:78:74:8e:7f:e7:80:13:49:ba:4d:1e:a2:c4:
8f:b4:c2:40:a2:3c:e4:b3:f5:91:8c:8c:50:f8:3c:
c7:05:10:86:1b:39:3c:52:12:ca:d4:0a:2f:7e:92:
f1:e4:98:f6:f5:2c:81:bc:22:9b:d1:fa:65:8d:fc:
57:4d:4b:60:82:bc:f7:ba:76:f8:e5:78:4a:86:a1:
d7:43:52:dd:2f:19:13:69:1c:41:69:2f:cd:ec:5a:
6a:b1:ec:6c:ec:30:3a:28:2a:8c:c9:87:7e:94:5c:
25:d3:94:8c:34:30:92:60:24:f1:60:c2:2a:9b:e2:
84:f2:55:a8:eb:00:bb:ba:aa:a8:db:51:36:88:59:
4e:29:bb:3c:96:30:7f:93:69:da:d0:f3:53:d4:1b:
e9:72:39:4f:7d:89:33:e8:69:36:12:e5:85:58:67:
fd:29:d3:ff:01:96:ab:6c:d8:3f:ec:9e:04:c3:af:
0c:88:d4:5c:43:3a:d3:54:13:8a:59:30:bf:aa:a1:
a8:fb:e5:1c:c9:fe:02:c0:ea:d7:c6:ef:13:f7:99:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CB:D7:95:84:95:B6:0E:2D:5E:5B:26:E0:A9:25:8C:EF:D8:58:5E
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f6:6b:c9:2f:a1:9f:87:87:db:a0:61:fa:e2:19:c7:bc:9a:
b5:f8:ac:34:f4:1b:4d:e8:66:f0:f6:80:cd:25:6e:cb:5d:d8:
8b:ef:5e:a9:68:21:02:35:89:d0:95:78:1f:a3:a4:41:74:6a:
ff:02:ed:52:8d:d2:ab:c8:74:f5:ac:aa:48:8c:59:11:0d:0c:
59:9b:1e:b0:00:9b:7e:b9:d3:56:b6:4f:46:93:e3:b4:7d:ac:
1b:59:66:10:90:4a:a3:98:9b:95:f7:fd:5b:9a:68:59:4b:12:
2d:d4:30:c2:16:e9:fb:66:ad:80:4c:1a:f8:4b:d9:f9:b3:0f:
10:86:8a:29:ad:38:01:fc:06:9f:22:e7:62:a4:c4:da:66:00:
c8:72:f9:d3:83:aa:d0:1e:8b:c6:af:56:9e:29:d5:f0:e4:a9:
f8:fb:8c:66:41:6b:95:a4:ec:88:bb:2f:55:1b:9a:94:76:cd:
7e:c6:2c:87:a1:44:40:11:c4:e2:c2:b5:e2:54:d9:60:20:de:
7a:6d:df:88:2a:cc:23:6a:cc:fe:55:cf:ff:33:c0:b4:90:5b:
55:98:3d:65:1a:4b:ba:79:25:3c:e5:64:a5:17:72:88:58:64:
42:41:ce:09:5b:11:62:ad:6a:b9:21:9a:85:d7:7e:51:2c:1b:
32:13:a2:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw5w50GltbqYYukVUGNtVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZGY5YTY3MWJjZjE3ODljMWI1YWMzNjMwYzc0MWJlNTYw
ZGFkYTAwHhcNMjUwOTA3MDYwMTA4WhcNMjUwOTA4MDYwMTA4WjAzMTEwLwYDVQQD
EyhhNmNiZDc5NTg0OTViNjBlMmQ1ZTViMjZlMGE5MjU4Y2VmZDg1ODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6IzDSJTaTwcMg0/HLZmaVR0UuJA
PpKG6waELSgqYNLgQ9EZv9752KZWgRjTAXh0jn/ngBNJuk0eosSPtMJAojzks/WR
jIxQ+DzHBRCGGzk8UhLK1AovfpLx5Jj29SyBvCKb0fpljfxXTUtggrz3unb45XhK
hqHXQ1LdLxkTaRxBaS/N7Fpqsexs7DA6KCqMyYd+lFwl05SMNDCSYCTxYMIqm+KE
8lWo6wC7uqqo21E2iFlOKbs8ljB/k2na0PNT1BvpcjlPfYkz6Gk2EuWFWGf9KdP/
AZarbNg/7J4Ew68MiNRcQzrTVBOKWTC/qqGo++Ucyf4CwOrXxu8T95mGXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbL15WElbYOLV5bJuCpJYzv2FheMB8GA1UdIwQY
MBaAFN7fmmcbzxeJwbWsNjDHQb5WDa2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iYjEzOTYtOWMwNS00ZTE3LWJiYzUt
Nzc2NjA1MDFjNDc4LzEvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iYjEzOTYtOWMwNS00ZTE3LWJiYzUtNzc2NjA1MDFjNDc4
LzEvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfZryS+h
n4eH26Bh+uIZx7yatfisNPQbTehm8PaAzSVuy13Yi+9eqWghAjWJ0JV4H6OkQXRq
/wLtUo3Sq8h09ayqSIxZEQ0MWZsesACbfrnTVrZPRpPjtH2sG1lmEJBKo5iblff9
W5poWUsSLdQwwhbp+2atgEwa+EvZ+bMPEIaKKa04AfwGnyLnYqTE2mYAyHL504Oq
0B6Lxq9WninV8OSp+PuMZkFrlaTsiLsvVRualHbNfsYsh6FEQBHE4sK14lTZYCDe
em3fiCrMI2rM/lXP/zPAtJBbVZg9ZRpLunklPOVkpRdyiFhkQkHOCVsRYq1quSGa
hdd+USwbMhOiHQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:45 2025 by rpki-client