Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: k0rEd/Wjn3vhNM1KOQinZDvA81SYoKRfwOyy+aq8hsg=
Subject key identifier: D6:7B:B2:E8:15:6C:C3:DD:2A:32:00:F6:C6:C7:34:7A:23:EB:7C:C3
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 019924439EC59CF532E91359164DD0BD4D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 1184
Signing time: Sun 07 Sep 2025 13:00:35 +0000
Manifest this update: Sun 07 Sep 2025 13:00:35 +0000
Manifest next update: Mon 08 Sep 2025 13:00:35 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: GYrzBJBdk9Okp5A/q/5zCqzAcrWqwfqJWxARYj5zrfc=)
2: ruyaJPOfuuheWzXgHxMIwRIiRmI.roa (hash: dOziRNC4DuCftQxbewVCKgY2HoDJCSSxS8NFyfVWRc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:9e:c5:9c:f5:32:e9:13:59:16:4d:d0:bd:4d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Sep 7 13:00:35 2025 GMT
Not After : Sep 8 13:00:35 2025 GMT
Subject: CN=d67bb2e8156cc3dd2a3200f6c6c7347a23eb7cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4f:5f:e0:5a:32:6e:c6:d5:ba:69:37:e8:08:
cd:23:36:11:0d:25:91:33:cd:0e:73:51:11:95:29:
dd:73:e1:d8:32:1d:68:7e:73:ba:e9:b8:61:1d:02:
27:16:03:46:7f:ea:01:e1:ca:9f:93:86:4f:34:26:
36:9c:fa:b0:c2:5a:d0:0b:95:df:3d:f8:72:44:2c:
2d:8b:d6:3f:55:a8:10:e9:f3:27:c3:b8:d5:cd:30:
26:f0:1f:16:05:f0:3b:89:dc:51:50:b2:96:5a:ba:
cd:0b:df:db:c3:fe:38:4f:38:a2:b3:6e:b2:d0:a5:
fc:fb:2e:a2:19:60:74:10:b3:11:73:8d:06:88:54:
ec:a2:4b:06:80:6f:c3:5c:db:90:70:f9:b4:3d:cd:
0b:14:6e:fa:f0:52:69:13:70:6a:21:7c:4f:8d:4b:
60:c0:71:21:9d:92:d8:57:35:79:6d:6b:7c:1a:c2:
d2:58:5d:9c:49:89:71:18:c1:14:86:fe:e8:bf:12:
c1:5c:fc:7e:3d:ee:63:80:5f:2f:7f:c9:22:b0:c7:
6a:87:5c:a2:74:c1:73:b5:7b:0a:d4:48:ea:2d:d3:
e8:90:68:a1:ca:e6:3b:0e:8a:7d:dc:8a:8e:07:b1:
84:0d:45:f7:c9:75:f8:35:80:ca:a8:4d:2e:e4:e9:
0f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7B:B2:E8:15:6C:C3:DD:2A:32:00:F6:C6:C7:34:7A:23:EB:7C:C3
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c3:c4:31:20:30:95:c1:de:35:54:53:ec:ce:bd:0f:2f:69:
5e:25:d1:0d:ea:e6:19:2e:f2:e3:d6:4a:78:99:d7:32:73:21:
ad:20:40:c6:7d:27:a6:11:08:19:ab:90:63:a3:a3:8f:81:33:
ad:ff:de:90:72:56:63:e8:99:03:6b:b5:fc:82:3c:54:31:21:
e7:77:c7:d9:95:f1:a5:99:dc:a1:76:e8:13:40:a2:00:5b:ea:
4c:02:5d:a8:0f:2a:6b:64:da:de:46:3f:c8:69:36:56:f9:86:
5d:c6:d6:ee:0a:b6:d9:e3:05:74:12:34:18:7b:a0:c2:bd:bf:
51:c8:c1:1a:45:d1:16:95:11:44:7c:26:da:bb:f1:72:f8:15:
bc:36:83:3d:46:1b:f7:43:75:9b:9f:1c:d0:92:93:34:cf:60:
23:e7:44:09:0f:cb:5d:8b:b3:8d:6d:3c:0e:ef:62:a5:bc:40:
08:4b:22:24:74:77:97:39:c6:36:e1:f6:06:a6:e8:25:39:3b:
8e:56:1c:5d:47:99:83:30:ad:02:10:6a:78:f8:7d:ef:a1:1b:
42:a7:ba:1f:81:94:64:2d:a9:97:5b:5d:1a:99:1e:96:f7:21:
f4:db:c1:25:dd:9f:36:09:44:af:b5:ff:e8:41:b0:60:23:40:
38:64:31:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkQ57FnPUy6RNZFk3QvU10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGUxYjkwZDUxMmNjMzQwMmY3NjE0MTQwNjI5Nzk1ZTRk
NGFjNGMwHhcNMjUwOTA3MTMwMDM1WhcNMjUwOTA4MTMwMDM1WjAzMTEwLwYDVQQD
EyhkNjdiYjJlODE1NmNjM2RkMmEzMjAwZjZjNmM3MzQ3YTIzZWI3Y2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE9f4FoybsbVumk36AjNIzYRDSWR
M80Oc1ERlSndc+HYMh1ofnO66bhhHQInFgNGf+oB4cqfk4ZPNCY2nPqwwlrQC5Xf
PfhyRCwti9Y/VagQ6fMnw7jVzTAm8B8WBfA7idxRULKWWrrNC9/bw/44Tziis26y
0KX8+y6iGWB0ELMRc40GiFTsoksGgG/DXNuQcPm0Pc0LFG768FJpE3BqIXxPjUtg
wHEhnZLYVzV5bWt8GsLSWF2cSYlxGMEUhv7ovxLBXPx+Pe5jgF8vf8kisMdqh1yi
dMFztXsK1EjqLdPokGihyuY7Dop93IqOB7GEDUX3yXX4NYDKqE0u5OkP2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZ7sugVbMPdKjIA9sbHNHoj63zDMB8GA1UdIwQY
MBaAFNwOG5DVEsw0AvdhQUBil5Xk1KxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYt
MTZmNTJjZWE0ZWIxLzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYtMTZmNTJjZWE0ZWIx
LzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcPEMSAw
lcHeNVRT7M69Dy9pXiXRDermGS7y49ZKeJnXMnMhrSBAxn0nphEIGauQY6Ojj4Ez
rf/ekHJWY+iZA2u1/II8VDEh53fH2ZXxpZncoXboE0CiAFvqTAJdqA8qa2Ta3kY/
yGk2VvmGXcbW7gq22eMFdBI0GHugwr2/UcjBGkXRFpURRHwm2rvxcvgVvDaDPUYb
90N1m58c0JKTNM9gI+dECQ/LXYuzjW08Du9ipbxACEsiJHR3lznGNuH2BqboJTk7
jlYcXUeZgzCtAhBqePh976EbQqe6H4GUZC2pl1tdGpkelvch9NvBJd2fNglEr7X/
6EGwYCNAOGQxbA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:40 2025 by rpki-client