Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier: 374FeeNYLa+JT53xIUBzo0BmfWpz+FBtKBgG9GH/3NI=
Subject key identifier: 38:F7:78:76:22:83:F6:53:D9:0A:4D:A4:49:BB:AF:60:8A:D2:EA:B6
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 019921E76BA48B2419FBD5C3C00B45466A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number: 164D
Signing time: Sun 07 Sep 2025 02:00:38 +0000
Manifest this update: Sun 07 Sep 2025 02:00:38 +0000
Manifest next update: Mon 08 Sep 2025 02:00:38 +0000
Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: odyLTvHaTZOZTzY9TVWAXIzZcSphElkYKsTZnO1/VZU=)
2: EsL5vRvD6Hsz2Ac1BO5dG0iZtiE.roa (hash: 6YJicTgp9qVMpWAlIAbPHHma7brtZhgeBhN6tMg/gfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:6b:a4:8b:24:19:fb:d5:c3:c0:0b:45:46:6a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Sep 7 02:00:38 2025 GMT
Not After : Sep 8 02:00:38 2025 GMT
Subject: CN=38f778762283f653d90a4da449bbaf608ad2eab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:9b:56:35:24:32:bf:9a:11:f1:f4:55:c2:
0e:ef:6e:55:fa:cb:60:45:81:6e:c8:66:14:6f:89:
de:15:c8:db:1a:5c:31:65:52:cd:f9:f2:b0:8f:3b:
7c:ab:4c:b8:a3:09:ad:03:f1:0e:39:b8:40:70:d8:
c5:a3:1f:18:b3:c8:be:6e:1d:e3:39:b8:28:8e:20:
bf:d2:6c:9c:30:b1:87:ff:27:dc:eb:51:89:e0:f7:
12:f2:50:78:c1:7f:fc:f8:50:88:75:e1:5e:b8:93:
16:c3:f7:86:71:60:a6:77:7d:94:80:a7:cb:8c:2f:
76:92:a7:df:fa:8e:1b:89:1a:bb:7e:30:d6:8f:62:
b2:e8:5b:d0:d9:f0:7c:11:c0:3e:8d:14:b7:24:9a:
85:2d:db:38:f3:33:57:bc:4f:a6:e4:06:80:85:92:
89:58:17:3d:9d:70:90:3f:1e:71:06:fe:1e:3f:21:
ad:e9:74:6f:8b:c0:75:7d:92:00:ab:a4:58:b8:b9:
54:0b:fa:82:88:8e:b0:5e:f3:d1:64:5e:56:f0:f3:
13:d1:37:e0:33:33:24:be:35:ca:9c:c7:9b:cf:76:
a7:84:12:da:20:4c:c6:a6:48:48:8e:14:b8:4c:24:
9b:9f:f1:4c:66:8b:c3:73:b7:10:2a:26:ed:24:b9:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F7:78:76:22:83:F6:53:D9:0A:4D:A4:49:BB:AF:60:8A:D2:EA:B6
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2a:5e:b4:42:49:7e:9f:25:3d:8e:42:83:ed:8e:4f:dc:33:
57:d0:a1:9f:85:8f:75:a2:a8:78:6b:88:3e:3b:82:73:05:0b:
46:7d:08:0b:7f:4d:4c:a7:4c:b4:3c:7c:29:0c:32:62:39:63:
cc:2b:aa:ec:8c:10:2a:54:1c:a3:07:9f:d1:6a:8e:6f:97:b2:
2a:58:b8:c8:58:d2:cd:17:9e:f9:77:30:27:67:36:55:bb:f8:
c1:84:42:a5:30:dc:8a:56:24:54:59:34:37:43:21:1d:f4:ee:
05:db:77:46:7c:68:ab:d1:18:ad:99:94:0a:2d:b3:14:9a:06:
b1:cf:ce:ae:91:6b:d6:53:17:37:a6:5e:3b:52:bd:0c:ec:ee:
d1:12:e8:a7:c2:c5:fd:e9:14:6d:40:5f:f1:10:8d:43:37:0a:
a5:c6:21:ec:4b:ef:dc:79:7f:a8:5d:a9:d4:8e:9b:41:2d:8b:
82:00:bc:7a:74:74:89:b6:e9:c8:8a:38:ee:9b:57:6a:3b:08:
7b:f6:b8:c6:0b:00:c2:25:cd:5c:d1:31:4b:0a:fa:cb:f6:54:
5d:0b:a5:33:a4:ee:b0:8b:88:e0:87:d8:26:ec:20:53:d0:a4:
21:79:f0:e6:30:ad:3d:f3:1f:ad:74:c3:aa:e3:1e:8c:c2:7e:
26:5d:09:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh52ukiyQZ+9XDwAtFRmowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjVjYzQ4NDg5NDNiNGZlODlkMmNlNzFmZGMxZTRmZjdk
N2YzZTMwHhcNMjUwOTA3MDIwMDM4WhcNMjUwOTA4MDIwMDM4WjAzMTEwLwYDVQQD
EygzOGY3Nzg3NjIyODNmNjUzZDkwYTRkYTQ0OWJiYWY2MDhhZDJlYWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEebVjUkMr+aEfH0VcIO725V+stg
RYFuyGYUb4neFcjbGlwxZVLN+fKwjzt8q0y4owmtA/EOObhAcNjFox8Ys8i+bh3j
ObgojiC/0mycMLGH/yfc61GJ4PcS8lB4wX/8+FCIdeFeuJMWw/eGcWCmd32UgKfL
jC92kqff+o4biRq7fjDWj2Ky6FvQ2fB8EcA+jRS3JJqFLds48zNXvE+m5AaAhZKJ
WBc9nXCQPx5xBv4ePyGt6XRvi8B1fZIAq6RYuLlUC/qCiI6wXvPRZF5W8PMT0Tfg
MzMkvjXKnMebz3anhBLaIEzGpkhIjhS4TCSbn/FMZovDc7cQKibtJLkhAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDj3eHYig/ZT2QpNpEm7r2CK0uq2MB8GA1UdIwQY
MBaAFN/1zEhIlDtP6J0s5x/cHk/31/PjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNDE5ZWItMjMzMS00YmM3LThmMWIt
MjY4OWM4NTg3OGFkLzEvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNDE5ZWItMjMzMS00YmM3LThmMWItMjY4OWM4NTg3OGFk
LzEvM19YTVNFaVVPMF9vblN6bkg5d2VUX2ZYOC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkipetEJJ
fp8lPY5Cg+2OT9wzV9Chn4WPdaKoeGuIPjuCcwULRn0IC39NTKdMtDx8KQwyYjlj
zCuq7IwQKlQcowef0WqOb5eyKli4yFjSzRee+XcwJ2c2Vbv4wYRCpTDcilYkVFk0
N0MhHfTuBdt3Rnxoq9EYrZmUCi2zFJoGsc/OrpFr1lMXN6ZeO1K9DOzu0RLop8LF
/ekUbUBf8RCNQzcKpcYh7Evv3Hl/qF2p1I6bQS2LggC8enR0ibbpyIo47ptXajsI
e/a4xgsAwiXNXNExSwr6y/ZUXQulM6TusIuI4IfYJuwgU9CkIXnw5jCtPfMfrXTD
quMejMJ+Jl0J9Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:23 2025 by rpki-client