Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier: 3J1GvenlMOLDrGL/J0vuzI0OsABvew1XDgyYwaM+i10=
Subject key identifier: 14:0E:F6:05:A1:BA:6D:00:94:75:86:9E:F6:8A:99:E1:21:96:95:6E
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 01992C6B85074EAF65360E12BBCB6A2CF42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number: 1676
Signing time: Tue 09 Sep 2025 03:01:07 +0000
Manifest this update: Tue 09 Sep 2025 03:01:07 +0000
Manifest next update: Wed 10 Sep 2025 03:01:07 +0000
Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: mAMghlIUowX/2pv3nOE1bFSCQja9MdeWSsrsZIuqz2w=)
2: Q6UDfcr6-wjzrSR02hz91bMMgCQ.roa (hash: Ri+ho1nwscaoaR+lGA/lmNvU5bMAzGg4wnbtbjS6IAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:6b:85:07:4e:af:65:36:0e:12:bb:cb:6a:2c:f4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Sep 9 03:01:07 2025 GMT
Not After : Sep 10 03:01:07 2025 GMT
Subject: CN=140ef605a1ba6d009475869ef68a99e12196956e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:ea:8d:e9:8d:ed:f9:d0:bf:e1:7c:80:4b:
58:91:8f:b1:87:ff:15:b1:49:be:e5:15:75:c3:aa:
18:aa:9d:fe:14:54:b8:c3:e8:65:c8:bc:2f:7c:1c:
02:2a:78:da:87:b1:04:b3:0b:70:50:83:ef:2e:55:
de:b2:f4:1a:88:36:b6:bb:53:89:73:05:89:47:dd:
11:9a:da:df:f5:89:01:f5:58:ea:d0:43:d1:98:73:
a6:02:ed:77:41:44:b3:f5:76:96:9a:5c:3c:1e:e2:
7f:6f:2d:0e:37:ae:37:4b:d5:4f:67:b1:a2:73:14:
cc:50:43:59:94:af:7f:88:ff:26:3a:bb:56:b3:4b:
30:47:53:7a:24:97:c3:02:d0:c5:da:86:60:af:b4:
e7:60:1a:eb:18:65:fc:91:72:e7:df:1b:01:3e:0c:
fc:45:f8:26:cc:ac:36:76:1c:32:b8:3a:bc:d4:97:
b7:80:c5:ab:0b:3b:63:23:97:86:f3:8e:12:a6:09:
30:03:04:a0:e0:f9:05:fb:bf:f2:b2:77:d3:3a:04:
c7:44:9f:96:0a:25:23:3f:3a:0e:8a:f0:e2:13:1a:
da:f2:75:e6:64:25:89:16:e4:5c:56:64:5a:10:8e:
39:1d:e5:5a:68:ae:9b:74:54:25:35:7f:67:43:c6:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0E:F6:05:A1:BA:6D:00:94:75:86:9E:F6:8A:99:E1:21:96:95:6E
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6d:58:db:58:e8:bb:3d:6d:8f:0d:c4:69:29:3d:02:27:ee:
26:9a:92:f0:1d:49:e2:ba:fd:de:f4:ce:6d:f8:fe:ed:b7:73:
36:6e:77:1c:db:d0:56:f3:6c:67:a2:bf:93:a7:b3:0f:e1:82:
93:0b:7c:81:cf:6f:ed:a6:a0:ac:96:40:a4:54:f6:f8:c8:46:
0d:24:e1:33:1c:61:1b:4f:f6:aa:b1:63:7c:e6:d1:6d:d3:c1:
55:48:e6:24:62:a0:41:bc:44:e3:cb:53:fc:16:bc:c4:91:d2:
58:97:89:ff:c8:0d:37:52:26:c4:ab:44:76:11:ea:a8:54:61:
7e:fd:ec:1b:7d:63:3d:9d:0c:be:75:50:fe:c6:80:c5:86:a6:
b2:e1:50:b3:96:8a:32:9c:a0:b7:5e:b2:fe:50:e1:54:b8:9e:
10:58:6f:ab:08:09:e5:5c:7f:b3:1b:5b:0b:6f:ff:77:6c:81:
bc:cf:c8:87:1a:fb:24:f4:88:0b:2a:59:79:67:a5:46:29:15:
63:99:3e:69:c8:d3:36:64:c0:f8:0c:17:3e:4d:1c:5e:42:3d:
86:73:a8:90:61:42:dc:da:29:61:fd:77:cc:5e:ac:e8:b9:7e:
50:f8:c3:34:d7:f8:17:04:7a:05:aa:8b:1c:f9:74:46:e8:02:
bf:9c:41:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZksa4UHTq9lNg4Su8tqLPQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOGU2MGJiMTExMDg3ZDA4MDNmYzNmY2M0YWYzMjdhYTg1
YzBiODEwHhcNMjUwOTA5MDMwMTA3WhcNMjUwOTEwMDMwMTA3WjAzMTEwLwYDVQQD
EygxNDBlZjYwNWExYmE2ZDAwOTQ3NTg2OWVmNjhhOTllMTIxOTY5NTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA113qjemN7fnQv+F8gEtYkY+xh/8V
sUm+5RV1w6oYqp3+FFS4w+hlyLwvfBwCKnjah7EEswtwUIPvLlXesvQaiDa2u1OJ
cwWJR90Rmtrf9YkB9Vjq0EPRmHOmAu13QUSz9XaWmlw8HuJ/by0ON643S9VPZ7Gi
cxTMUENZlK9/iP8mOrtWs0swR1N6JJfDAtDF2oZgr7TnYBrrGGX8kXLn3xsBPgz8
RfgmzKw2dhwyuDq81Je3gMWrCztjI5eG844SpgkwAwSg4PkF+7/ysnfTOgTHRJ+W
CiUjPzoOivDiExra8nXmZCWJFuRcVmRaEI45HeVaaK6bdFQlNX9nQ8Z5gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQO9gWhum0AlHWGnvaKmeEhlpVuMB8GA1UdIwQY
MBaAFN6OYLsREIfQgD/D/MSvMnqoXAuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYt
YTZmNTM0YzMwN2YxLzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYtYTZmNTM0YzMwN2Yx
LzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADm1Y21jo
uz1tjw3EaSk9AifuJpqS8B1J4rr93vTObfj+7bdzNm53HNvQVvNsZ6K/k6ezD+GC
kwt8gc9v7aagrJZApFT2+MhGDSThMxxhG0/2qrFjfObRbdPBVUjmJGKgQbxE48tT
/Ba8xJHSWJeJ/8gNN1ImxKtEdhHqqFRhfv3sG31jPZ0MvnVQ/saAxYamsuFQs5aK
Mpygt16y/lDhVLieEFhvqwgJ5Vx/sxtbC2//d2yBvM/Ihxr7JPSICypZeWelRikV
Y5k+acjTNmTA+AwXPk0cXkI9hnOokGFC3NopYf13zF6s6Ll+UPjDNNf4FwR6BaqL
HPl0RugCv5xBPQ==
-----END CERTIFICATE-----
Generated at Tue Sep 9 10:33:37 2025 by rpki-client