Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: tQ0ioB3UpyxY+fSc6Eqi8dP9aRVML/aM3LzORsCztC4=
Subject key identifier: 0B:DD:55:B7:56:78:FD:08:4E:10:D3:FD:83:4D:DD:6A:37:76:6C:49
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 0199326CFC734A0B66F475DBC44A6265A599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 060C
Signing time: Wed 10 Sep 2025 07:00:27 +0000
Manifest this update: Wed 10 Sep 2025 07:00:27 +0000
Manifest next update: Thu 11 Sep 2025 07:00:27 +0000
Files and hashes: 1: 1eJwg5skWWcGDXFLNTcOwNfaXOs.roa (hash: 7FGDI31rrxDDlErzYzWSkDOB2c3i2HKAdvNrAxAMr8I=)
2: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: C7fkHVAILYiKcXoMR4mc9yBpyFMb0Q+O1D82s+/jMhE=)
3: Pu9BTwuj73Y1OYZEEjY0ZHH4Hw0.roa (hash: wFwRyxZLAd3FNxCgO3OSOt8i3+YrAeILPNwkW0awCVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6c:fc:73:4a:0b:66:f4:75:db:c4:4a:62:65:a5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Sep 10 07:00:27 2025 GMT
Not After : Sep 11 07:00:27 2025 GMT
Subject: CN=0bdd55b75678fd084e10d3fd834ddd6a37766c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:38:83:5d:dd:a5:c9:85:c8:46:93:9d:bb:a9:
b1:cb:4d:63:3a:db:57:f1:7f:15:9a:1a:32:cd:73:
d7:a9:da:66:50:04:ff:af:fb:24:6a:64:b3:85:f8:
33:57:c5:92:b7:aa:05:bb:66:73:8c:15:48:90:ba:
2c:f4:9e:b1:1a:63:a4:07:be:4a:ae:6e:80:db:76:
19:ae:5e:a0:ce:0c:4b:fa:39:7f:c9:1e:f2:4c:78:
b4:3d:10:77:ba:1e:2c:6b:cc:fd:5a:8b:12:4c:fe:
c7:af:cf:7f:ec:50:49:e8:44:1e:50:d4:bc:de:46:
4f:fb:c3:4e:7e:cb:65:fa:4c:11:50:c2:58:ce:65:
b6:6c:6f:77:64:25:89:42:25:af:e9:e3:f5:cc:ff:
9e:19:90:63:03:66:7c:20:7e:71:d4:07:91:59:7f:
24:93:a3:c9:f9:6e:16:66:00:8f:02:9d:f6:22:bb:
08:4e:f3:3a:3f:e6:b8:e5:00:45:25:71:11:c9:e3:
96:a9:af:0d:9b:a3:52:b6:58:96:35:97:1a:aa:27:
d7:0f:f1:37:f3:b2:ee:30:4d:9b:5b:dd:eb:6e:60:
a1:fd:79:46:fc:4e:2f:93:7f:99:b8:48:5c:33:9d:
f2:59:bd:11:80:26:85:7c:45:4c:95:2b:a8:dd:06:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DD:55:B7:56:78:FD:08:4E:10:D3:FD:83:4D:DD:6A:37:76:6C:49
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5e:69:b9:63:1f:2a:e8:b7:b8:7c:52:aa:62:f5:84:03:8a:
d9:eb:6e:bc:9e:13:b0:0d:23:aa:a2:8d:c6:b1:6f:fc:6e:b0:
d7:75:8f:9e:d9:df:d9:ec:71:b5:ed:ac:91:5c:e8:7e:3d:4e:
86:17:b8:30:ee:b3:42:93:93:70:24:92:79:f7:9f:70:ed:66:
80:7e:6f:63:8f:4e:e8:2f:1a:3c:65:e9:8f:77:a4:25:33:1c:
16:8d:99:65:9b:9b:06:1b:98:8b:b4:a3:6d:ff:5a:02:f8:9a:
bb:39:0d:5a:f4:ee:4a:ac:af:ec:4d:f5:56:eb:97:c0:02:55:
ac:0e:16:42:1c:56:4d:9f:0a:66:68:83:44:05:d9:c0:ba:eb:
be:8d:9e:07:af:43:5f:5a:da:14:07:d3:b3:ba:35:26:94:c9:
0b:01:58:7d:65:28:d9:26:e1:2f:62:e5:0f:3c:f8:b9:9d:44:
57:94:41:f4:e8:33:af:c4:f3:07:f9:ab:ef:37:db:11:b3:e6:
86:bd:61:bb:d6:69:bd:bb:de:59:d2:ee:f3:a5:66:97:4b:12:
19:6a:77:c6:06:d2:7a:61:91:7d:d9:cc:b7:dc:d9:59:76:3f:
57:05:c6:29:35:4b:b3:c3:ee:d8:12:d3:a6:b8:20:a4:c3:66:
74:9f:fc:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkybPxzSgtm9HXbxEpiZaWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNzVmYzhjNDVkMzYxMDEwMDg4MzcxMTljYmZhODRhZWUx
OWUyOWEwHhcNMjUwOTEwMDcwMDI3WhcNMjUwOTExMDcwMDI3WjAzMTEwLwYDVQQD
EygwYmRkNTViNzU2NzhmZDA4NGUxMGQzZmQ4MzRkZGQ2YTM3NzY2YzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljiDXd2lyYXIRpOdu6mxy01jOttX
8X8VmhoyzXPXqdpmUAT/r/skamSzhfgzV8WSt6oFu2ZzjBVIkLos9J6xGmOkB75K
rm6A23YZrl6gzgxL+jl/yR7yTHi0PRB3uh4sa8z9WosSTP7Hr89/7FBJ6EQeUNS8
3kZP+8NOfstl+kwRUMJYzmW2bG93ZCWJQiWv6eP1zP+eGZBjA2Z8IH5x1AeRWX8k
k6PJ+W4WZgCPAp32IrsITvM6P+a45QBFJXERyeOWqa8Nm6NStliWNZcaqifXD/E3
87LuME2bW93rbmCh/XlG/E4vk3+ZuEhcM53yWb0RgCaFfEVMlSuo3QYTLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvdVbdWeP0IThDT/YNN3Wo3dmxJMB8GA1UdIwQY
MBaAFN11/IxF02EBAIg3EZy/qEruGeKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMt
MGNjNTE2OGVhMTVhLzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMtMGNjNTE2OGVhMTVh
LzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkF5puWMf
Kui3uHxSqmL1hAOK2etuvJ4TsA0jqqKNxrFv/G6w13WPntnf2exxte2skVzofj1O
hhe4MO6zQpOTcCSSefefcO1mgH5vY49O6C8aPGXpj3ekJTMcFo2ZZZubBhuYi7Sj
bf9aAviauzkNWvTuSqyv7E31VuuXwAJVrA4WQhxWTZ8KZmiDRAXZwLrrvo2eB69D
X1raFAfTs7o1JpTJCwFYfWUo2SbhL2LlDzz4uZ1EV5RB9Ogzr8TzB/mr7zfbEbPm
hr1hu9ZpvbveWdLu86Vml0sSGWp3xgbSemGRfdnMt9zZWXY/VwXGKTVLs8Pu2BLT
prggpMNmdJ/8nQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 15:03:04 2025 by rpki-client