Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier: mfbgaz5AM66UHuxIJBJcFbS3rSJKWJH+IXbcnx4+IlY=
Subject key identifier: 81:80:34:2F:71:0D:16:E9:76:DC:20:D9:EE:42:02:B1:4C:B9:ED:04
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial: 019921E7400089E67B1E406C7C4B90D36337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number: 098F
Signing time: Sun 07 Sep 2025 02:00:27 +0000
Manifest this update: Sun 07 Sep 2025 02:00:27 +0000
Manifest next update: Mon 08 Sep 2025 02:00:27 +0000
Files and hashes: 1: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: we0oPWe0KsO94IB/YBVhEg7hxF8kWk2dRbPIMmjWXN4=)
2: vrZbrmq-YLZHy_jTQFADJGPxi-I.roa (hash: SoRxaIEIcm9lF/KB/PtX621zexUgH5AtUpObYQIQZW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:40:00:89:e6:7b:1e:40:6c:7c:4b:90:d3:63:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Validity
Not Before: Sep 7 02:00:27 2025 GMT
Not After : Sep 8 02:00:27 2025 GMT
Subject: CN=8180342f710d16e976dc20d9ee4202b14cb9ed04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:0d:ef:26:00:75:9f:7a:1b:e2:8e:bf:d0:
8e:bc:87:58:e6:62:22:16:a6:85:b3:b5:75:a9:1f:
8d:02:c1:4c:38:46:79:b5:80:b4:8d:f0:90:a7:08:
e3:35:e5:00:50:7d:42:f3:d8:c5:c6:43:d1:27:84:
56:25:e6:57:98:7a:2f:64:b5:49:aa:99:a7:75:9c:
44:e2:bd:04:45:1f:93:9d:78:c4:02:76:26:7b:14:
fe:67:9b:a7:2b:76:22:37:b9:18:46:9f:de:5b:76:
f1:4d:e8:4a:56:66:8d:ed:ce:ab:fb:94:75:2e:41:
1c:dc:61:21:b2:28:4a:2e:af:fe:5c:f7:7f:54:11:
fb:5e:73:62:68:df:cf:fc:11:d3:e5:5f:1f:fc:f0:
b2:3a:cb:8e:38:ae:d5:7c:fd:f0:64:8c:e9:63:e4:
be:66:f9:21:9a:32:d2:db:b3:2b:1d:06:5e:e6:b7:
6d:e7:39:3d:54:8e:25:2d:72:5d:b0:ed:da:4f:f3:
72:96:10:e7:53:18:3f:7d:8e:d1:e7:2c:d4:3f:72:
be:c7:f4:e1:08:5c:52:ae:11:98:11:85:6a:92:a2:
43:d9:c7:ed:02:69:2d:01:0a:c9:13:8d:f6:0c:2f:
d5:8f:18:45:0d:52:51:17:5a:5b:01:dd:8c:68:5c:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:80:34:2F:71:0D:16:E9:76:DC:20:D9:EE:42:02:B1:4C:B9:ED:04
X509v3 Authority Key Identifier:
keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:28:67:e3:f1:3f:83:1a:3e:67:0e:1c:40:c0:16:a1:f5:ca:
d5:21:cd:ad:39:a8:d8:ab:d3:53:c6:e5:4e:d7:0a:26:af:e8:
72:a5:79:6d:1e:78:13:ba:8e:e8:6d:3e:5c:3b:fb:1a:2c:29:
c1:6e:ac:d1:65:9e:30:44:7a:4f:8d:20:1e:2e:77:d4:de:66:
8d:16:b7:f7:ce:97:66:9e:04:93:24:07:30:ca:97:ff:f4:9e:
97:a4:6d:52:48:9b:3e:01:52:8d:f9:a8:13:0a:8b:d4:3d:03:
46:9e:1f:85:ea:12:d2:ca:05:3e:f4:59:b3:61:cc:2b:70:54:
74:f6:7b:2f:dd:ad:19:c1:e8:b5:7d:fa:74:e3:16:61:31:b9:
15:07:de:cd:03:27:25:a7:d9:b1:53:c1:d0:73:0e:95:41:0e:
e1:5c:2e:84:a9:45:d3:1b:ce:46:d4:78:10:34:a9:36:7b:24:
64:82:f5:4d:a2:17:b9:1d:c2:45:b1:e0:78:06:dc:bf:6c:86:
9f:a4:61:70:60:57:4d:8e:fa:ed:c0:9e:05:03:37:55:69:92:
21:ed:4b:0c:ed:9a:b2:d3:2f:3d:43:04:6d:2c:0c:98:8a:fb:
04:44:5c:0e:e2:e1:11:65:8b:4b:cf:46:b0:13:f2:16:04:c4:
6e:51:26:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh50AAieZ7HkBsfEuQ02M3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjIwYTA2ODViNmZlOTc1NGNhMjI0ODY3NzViMmQ4YTdl
OWMxMWUwHhcNMjUwOTA3MDIwMDI3WhcNMjUwOTA4MDIwMDI3WjAzMTEwLwYDVQQD
Eyg4MTgwMzQyZjcxMGQxNmU5NzZkYzIwZDllZTQyMDJiMTRjYjllZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0UN7yYAdZ96G+KOv9COvIdY5mIi
FqaFs7V1qR+NAsFMOEZ5tYC0jfCQpwjjNeUAUH1C89jFxkPRJ4RWJeZXmHovZLVJ
qpmndZxE4r0ERR+TnXjEAnYmexT+Z5unK3YiN7kYRp/eW3bxTehKVmaN7c6r+5R1
LkEc3GEhsihKLq/+XPd/VBH7XnNiaN/P/BHT5V8f/PCyOsuOOK7VfP3wZIzpY+S+
ZvkhmjLS27MrHQZe5rdt5zk9VI4lLXJdsO3aT/NylhDnUxg/fY7R5yzUP3K+x/Th
CFxSrhGYEYVqkqJD2cftAmktAQrJE432DC/VjxhFDVJRF1pbAd2MaFyRTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGANC9xDRbpdtwg2e5CArFMue0EMB8GA1UdIwQY
MBaAFN3yCgaFtv6XVMoiSGd1stin6cEeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81OTRjNzgtNGJkMC00M2Q4LTgxNGYt
NTgzNDlmNzQwZTk2LzEvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS81OTRjNzgtNGJkMC00M2Q4LTgxNGYtNTgzNDlmNzQwZTk2
LzEvM2ZJS0JvVzJfcGRVeWlKSVozV3kyS2Zwd1I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAShn4/E/
gxo+Zw4cQMAWofXK1SHNrTmo2KvTU8blTtcKJq/ocqV5bR54E7qO6G0+XDv7Giwp
wW6s0WWeMER6T40gHi531N5mjRa3986XZp4EkyQHMMqX//Sel6RtUkibPgFSjfmo
EwqL1D0DRp4fheoS0soFPvRZs2HMK3BUdPZ7L92tGcHotX36dOMWYTG5FQfezQMn
JafZsVPB0HMOlUEO4VwuhKlF0xvORtR4EDSpNnskZIL1TaIXuR3CRbHgeAbcv2yG
n6RhcGBXTY767cCeBQM3VWmSIe1LDO2astMvPUMEbSwMmIr7BERcDuLhEWWLS89G
sBPyFgTEblEm6w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:50 2025 by rpki-client