Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier: bFU8Sx77NIbTbSjFilo73Egg/i3u4v3nhkfg7Aeqa+s=
Subject key identifier: 3D:22:DF:F8:01:8C:66:B2:70:40:8D:B2:A2:D7:E1:81:C8:D7:31:49
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial: 0199312400D3226FFB1FE586C6BCBE028A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number: 134F
Signing time: Wed 10 Sep 2025 01:01:07 +0000
Manifest this update: Wed 10 Sep 2025 01:01:07 +0000
Manifest next update: Thu 11 Sep 2025 01:01:07 +0000
Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: fksMjU7Cc9gTH/LpjCFT+lDS1ucu7Wswi+np0Mfanhw=)
2: K668RnN8R9Zt_BhcvITxrQRhBNs.roa (hash: 8wo0Wz+L+phQUblwdU8c4kneYF4uQyTcefZ7CpD7SsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:00:d3:22:6f:fb:1f:e5:86:c6:bc:be:02:8a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
Validity
Not Before: Sep 10 01:01:07 2025 GMT
Not After : Sep 11 01:01:07 2025 GMT
Subject: CN=3d22dff8018c66b270408db2a2d7e181c8d73149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:ea:20:a3:1b:a7:da:e7:19:3f:ac:5e:51:
b4:d9:b1:81:1a:2b:67:5c:44:2e:ee:17:de:97:21:
78:c6:87:b3:db:97:f5:1d:95:c3:11:48:c3:5e:4f:
b9:87:b1:e5:0b:9d:45:ba:fc:c3:92:9b:f6:33:59:
52:49:b9:a2:1c:2e:9b:58:31:5f:c5:7e:e0:b7:1a:
a0:50:df:ed:aa:1b:2d:df:ff:08:99:8f:86:70:b1:
9d:12:3e:67:8e:15:35:c4:0a:01:3b:d6:69:62:52:
a6:fd:74:7f:38:e3:76:9d:5a:e4:a8:49:ee:2a:41:
49:bc:f0:50:d3:57:83:d9:f7:f5:a5:7d:7c:94:cf:
89:6d:c0:15:c7:e3:70:0e:74:9f:d5:3d:f3:1c:37:
68:ab:b2:19:19:60:58:11:f3:d5:7e:ec:ff:f6:f1:
52:b9:bf:07:62:b9:90:e0:1b:54:8a:eb:96:cc:1f:
43:fc:11:a3:ab:16:c1:60:eb:9f:c0:fa:e3:09:83:
fb:83:1d:d4:3a:91:03:6e:3b:8b:be:fc:6b:1d:55:
6c:93:e3:60:6d:77:a3:d4:8e:44:fa:0e:62:43:1a:
f1:45:ae:34:ff:7b:89:64:df:cc:cc:98:f0:00:21:
d8:65:be:d1:63:09:fe:e1:03:37:5f:4d:15:af:70:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:22:DF:F8:01:8C:66:B2:70:40:8D:B2:A2:D7:E1:81:C8:D7:31:49
X509v3 Authority Key Identifier:
keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:cf:50:ec:1a:18:00:09:c9:5c:81:d3:88:c6:05:15:bc:fd:
9a:59:1a:fc:bb:3e:15:79:74:76:54:29:9b:eb:9e:b7:1d:33:
41:c0:5e:ef:a8:75:de:6f:66:73:09:c4:4a:d0:f5:83:d4:04:
92:51:33:e8:4b:9f:51:68:c8:1f:ec:dd:3e:a8:b9:ce:83:05:
90:38:57:0a:e7:7b:6e:08:c2:85:65:56:45:3e:8f:d0:b3:39:
97:3e:6f:8a:c2:0d:6c:7c:99:3a:7d:5d:94:b4:f8:4a:9b:8d:
cb:24:5c:db:77:e9:93:5d:79:e9:60:19:e3:b4:d4:40:4e:bb:
dd:1d:f5:8a:76:a5:9a:f8:35:f0:1e:6d:ad:1b:d3:dd:2e:1f:
f8:f1:9a:00:04:49:9a:7e:8b:d5:45:fd:d9:3b:13:e8:3c:f9:
af:ac:da:d7:4d:63:12:c2:74:8a:0f:d2:e5:0c:e0:4c:05:6f:
ef:cd:52:27:44:44:f9:ee:75:a6:d9:28:89:1b:82:a5:ae:be:
5c:f9:c3:08:0f:cd:1a:84:3a:20:12:f2:66:fc:83:47:2b:8b:
7b:e2:24:b9:35:18:0b:9d:a6:37:35:d3:e1:99:d3:cc:36:e7:
4e:33:95:6d:15:fe:45:bf:d0:c6:63:27:22:e7:7f:bf:d5:06:
ab:bd:08:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxJADTIm/7H+WGxry+AooJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOWZmNjE5NTA5NmEwOThjMTkyODE1NDhlNDEwN2I4Njdj
NzNhZmYwHhcNMjUwOTEwMDEwMTA3WhcNMjUwOTExMDEwMTA3WjAzMTEwLwYDVQQD
EygzZDIyZGZmODAxOGM2NmIyNzA0MDhkYjJhMmQ3ZTE4MWM4ZDczMTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3DqIKMbp9rnGT+sXlG02bGBGitn
XEQu7hfelyF4xoez25f1HZXDEUjDXk+5h7HlC51FuvzDkpv2M1lSSbmiHC6bWDFf
xX7gtxqgUN/tqhst3/8ImY+GcLGdEj5njhU1xAoBO9ZpYlKm/XR/OON2nVrkqEnu
KkFJvPBQ01eD2ff1pX18lM+JbcAVx+NwDnSf1T3zHDdoq7IZGWBYEfPVfuz/9vFS
ub8HYrmQ4BtUiuuWzB9D/BGjqxbBYOufwPrjCYP7gx3UOpEDbjuLvvxrHVVsk+Ng
bXej1I5E+g5iQxrxRa40/3uJZN/MzJjwACHYZb7RYwn+4QM3X00Vr3Co/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0i3/gBjGaycECNsqLX4YHI1zFJMB8GA1UdIwQY
MBaAFN6f9hlQlqCYwZKBVI5BB7hnxzr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83MzY3OWEtY2IwMS00M2NkLTkyNDUt
YTI5YzZkYWUzNWMwLzEvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83MzY3OWEtY2IwMS00M2NkLTkyNDUtYTI5YzZkYWUzNWMw
LzEvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAks9Q7BoY
AAnJXIHTiMYFFbz9mlka/Ls+FXl0dlQpm+uetx0zQcBe76h13m9mcwnEStD1g9QE
klEz6EufUWjIH+zdPqi5zoMFkDhXCud7bgjChWVWRT6P0LM5lz5visINbHyZOn1d
lLT4SpuNyyRc23fpk1156WAZ47TUQE673R31inalmvg18B5trRvT3S4f+PGaAARJ
mn6L1UX92TsT6Dz5r6za101jEsJ0ig/S5QzgTAVv781SJ0RE+e51ptkoiRuCpa6+
XPnDCA/NGoQ6IBLyZvyDRyuLe+IkuTUYC52mNzXT4ZnTzDbnTjOVbRX+Rb/QxmMn
Iud/v9UGq70ICQ==
-----END CERTIFICATE-----
Generated at Wed Sep 10 10:33:24 2025 by rpki-client