Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: Lkd9IiNyIPMxWMzfYCP9zqIoI2YpZNpgRXxca5s5ZaY=
Subject key identifier: E4:14:8C:F9:BF:DC:C0:66:CB:B4:48:ED:B8:E8:2F:62:38:AE:BF:68
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 0199179B215F786B918624B633A40DC968A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 1479
Signing time: Fri 05 Sep 2025 02:01:06 +0000
Manifest this update: Fri 05 Sep 2025 02:01:06 +0000
Manifest next update: Sat 06 Sep 2025 02:01:06 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: xfHxsJWGuyLOaEPH1iBt5FHULvnowGJ4v6TCtnpjCX0=)
2: UXWSLhVlTXSrRh4vQjiJGZfTc28.roa (hash: GwWbj030dqXFgPoZUUmrOygMcwYdz6TWzzcKF95NLWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9b:21:5f:78:6b:91:86:24:b6:33:a4:0d:c9:68:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Sep 5 02:01:06 2025 GMT
Not After : Sep 6 02:01:06 2025 GMT
Subject: CN=e4148cf9bfdcc066cbb448edb8e82f6238aebf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:5b:3a:66:6e:1b:4f:8f:44:eb:a6:42:26:
5e:77:ba:e4:77:23:e4:37:2b:2f:c2:b8:1d:0c:17:
6e:ed:63:69:1c:b6:6b:08:f7:d6:49:20:19:d2:5f:
55:ba:00:b7:70:88:b2:df:70:e4:bc:53:d4:57:2c:
8a:de:8a:52:cd:c1:21:18:1b:d5:5d:73:f2:80:5b:
31:3b:38:be:42:de:9a:12:75:41:b3:5e:29:67:7a:
1e:b9:19:43:54:06:33:3f:08:8b:46:fa:8a:11:28:
4a:9a:59:bb:09:cb:2d:08:d4:d0:e9:8c:bc:6c:19:
6c:bb:d6:20:dd:cb:f8:98:30:38:1d:99:8f:8e:11:
af:4c:ea:51:bb:77:61:e4:6c:07:dd:24:97:e8:73:
58:b0:70:6f:7b:c8:8a:96:ac:f5:69:58:32:af:90:
05:91:b1:7c:66:be:02:55:4a:97:c9:70:17:58:6d:
59:67:06:5f:59:12:a7:9a:45:c2:86:0d:13:a2:cb:
96:d9:89:4c:21:34:7d:b2:43:45:c3:ab:ce:74:4d:
98:3f:f8:d0:44:99:c7:fd:1b:3f:03:2b:56:24:fb:
39:14:20:45:10:91:de:a8:95:b8:5c:a4:27:ed:0b:
85:75:f3:99:2e:af:20:78:f6:a5:5b:25:f4:31:21:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:14:8C:F9:BF:DC:C0:66:CB:B4:48:ED:B8:E8:2F:62:38:AE:BF:68
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4e:cb:76:95:f0:ae:40:2b:44:d4:86:75:00:4b:30:c5:7e:
fc:56:87:21:a1:bb:42:4b:12:66:a5:12:a8:24:98:62:ea:6e:
ee:a7:ab:12:78:b6:a5:78:25:c0:3d:dc:0c:7f:9a:75:bb:da:
f8:4f:97:b3:38:44:ac:9c:6e:83:05:48:83:c1:91:09:99:00:
4b:76:96:9d:5f:b6:b0:eb:04:fc:d0:7f:cd:fe:e1:89:9e:c1:
a9:eb:1d:da:c8:ff:37:7f:92:f0:83:03:23:43:71:69:00:0f:
8c:61:9c:a5:d6:84:df:cf:81:21:25:0a:7f:9e:7b:56:4d:db:
8d:a3:51:0b:33:d3:46:38:5e:60:3f:f9:c1:d5:9d:1c:84:96:
13:92:fd:de:5e:63:61:ef:58:2c:ba:28:01:76:dd:e9:5a:d7:
43:1d:f6:55:3f:11:c4:b0:cc:dd:77:05:9e:73:b1:2c:ff:80:
22:99:b3:ac:d2:e6:eb:cb:b9:2c:8c:f8:e8:27:0e:12:55:be:
22:3b:a5:ad:fd:c2:f2:e0:73:41:36:30:1d:cc:64:68:5a:e0:
e2:5e:92:64:d9:cb:e6:53:1b:b1:f0:9f:d1:87:a3:e0:c5:08:
a3:3a:38:b2:fb:fe:87:aa:2b:5c:62:d3:81:ff:11:1d:1f:19:
6c:7d:1c:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXmyFfeGuRhiS2M6QNyWimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWYxOWFkZmE2OTQ1NTg5YmMyZDEwMDE1NGU1YTU4YzQ0
OThhMTQwHhcNMjUwOTA1MDIwMTA2WhcNMjUwOTA2MDIwMTA2WjAzMTEwLwYDVQQD
EyhlNDE0OGNmOWJmZGNjMDY2Y2JiNDQ4ZWRiOGU4MmY2MjM4YWViZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBJbOmZuG0+PROumQiZed7rkdyPk
NysvwrgdDBdu7WNpHLZrCPfWSSAZ0l9VugC3cIiy33DkvFPUVyyK3opSzcEhGBvV
XXPygFsxOzi+Qt6aEnVBs14pZ3oeuRlDVAYzPwiLRvqKEShKmlm7CcstCNTQ6Yy8
bBlsu9Yg3cv4mDA4HZmPjhGvTOpRu3dh5GwH3SSX6HNYsHBve8iKlqz1aVgyr5AF
kbF8Zr4CVUqXyXAXWG1ZZwZfWRKnmkXChg0TosuW2YlMITR9skNFw6vOdE2YP/jQ
RJnH/Rs/AytWJPs5FCBFEJHeqJW4XKQn7QuFdfOZLq8gePalWyX0MSHRvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQUjPm/3MBmy7RI7bjoL2I4rr9oMB8GA1UdIwQY
MBaAFNzvGa36aUVYm8LRABVOWljESYoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQt
MjFkZWFkMGM1ZTljLzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQtMjFkZWFkMGM1ZTlj
LzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEk7LdpXw
rkArRNSGdQBLMMV+/FaHIaG7QksSZqUSqCSYYupu7qerEni2pXglwD3cDH+adbva
+E+XszhErJxugwVIg8GRCZkAS3aWnV+2sOsE/NB/zf7hiZ7Bqesd2sj/N3+S8IMD
I0NxaQAPjGGcpdaE38+BISUKf557Vk3bjaNRCzPTRjheYD/5wdWdHISWE5L93l5j
Ye9YLLooAXbd6VrXQx32VT8RxLDM3XcFnnOxLP+AIpmzrNLm68u5LIz46CcOElW+
Ijulrf3C8uBzQTYwHcxkaFrg4l6SZNnL5lMbsfCf0Yej4MUIozo4svv+h6orXGLT
gf8RHR8ZbH0cdQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:29 2025 by rpki-client