Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
File: s-3xF3T0QHrdvfPPukweeqAkIiM.mft (raw, json)
Hash identifier: ns5j5b8dL9wKcRB8luTIkBT20uKYcVfjWZqdRSP9NlA=
Subject key identifier: C7:9A:A0:42:AF:86:85:4F:DF:96:FE:DD:4F:1C:B5:B5:DC:72:57:25
Authority key identifier: B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
Certificate issuer: /CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Certificate serial: 0199239F5183C6CFB31353B0404038714A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
Manifest number: 0400
Signing time: Sun 07 Sep 2025 10:01:07 +0000
Manifest this update: Sun 07 Sep 2025 10:01:07 +0000
Manifest next update: Mon 08 Sep 2025 10:01:07 +0000
Files and hashes: 1: s-3xF3T0QHrdvfPPukweeqAkIiM.crl (hash: jTdElU7FvfMxivqXry+Id62E0nUORuQpUpM8BxQZigg=)
2: uqWPOGEjKAK6cva-7ggQuyGZx84.roa (hash: LmiTjnCPg8ISEkh3ESWU5kwDHzMqe3y8V1474zgHE24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:51:83:c6:cf:b3:13:53:b0:40:40:38:71:4a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3edf11774f4407addbdf3cfba4c1e7aa0242223
Validity
Not Before: Sep 7 10:01:07 2025 GMT
Not After : Sep 8 10:01:07 2025 GMT
Subject: CN=c79aa042af86854fdf96fedd4f1cb5b5dc725725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:cf:c3:1f:e2:81:ae:35:f5:14:94:8e:fa:
f1:1b:00:55:86:1d:6a:14:ec:b1:48:d7:b7:2e:b0:
ba:5e:18:06:6a:c3:96:d0:70:95:5b:90:e5:0e:d3:
55:b1:85:4d:f0:84:3f:5b:f7:ba:82:5f:6a:10:f0:
b4:49:bd:32:84:e6:60:c6:1f:cb:64:28:d9:fe:35:
6e:8f:03:51:cd:c7:01:af:72:48:2f:14:31:ae:93:
c4:9a:1a:4d:3e:12:fa:81:45:84:9e:90:a9:e5:5f:
07:cb:9a:0d:ab:21:01:51:4e:12:c4:c9:e9:05:d2:
92:b6:45:e0:ef:e3:9d:bc:2b:d9:3e:c6:28:37:c7:
b0:23:bd:37:39:c3:e1:de:b6:79:22:c8:b3:e6:33:
ad:1d:fb:9b:1a:ae:f9:73:f2:70:62:65:61:dc:5a:
a7:ac:1b:78:16:61:8c:6b:64:5f:84:74:e7:cf:11:
77:75:b9:ab:00:ea:17:af:fd:58:85:50:cc:56:ce:
0b:49:53:1b:9b:e5:0f:be:51:c7:71:8b:eb:8f:65:
0c:5c:4f:23:39:1d:6b:2a:ce:f4:19:98:3f:25:94:
87:8e:cc:82:cd:18:35:85:6c:64:53:47:77:22:0c:
4d:e2:f1:3f:a5:36:0a:2b:af:6b:39:bf:3b:b9:15:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9A:A0:42:AF:86:85:4F:DF:96:FE:DD:4F:1C:B5:B5:DC:72:57:25
X509v3 Authority Key Identifier:
keyid:B3:ED:F1:17:74:F4:40:7A:DD:BD:F3:CF:BA:4C:1E:7A:A0:24:22:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-3xF3T0QHrdvfPPukweeqAkIiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/503018-9bac-4858-8df8-adca1a57ab0c/1/s-3xF3T0QHrdvfPPukweeqAkIiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:85:b8:ba:61:85:1d:93:36:83:f3:90:ef:1c:be:d6:b5:39:
71:b0:cb:b4:5a:1c:82:d0:10:6c:bf:50:8b:39:8b:8c:93:b1:
4b:96:af:7e:12:e7:7c:f8:fc:b5:1f:71:42:1b:54:4b:06:42:
b9:5d:0e:b8:a7:77:5b:ad:0a:e8:01:a3:2f:67:f6:62:ad:32:
76:a2:3c:ed:34:81:bd:f0:58:4c:9d:86:cb:cf:48:81:68:cb:
24:c1:93:ce:36:13:8b:74:0f:81:8e:ee:23:c6:c1:2b:ce:02:
2b:2e:c9:4d:2d:b3:13:61:a8:f4:85:e7:4e:d7:24:d5:05:d3:
e0:d5:10:69:d8:86:87:57:73:01:92:57:a6:eb:bb:8f:05:1c:
31:a0:28:d1:7e:6e:66:47:69:82:70:22:83:5a:14:fd:a6:75:
a0:86:03:29:6c:85:f7:2b:9d:24:8b:92:b2:d3:c1:5b:61:9e:
4f:99:6a:45:1c:a0:68:ca:5a:12:8c:8f:f6:f2:86:17:76:c9:
8c:84:e6:c8:9f:cc:e0:eb:91:c6:6e:76:75:6e:e7:07:51:43:
e5:5b:de:63:35:b9:91:78:f4:4c:e0:78:0b:da:5d:7b:63:86:
87:03:62:d4:a1:19:e3:27:05:19:14:e2:c9:6e:6f:0e:3c:f4:
15:05:b3:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn1GDxs+zE1OwQEA4cUpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZWRmMTE3NzRmNDQwN2FkZGJkZjNjZmJhNGMxZTdhYTAy
NDIyMjMwHhcNMjUwOTA3MTAwMTA3WhcNMjUwOTA4MTAwMTA3WjAzMTEwLwYDVQQD
EyhjNzlhYTA0MmFmODY4NTRmZGY5NmZlZGQ0ZjFjYjViNWRjNzI1NzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtunPwx/iga419RSUjvrxGwBVhh1q
FOyxSNe3LrC6XhgGasOW0HCVW5DlDtNVsYVN8IQ/W/e6gl9qEPC0Sb0yhOZgxh/L
ZCjZ/jVujwNRzccBr3JILxQxrpPEmhpNPhL6gUWEnpCp5V8Hy5oNqyEBUU4SxMnp
BdKStkXg7+OdvCvZPsYoN8ewI703OcPh3rZ5Isiz5jOtHfubGq75c/JwYmVh3Fqn
rBt4FmGMa2RfhHTnzxF3dbmrAOoXr/1YhVDMVs4LSVMbm+UPvlHHcYvrj2UMXE8j
OR1rKs70GZg/JZSHjsyCzRg1hWxkU0d3IgxN4vE/pTYKK69rOb87uRXt9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeaoEKvhoVP35b+3U8ctbXcclclMB8GA1UdIwQY
MBaAFLPt8Rd09EB63b3zz7pMHnqgJCIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy0zeEYzVDBRSHJkdmZQUHVrd2VlcUFrSWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MDMwMTgtOWJhYy00ODU4LThkZjgt
YWRjYTFhNTdhYjBjLzEvcy0zeEYzVDBRSHJkdmZQUHVrd2VlcUFrSWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81MDMwMTgtOWJhYy00ODU4LThkZjgtYWRjYTFhNTdhYjBj
LzEvcy0zeEYzVDBRSHJkdmZQUHVrd2VlcUFrSWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4W4umGF
HZM2g/OQ7xy+1rU5cbDLtFocgtAQbL9QizmLjJOxS5avfhLnfPj8tR9xQhtUSwZC
uV0OuKd3W60K6AGjL2f2Yq0ydqI87TSBvfBYTJ2Gy89IgWjLJMGTzjYTi3QPgY7u
I8bBK84CKy7JTS2zE2Go9IXnTtck1QXT4NUQadiGh1dzAZJXpuu7jwUcMaAo0X5u
ZkdpgnAig1oU/aZ1oIYDKWyF9yudJIuSstPBW2GeT5lqRRygaMpaEoyP9vKGF3bJ
jITmyJ/M4OuRxm52dW7nB1FD5VveYzW5kXj0TOB4C9pde2OGhwNi1KEZ4ycFGRTi
yW5vDjz0FQWzEQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:39 2025 by rpki-client