Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: wqxMfS3MdIQXLZxhDnKvAzm7ofxCaH8TmN6P6s7aZDY=
Subject key identifier: 47:F1:E6:1C:E4:DF:99:6D:C0:04:8C:AF:4C:5F:0A:4D:8A:95:22:77
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 01974B56463BD3898E136052CDFD3E491596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 08AF
Signing time: Sat 07 Jun 2025 17:00:34 +0000
Manifest this update: Sat 07 Jun 2025 17:00:34 +0000
Manifest next update: Sun 08 Jun 2025 17:00:34 +0000
Files and hashes: 1: 6JxEiaEvYS9lMNYU9-YVInF7e8w.roa (hash: 70NWS2RXJlvS8eFFeFd9DCGoEyQrpgXb5vcUfy1RN8w=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: PMIT2IN0OyeR8b3+qQfjpcL0A4ni1E2ia1+HJr2cBVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:46:3b:d3:89:8e:13:60:52:cd:fd:3e:49:15:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: Jun 7 17:00:34 2025 GMT
Not After : Jun 8 17:00:34 2025 GMT
Subject: CN=47f1e61ce4df996dc0048caf4c5f0a4d8a952277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:27:2a:47:c4:46:56:8b:c7:89:c7:d6:d7:
64:9a:80:8b:f2:ad:ce:3b:6e:5b:59:4b:3a:fb:af:
88:e8:73:c8:2b:41:4f:e2:d0:1d:4c:78:df:17:99:
17:dd:12:4a:4c:54:3d:63:9a:2c:95:43:45:10:ca:
0c:23:47:a4:0e:70:88:7e:98:36:33:18:99:10:62:
dc:c7:33:dd:f3:ff:48:e1:5e:fd:58:c5:a3:5e:c5:
92:a7:4f:54:c1:c4:06:01:5f:f5:37:98:39:80:ae:
c1:01:c5:ea:6d:18:d3:6f:89:ef:88:43:03:10:9e:
5b:44:b5:cb:85:95:d5:1b:21:5a:d9:06:1a:ae:62:
6d:02:f5:35:ad:a0:52:3b:4f:07:77:2a:c5:a0:4c:
ef:1f:97:41:a0:19:2b:ae:be:06:b6:fe:f2:cd:e5:
20:96:b1:dc:17:63:9a:c5:9b:f1:38:29:fa:4b:94:
46:56:79:b4:23:dc:99:4e:51:22:94:94:5f:fe:04:
59:1e:27:99:be:61:05:73:2d:ef:6d:60:86:d4:92:
5f:87:f5:f6:13:6b:9d:3f:e2:91:c4:71:c9:a0:81:
8a:8b:8e:57:fc:97:2b:1e:40:84:d2:55:4f:70:15:
22:03:cb:87:e0:b8:35:b0:3e:1a:a6:ac:fc:aa:44:
7f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F1:E6:1C:E4:DF:99:6D:C0:04:8C:AF:4C:5F:0A:4D:8A:95:22:77
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:88:14:8a:d2:59:9b:53:8a:7e:03:6f:0e:3b:d8:5d:ca:11:
4e:fc:27:d3:49:59:91:d5:17:cd:bc:23:51:c6:0c:52:97:98:
72:83:c5:b3:99:9a:33:29:0c:fd:62:15:77:ae:1a:08:2e:6a:
33:97:00:df:2a:d8:57:60:d6:72:77:fa:c5:7c:9f:45:58:6a:
6c:e9:1d:e3:8f:d1:44:59:f3:a4:5f:9f:63:bb:67:fb:20:27:
47:f2:2d:24:94:b9:cb:7e:8d:c1:50:b2:fc:9e:2f:f8:7c:c4:
d7:9a:c5:31:8b:1f:29:12:9e:9d:c8:82:f2:98:8c:8c:01:0e:
2a:f3:5b:23:5f:c7:47:0c:40:1d:3e:fe:32:3d:7c:e9:ef:e7:
cc:98:27:22:c1:5a:3e:6e:be:9d:52:ba:a0:26:8a:e0:6f:83:
ae:f0:ff:ba:d3:47:f4:f4:ee:5c:6e:fe:de:b8:3c:f2:5f:09:
bd:10:dd:37:08:a1:e8:2d:9b:49:ba:d3:00:6f:33:2b:d7:3f:
0d:57:f2:8d:3e:da:80:f4:4b:f9:18:86:ac:a6:cd:c8:f4:55:
20:ca:c4:80:ba:26:c1:b7:45:c9:02:ad:fb:d2:80:2c:f9:a5:
6c:74:b7:c4:30:6c:96:03:ed:ff:b9:1a:f7:6e:fc:df:9d:49:
93:14:ed:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLVkY704mOE2BSzf0+SRWWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNzBiODkyODFjZGI3NjFhMDRhZGNiYzBhYzQxNzA1NDEz
MTUwZTkwHhcNMjUwNjA3MTcwMDM0WhcNMjUwNjA4MTcwMDM0WjAzMTEwLwYDVQQD
Eyg0N2YxZTYxY2U0ZGY5OTZkYzAwNDhjYWY0YzVmMGE0ZDhhOTUyMjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLgnKkfERlaLx4nH1tdkmoCL8q3O
O25bWUs6+6+I6HPIK0FP4tAdTHjfF5kX3RJKTFQ9Y5oslUNFEMoMI0ekDnCIfpg2
MxiZEGLcxzPd8/9I4V79WMWjXsWSp09UwcQGAV/1N5g5gK7BAcXqbRjTb4nviEMD
EJ5bRLXLhZXVGyFa2QYarmJtAvU1raBSO08HdyrFoEzvH5dBoBkrrr4Gtv7yzeUg
lrHcF2OaxZvxOCn6S5RGVnm0I9yZTlEilJRf/gRZHieZvmEFcy3vbWCG1JJfh/X2
E2udP+KRxHHJoIGKi45X/JcrHkCE0lVPcBUiA8uH4Lg1sD4apqz8qkR/wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfx5hzk35ltwASMr0xfCk2KlSJ3MB8GA1UdIwQY
MBaAFLtwuJKBzbdhoErcvArEFwVBMVDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2Yjgt
NDE3MzIwY2JhZTU1LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xMjA3MTUtMjY4OS00YjFjLWE2YjgtNDE3MzIwY2JhZTU1
LzEvdTNDNGtvSE50MkdnU3R5OENzUVhCVUV4VU9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYgUitJZ
m1OKfgNvDjvYXcoRTvwn00lZkdUXzbwjUcYMUpeYcoPFs5maMykM/WIVd64aCC5q
M5cA3yrYV2DWcnf6xXyfRVhqbOkd44/RRFnzpF+fY7tn+yAnR/ItJJS5y36NwVCy
/J4v+HzE15rFMYsfKRKenciC8piMjAEOKvNbI1/HRwxAHT7+Mj186e/nzJgnIsFa
Pm6+nVK6oCaK4G+DrvD/utNH9PTuXG7+3rg88l8JvRDdNwih6C2bSbrTAG8zK9c/
DVfyjT7agPRL+RiGrKbNyPRVIMrEgLomwbdFyQKt+9KALPmlbHS3xDBslgPt/7ka
9278351JkxTt7g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:36:38 2025 by rpki-client