Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
File: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft (raw, json)
Hash identifier: 59Ld4+Et7RbUp2k3TK1JbHLi2XV69frT5deEbuK8Nos=
Subject key identifier: D0:3F:8E:69:5D:AC:02:36:C1:62:AE:3F:C4:AE:1B:DA:C4:D1:AC:7F
Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
Certificate issuer: /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
Certificate serial: 0197481E49EE7D743793E31378BD341F1C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
Manifest number: 047A
Signing time: Sat 07 Jun 2025 02:00:33 +0000
Manifest this update: Sat 07 Jun 2025 02:00:33 +0000
Manifest next update: Sun 08 Jun 2025 02:00:33 +0000
Files and hashes: 1: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl (hash: 0aYbQRRYj0P4W7RBETExQC7o2NDrM+maUR/e0QZYtxY=)
2: Vdq57AskBeGBDlheyUDZPLCNdoE.roa (hash: lcSr2I4ArSoQ0YCCVynBh24JIyZ+E5ztrMNakx+ay84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:49:ee:7d:74:37:93:e3:13:78:bd:34:1f:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
Validity
Not Before: Jun 7 02:00:33 2025 GMT
Not After : Jun 8 02:00:33 2025 GMT
Subject: CN=d03f8e695dac0236c162ae3fc4ae1bdac4d1ac7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:95:fc:af:9a:1a:97:c8:b8:6e:db:6d:1c:
5c:1b:b8:d6:5c:67:d4:68:0e:55:43:ec:4a:5e:d2:
d2:9a:bb:93:a4:29:b0:3d:89:d1:cb:d6:60:31:34:
65:27:1a:f3:e9:01:6d:6c:5f:6c:50:99:9e:d7:57:
b3:1f:ec:5b:33:bb:6d:17:5d:d9:2b:bf:e7:04:bf:
ad:47:cf:a6:44:79:97:23:ad:86:e1:41:c2:52:c1:
1c:7f:2e:08:56:50:4b:37:30:f2:f4:b1:fc:54:d0:
44:72:e8:80:b7:98:2e:71:94:41:64:f1:65:7c:df:
42:6c:d3:06:08:36:b1:01:5d:f7:87:df:d1:41:11:
bb:d0:bb:39:9c:58:a8:17:d7:be:9e:1a:af:b1:f2:
19:6f:1b:9e:58:31:97:cf:c4:4c:3f:c0:56:ea:af:
4a:a2:03:fc:55:88:3e:02:ac:d4:f2:64:f0:91:f1:
da:04:2b:9d:dc:b7:8a:20:24:64:49:d4:18:f0:56:
3a:25:d8:f8:99:ad:76:d3:5a:2c:d9:e9:01:fb:91:
ee:33:06:d0:2f:06:0b:b1:ed:63:e9:de:2e:36:5d:
b5:c3:b4:48:be:8d:a1:56:b1:18:50:0d:04:2b:f1:
3b:5d:dd:32:48:84:e8:61:cf:f5:35:8a:2b:c5:a5:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3F:8E:69:5D:AC:02:36:C1:62:AE:3F:C4:AE:1B:DA:C4:D1:AC:7F
X509v3 Authority Key Identifier:
keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:18:19:75:54:4f:6b:7a:30:ab:d1:d8:95:ef:e7:8b:db:81:
cb:ad:5e:f6:8c:6f:50:26:be:c5:71:10:d9:18:2a:f3:71:b7:
5c:0d:f3:3b:ae:52:ef:6b:09:3a:c9:85:a4:4a:89:a1:40:a6:
af:ae:50:d4:8f:db:da:a0:0a:1f:2c:13:75:dc:a6:23:91:99:
a4:e3:45:35:d2:43:c2:77:46:a9:2d:5e:c6:40:11:3e:41:cb:
08:3c:f9:a0:3e:9a:3e:34:4e:01:5f:95:00:5f:27:8e:2d:a5:
e9:e3:09:9a:f5:c7:56:ba:c6:95:ff:50:1d:f8:d8:e1:a8:36:
52:d8:c5:61:d3:5e:bd:c2:7e:e5:be:eb:7e:9f:f8:2e:cc:6c:
e6:c1:bc:6a:4f:ea:ee:35:5b:7c:ef:34:50:5e:21:e3:13:96:
0a:2d:6d:6f:24:81:2c:a0:a9:26:4b:51:98:32:24:95:95:f5:
25:d1:52:92:84:a9:93:5e:ce:b5:85:0a:44:14:6a:bd:ad:22:
96:29:e1:fa:ad:63:f4:1d:e6:d0:3a:87:94:82:98:db:de:35:
98:81:85:0c:3b:49:a8:67:91:4c:b1:25:cd:a4:3a:c7:e6:7a:
88:81:24:9f:6b:fd:78:96:58:37:37:dc:4b:cd:21:57:15:a1:
df:f5:cd:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHknufXQ3k+MTeL00HxyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYmZhZjhhMWFhM2JjMWZmM2UzZTQzMGM2N2ZiN2E2NDEw
YTNkZjcwHhcNMjUwNjA3MDIwMDMzWhcNMjUwNjA4MDIwMDMzWjAzMTEwLwYDVQQD
EyhkMDNmOGU2OTVkYWMwMjM2YzE2MmFlM2ZjNGFlMWJkYWM0ZDFhYzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CuV/K+aGpfIuG7bbRxcG7jWXGfU
aA5VQ+xKXtLSmruTpCmwPYnRy9ZgMTRlJxrz6QFtbF9sUJme11ezH+xbM7ttF13Z
K7/nBL+tR8+mRHmXI62G4UHCUsEcfy4IVlBLNzDy9LH8VNBEcuiAt5gucZRBZPFl
fN9CbNMGCDaxAV33h9/RQRG70Ls5nFioF9e+nhqvsfIZbxueWDGXz8RMP8BW6q9K
ogP8VYg+AqzU8mTwkfHaBCud3LeKICRkSdQY8FY6Jdj4ma1201os2ekB+5HuMwbQ
LwYLse1j6d4uNl21w7RIvo2hVrEYUA0EK/E7Xd0ySIToYc/1NYorxaURFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNA/jmldrAI2wWKuP8SuG9rE0ax/MB8GA1UdIwQY
MBaAFD6/r4oao7wf8+PkMMZ/t6ZBCj33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yMThiMGUtNTRiNS00YWQwLTlhYTAt
ZWZkMWEwOThiNDg1LzEvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8yMThiMGUtNTRiNS00YWQwLTlhYTAtZWZkMWEwOThiNDg1
LzEvUHItdmlocWp2Ql96NC1Rd3huLTNwa0VLUGZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBgZdVRP
a3owq9HYle/ni9uBy61e9oxvUCa+xXEQ2Rgq83G3XA3zO65S72sJOsmFpEqJoUCm
r65Q1I/b2qAKHywTddymI5GZpONFNdJDwndGqS1exkARPkHLCDz5oD6aPjROAV+V
AF8nji2l6eMJmvXHVrrGlf9QHfjY4ag2UtjFYdNevcJ+5b7rfp/4Lsxs5sG8ak/q
7jVbfO80UF4h4xOWCi1tbySBLKCpJktRmDIklZX1JdFSkoSpk17OtYUKRBRqva0i
linh+q1j9B3m0DqHlIKY2941mIGFDDtJqGeRTLElzaQ6x+Z6iIEkn2v9eJZYNzfc
S80hVxWh3/XN9A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:34:43 2025 by rpki-client