Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier: 5kTksGwqzjfchawl8ggx0csz5OMz3ePZC9TlZ6+n0j4=
Subject key identifier: 02:6A:E9:F1:3C:EC:7E:B7:19:96:C5:25:B0:69:B6:C8:76:ED:53:73
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 019764A85AA51741FCB108B535CEA3CD324A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number: 0DE8
Signing time: Thu 12 Jun 2025 15:00:44 +0000
Manifest this update: Thu 12 Jun 2025 15:00:44 +0000
Manifest next update: Fri 13 Jun 2025 15:00:44 +0000
Files and hashes: 1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: apEVJcj9D3PPPf+zalqjdNP7rg7jjrWo60ln/+UYTtc=)
2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:a8:5a:a5:17:41:fc:b1:08:b5:35:ce:a3:cd:32:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Jun 12 15:00:44 2025 GMT
Not After : Jun 13 15:00:44 2025 GMT
Subject: CN=026ae9f13cec7eb71996c525b069b6c876ed5373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:90:cb:20:11:ea:2f:b1:ca:96:88:f7:23:
9a:54:cb:2a:a9:68:d6:1c:c5:1f:44:4b:ac:48:1a:
ce:e9:dd:64:3f:de:3d:b1:2f:4b:52:70:35:cd:b1:
f6:a3:01:7b:5f:3a:80:ea:05:5d:45:ad:8b:14:8f:
02:db:98:65:1d:73:7f:9b:5d:a5:4e:70:8b:f5:9a:
d1:da:5e:55:2b:d2:1b:fc:47:fb:93:cf:57:1a:b2:
ee:6f:61:09:5d:88:76:48:43:9b:88:e7:70:37:5c:
51:00:54:6d:23:2d:48:e2:4d:b8:0e:c5:86:ce:c3:
b8:5a:e2:f1:4c:19:bd:c1:c1:0a:68:f8:02:89:54:
f0:73:b6:69:77:ae:b3:b6:0c:5d:e1:a3:57:63:a3:
f1:a2:c3:ed:c8:60:c3:d6:d7:dd:22:0a:89:4d:ff:
49:e1:10:5f:ca:29:cf:f8:1f:3d:af:2d:6c:0b:a1:
e5:f5:db:36:35:9e:13:ef:a4:8d:e8:8f:b8:9f:84:
3b:71:78:63:32:32:42:05:d4:61:22:84:72:32:b0:
9f:28:2c:e4:41:ad:7c:6a:84:d7:f5:28:b9:fc:22:
05:93:73:4d:e8:69:b5:49:53:fe:7a:fa:00:4b:d1:
b9:e0:33:11:40:ce:e5:dc:d3:ea:19:b0:bb:0e:ad:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6A:E9:F1:3C:EC:7E:B7:19:96:C5:25:B0:69:B6:C8:76:ED:53:73
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6a:6f:fd:02:0e:d9:39:e5:4e:b3:1d:4c:7e:d4:6c:5a:cd:
f5:24:cc:6e:62:94:ed:20:cd:28:a6:2a:05:b7:a0:d3:ee:31:
b8:c9:fb:34:24:61:25:2b:af:ea:f7:a8:5c:82:ef:4c:43:04:
bf:49:f5:89:ee:aa:fe:e3:eb:d7:2d:eb:9a:1f:80:bf:57:d7:
f5:f3:6f:81:32:0e:f2:3d:2a:8a:34:04:77:01:9a:e8:47:d3:
4e:95:a3:75:af:8f:41:79:af:00:00:cd:33:39:7e:a0:e7:42:
02:64:b7:94:1f:3b:7b:53:e5:2a:33:94:40:a2:74:9d:e1:81:
0c:59:ae:4d:7a:d0:d4:03:a1:7b:48:73:30:bd:7a:9e:0c:06:
dc:94:fa:60:7b:e5:6d:90:f9:4d:07:b7:d7:e1:ab:f9:85:1b:
62:e8:9e:de:28:b8:bd:36:d4:32:5d:53:95:5f:25:df:47:2c:
16:29:44:16:89:c4:96:42:de:41:1e:18:82:12:27:ea:70:0c:
3f:02:4e:ca:03:83:75:fb:19:50:93:ec:59:1e:a4:cd:f5:ed:
f6:98:d2:fe:ea:78:eb:e1:df:b9:0a:cd:4c:2b:7b:45:0a:7b:
08:6d:39:40:ff:aa:4d:63:59:72:de:e5:98:99:a3:ff:35:18:
14:6f:06:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdkqFqlF0H8sQi1Nc6jzTJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzliOTVkOGE1OGZjY2E2YTgxMmU3NzdlN2VmNjk0NTNm
OGFjOTgwHhcNMjUwNjEyMTUwMDQ0WhcNMjUwNjEzMTUwMDQ0WjAzMTEwLwYDVQQD
EygwMjZhZTlmMTNjZWM3ZWI3MTk5NmM1MjViMDY5YjZjODc2ZWQ1MzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohaQyyAR6i+xypaI9yOaVMsqqWjW
HMUfREusSBrO6d1kP949sS9LUnA1zbH2owF7XzqA6gVdRa2LFI8C25hlHXN/m12l
TnCL9ZrR2l5VK9Ib/Ef7k89XGrLub2EJXYh2SEObiOdwN1xRAFRtIy1I4k24DsWG
zsO4WuLxTBm9wcEKaPgCiVTwc7Zpd66ztgxd4aNXY6PxosPtyGDD1tfdIgqJTf9J
4RBfyinP+B89ry1sC6Hl9ds2NZ4T76SN6I+4n4Q7cXhjMjJCBdRhIoRyMrCfKCzk
Qa18aoTX9Si5/CIFk3NN6Gm1SVP+evoAS9G54DMRQM7l3NPqGbC7Dq2CYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJq6fE87H63GZbFJbBptsh27VNzMB8GA1UdIwQY
MBaAFBd5uV2KWPzKaoEud35+9pRT+KyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYt
NDA3ZTNmZTYzOTQ1LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYtNDA3ZTNmZTYzOTQ1
LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWpv/QIO
2TnlTrMdTH7UbFrN9STMbmKU7SDNKKYqBbeg0+4xuMn7NCRhJSuv6veoXILvTEME
v0n1ie6q/uPr1y3rmh+Av1fX9fNvgTIO8j0qijQEdwGa6EfTTpWjda+PQXmvAADN
Mzl+oOdCAmS3lB87e1PlKjOUQKJ0neGBDFmuTXrQ1AOhe0hzML16ngwG3JT6YHvl
bZD5TQe31+Gr+YUbYuie3ii4vTbUMl1TlV8l30csFilEFonElkLeQR4YghIn6nAM
PwJOygODdfsZUJPsWR6kzfXt9pjS/up46+HfuQrNTCt7RQp7CG05QP+qTWNZct7l
mJmj/zUYFG8Gxw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 21:29:58 2025 by rpki-client