Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: fDpVku3DNlf8r2iSk4OXWcFEgLcgaUjmTahbz8URyaI=
Subject key identifier: AD:67:C1:EF:66:E0:36:CE:B6:13:79:97:12:9C:53:A9:7F:78:B8:92
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 01974BFB25632F267CCD0F7F1211586F83B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 20:00:39 +0000
Manifest this update: Sat 07 Jun 2025 20:00:39 +0000
Manifest next update: Sun 08 Jun 2025 20:00:39 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: wqliBCKPpYa0R+p+DpEMMiUV/GCndXjqd8vr8xOyqJQ=)
2: L9b4ducPYyR6qc5uaeOni9YJQHA.roa (hash: vaOymUj3eUPmbh7xiKllx8KgzftTh5qvMK+aeen3RXg=)
3: kpbrBAbvkEz7iwjj9qvNJnx2KAI.roa (hash: EaUeR1cKI29E16jF0XdNnwUwftG+vurlmN50dR3srjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:25:63:2f:26:7c:cd:0f:7f:12:11:58:6f:83:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Jun 7 20:00:39 2025 GMT
Not After : Jun 8 20:00:39 2025 GMT
Subject: CN=ad67c1ef66e036ceb6137997129c53a97f78b892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:78:1e:16:43:dd:b9:9f:62:cd:b5:ab:25:
c6:6f:b9:b4:e7:e9:32:1f:c3:cb:e5:1a:3c:8e:66:
c9:6e:6f:a0:06:6c:fc:b6:4d:7a:67:7e:31:85:52:
16:73:bd:65:02:d9:a5:26:73:86:d5:df:69:c2:c3:
f7:ae:c2:1f:bb:f6:a6:fa:af:78:30:a8:c2:35:57:
7e:df:af:8d:39:c7:df:8e:fd:20:35:5c:1b:dc:f3:
3e:82:b7:9a:1e:a1:2f:b8:87:bf:1c:b0:0d:67:75:
0d:4b:1c:9f:80:14:07:ca:0a:4c:e1:15:6f:3a:cd:
c1:75:59:62:77:40:2f:87:5c:68:89:1b:b2:db:fd:
e6:03:27:f2:46:2f:ae:7a:4c:a7:e2:6d:3a:4d:db:
e7:75:74:9c:2f:68:7d:50:70:60:17:bc:c8:58:10:
24:5a:fc:b7:72:0e:83:3f:fc:83:1f:86:af:97:88:
3f:b4:68:92:3b:e6:53:d3:50:81:35:3d:c5:14:5f:
29:cc:b4:da:5b:4c:a3:38:b5:26:11:4a:a8:c0:05:
8b:05:aa:8c:1b:6d:8d:56:d5:33:2c:ff:86:dd:7b:
8d:95:85:4b:d9:d0:d3:0d:95:4a:8a:5a:5f:db:2f:
0a:b4:fe:ad:73:61:95:30:29:87:d5:88:37:4f:18:
37:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:67:C1:EF:66:E0:36:CE:B6:13:79:97:12:9C:53:A9:7F:78:B8:92
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:be:29:fd:61:ca:07:fa:bd:bf:f4:84:22:7e:1e:a2:d2:c9:
65:97:93:da:df:e6:cd:31:9f:5d:ef:c8:a0:04:1e:e0:ba:36:
fd:b7:33:e9:60:cd:97:02:1a:30:b4:27:51:31:0b:79:1f:6e:
c2:ff:1a:b9:1b:64:ec:e6:79:62:a0:26:bb:46:15:15:79:2e:
a7:fd:75:c3:f2:5b:a2:e5:65:ad:f8:7f:00:56:e1:03:b8:d0:
ec:d4:df:f0:79:ef:f4:70:22:95:81:f4:64:84:a5:43:63:b3:
9e:db:20:ec:69:49:02:88:94:5b:79:c7:e1:3b:9d:a2:42:38:
52:10:48:5c:71:e9:46:08:3f:71:43:c4:da:5c:c0:e9:89:db:
e3:05:8d:74:6a:b0:64:86:56:da:8a:39:e6:82:4e:51:52:66:
23:77:13:d8:0b:db:35:af:41:6f:99:8d:4f:8e:0d:96:b1:33:
3d:0a:c6:ed:1d:1c:ca:4c:c0:96:e4:ae:27:c5:8f:6a:bf:54:
45:e5:45:68:33:a5:49:3b:8d:72:ec:43:8d:8a:b4:1e:01:52:
53:77:4a:53:c6:8a:0b:01:d1:17:63:90:25:dc:bb:06:fa:ed:
e1:9e:04:48:1a:39:49:0a:f1:d9:00:70:13:9f:5d:ab:59:b0:
14:e4:e6:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+yVjLyZ8zQ9/EhFYb4OxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNjNlYjYzMTliYTQ1NGQzOTc2NDU5NDVjZTU0Mzk1NzZm
YWM3NDEwHhcNMjUwNjA3MjAwMDM5WhcNMjUwNjA4MjAwMDM5WjAzMTEwLwYDVQQD
EyhhZDY3YzFlZjY2ZTAzNmNlYjYxMzc5OTcxMjljNTNhOTdmNzhiODkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmV4HhZD3bmfYs21qyXGb7m05+ky
H8PL5Ro8jmbJbm+gBmz8tk16Z34xhVIWc71lAtmlJnOG1d9pwsP3rsIfu/am+q94
MKjCNVd+36+NOcffjv0gNVwb3PM+greaHqEvuIe/HLANZ3UNSxyfgBQHygpM4RVv
Os3BdVlid0Avh1xoiRuy2/3mAyfyRi+uekyn4m06TdvndXScL2h9UHBgF7zIWBAk
Wvy3cg6DP/yDH4avl4g/tGiSO+ZT01CBNT3FFF8pzLTaW0yjOLUmEUqowAWLBaqM
G22NVtUzLP+G3XuNlYVL2dDTDZVKilpf2y8KtP6tc2GVMCmH1Yg3Txg3owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1nwe9m4DbOthN5lxKcU6l/eLiSMB8GA1UdIwQY
MBaAFN5j62MZukVNOXZFlFzlQ5V2+sdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMt
MWUxOGY1YjQ5MDVkLzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS85MzI3YTctODFiZi00ZjdkLTlmNWMtMWUxOGY1YjQ5MDVk
LzEvM21Qcll4bTZSVTA1ZGtXVVhPVkRsWGI2eDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk74p/WHK
B/q9v/SEIn4eotLJZZeT2t/mzTGfXe/IoAQe4Lo2/bcz6WDNlwIaMLQnUTELeR9u
wv8auRtk7OZ5YqAmu0YVFXkup/11w/JbouVlrfh/AFbhA7jQ7NTf8Hnv9HAilYH0
ZISlQ2Ozntsg7GlJAoiUW3nH4TudokI4UhBIXHHpRgg/cUPE2lzA6Ynb4wWNdGqw
ZIZW2oo55oJOUVJmI3cT2AvbNa9Bb5mNT44NlrEzPQrG7R0cykzAluSuJ8WPar9U
ReVFaDOlSTuNcuxDjYq0HgFSU3dKU8aKCwHRF2OQJdy7Bvrt4Z4ESBo5SQrx2QBw
E59dq1mwFOTm0g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:08:04 2025 by rpki-client