Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
File: 0s3V8WKiZ4AAA88wwY6c684nTsU.mft (raw, json)
Hash identifier: +CcYtlWKIF3wjin4FJMAqV4zRxFZKJ4DTPq3Kte8R3E=
Subject key identifier: B4:9B:7F:80:B1:D0:3A:6B:0F:31:76:66:23:1B:B4:64:40:1A:DE:4D
Authority key identifier: D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
Certificate issuer: /CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Certificate serial: 019748C36F4BE201F02056B398F5690E85D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
Manifest number: 080F
Signing time: Sat 07 Jun 2025 05:00:56 +0000
Manifest this update: Sat 07 Jun 2025 05:00:56 +0000
Manifest next update: Sun 08 Jun 2025 05:00:56 +0000
Files and hashes: 1: 0s3V8WKiZ4AAA88wwY6c684nTsU.crl (hash: 4EvXpRFMhmtGV7WB5niO9VHTZa+xQq4YthRbg9pT4Hc=)
2: 4d-M2xoibAEms_RDQ9mCEYeUNpg.roa (hash: wVeVUALjyzMUssmf4Hte549aQq7kwv7Or9f/6VG17Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:6f:4b:e2:01:f0:20:56:b3:98:f5:69:0e:85:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Validity
Not Before: Jun 7 05:00:56 2025 GMT
Not After : Jun 8 05:00:56 2025 GMT
Subject: CN=b49b7f80b1d03a6b0f317666231bb464401ade4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:64:23:9c:67:84:44:07:5d:d7:75:68:c8:92:
25:6d:28:bc:eb:bf:8d:d9:d8:d4:63:62:34:9c:c4:
23:d7:3f:f1:c6:d5:0c:b7:2e:7a:bb:a3:9b:24:91:
cb:df:72:d0:bf:01:bd:5a:12:35:cd:89:86:c2:5c:
a9:ed:e2:4b:c8:62:c1:36:a4:1f:f0:50:c9:2f:c0:
93:e0:52:2b:93:e3:bb:71:bc:15:1c:51:88:b3:a7:
5b:20:07:66:b3:39:ea:0f:85:d0:1b:30:53:0d:07:
35:ec:24:9f:c3:23:07:da:57:b5:82:d6:05:b7:7b:
37:e3:01:1f:05:9d:16:ee:b1:d1:80:86:b0:d4:d8:
bf:b1:ea:1c:25:ee:19:42:6b:71:36:e7:16:b6:dd:
47:e2:5f:e8:b8:a8:93:b5:11:a1:11:eb:e1:58:47:
b4:dc:d4:e8:13:98:d5:85:9d:36:42:75:f9:84:db:
ab:c9:dc:ad:3a:0d:9b:4e:75:f7:07:2f:c6:fe:9d:
98:37:57:94:9b:62:6f:2f:55:d4:a4:ef:c6:14:e9:
38:34:e7:41:d5:60:b7:3b:02:78:e1:6f:4e:5a:f3:
af:d3:4a:24:0f:aa:1c:eb:fc:ab:51:35:f9:d2:2b:
fa:dd:06:8c:6c:eb:22:e3:fc:dd:d1:56:88:2b:09:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9B:7F:80:B1:D0:3A:6B:0F:31:76:66:23:1B:B4:64:40:1A:DE:4D
X509v3 Authority Key Identifier:
keyid:D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:19:f1:b2:00:b7:c2:c5:78:08:57:74:52:7e:b3:dd:e7:4c:
e5:8d:f1:31:fa:d7:25:90:b4:a1:3a:de:42:96:34:8a:1d:17:
af:4e:97:d9:59:9b:5f:01:0e:bd:7e:84:7d:66:48:90:3a:26:
7d:62:15:e7:ac:c9:7e:17:aa:de:df:81:b6:44:3d:2f:69:0c:
24:25:db:1f:b9:fc:8e:d4:b8:a0:da:ac:dd:5d:fb:2e:8b:71:
10:e1:ec:f9:fd:7d:01:27:aa:df:38:0a:f1:7f:50:29:d0:53:
4c:e0:a7:52:0f:c4:2c:86:ad:c4:d1:17:84:2d:50:b7:cf:a7:
a3:c9:c0:83:54:9e:6f:e5:9c:31:f9:e4:37:49:4e:08:8e:5f:
83:7b:13:0a:45:fc:66:4f:f8:31:4c:26:4d:67:81:79:e7:10:
c8:45:09:ac:cd:bd:a2:d1:29:6b:1d:e7:db:fd:99:99:5f:c4:
7d:7f:2c:9c:be:ec:1d:56:fb:0d:13:5e:12:77:04:4a:d9:f2:
38:ec:ca:6d:60:fa:e0:ec:0b:85:34:e3:3f:a1:a9:3e:4c:72:
61:1d:d6:ca:a9:a7:8b:0d:17:c0:05:ee:12:e1:b5:b2:68:bb:
5b:a8:6e:5b:09:8b:86:94:e0:34:e4:da:f8:2c:7a:60:0a:d7:
2d:ee:b2:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIw29L4gHwIFazmPVpDoXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyY2RkNWYxNjJhMjY3ODAwMDAzY2YzMGMxOGU5Y2ViY2Uy
NzRlYzUwHhcNMjUwNjA3MDUwMDU2WhcNMjUwNjA4MDUwMDU2WjAzMTEwLwYDVQQD
EyhiNDliN2Y4MGIxZDAzYTZiMGYzMTc2NjYyMzFiYjQ2NDQwMWFkZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2QjnGeERAdd13VoyJIlbSi867+N
2djUY2I0nMQj1z/xxtUMty56u6ObJJHL33LQvwG9WhI1zYmGwlyp7eJLyGLBNqQf
8FDJL8CT4FIrk+O7cbwVHFGIs6dbIAdmsznqD4XQGzBTDQc17CSfwyMH2le1gtYF
t3s34wEfBZ0W7rHRgIaw1Ni/seocJe4ZQmtxNucWtt1H4l/ouKiTtRGhEevhWEe0
3NToE5jVhZ02QnX5hNurydytOg2bTnX3By/G/p2YN1eUm2JvL1XUpO/GFOk4NOdB
1WC3OwJ44W9OWvOv00okD6oc6/yrUTX50iv63QaMbOsi4/zd0VaIKwnoEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSbf4Cx0DprDzF2ZiMbtGRAGt5NMB8GA1UdIwQY
MBaAFNLN1fFiomeAAAPPMMGOnOvOJ07FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHMzVjhXS2laNEFBQTg4d3dZNmM2ODRuVHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZWFhZDgtMzExMy00NTEyLWE5Y2Ut
MzU4MjQzYzU1MWEyLzEvMHMzVjhXS2laNEFBQTg4d3dZNmM2ODRuVHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9kZWFhZDgtMzExMy00NTEyLWE5Y2UtMzU4MjQzYzU1MWEy
LzEvMHMzVjhXS2laNEFBQTg4d3dZNmM2ODRuVHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRnxsgC3
wsV4CFd0Un6z3edM5Y3xMfrXJZC0oTreQpY0ih0Xr06X2VmbXwEOvX6EfWZIkDom
fWIV56zJfheq3t+BtkQ9L2kMJCXbH7n8jtS4oNqs3V37LotxEOHs+f19ASeq3zgK
8X9QKdBTTOCnUg/ELIatxNEXhC1Qt8+no8nAg1Seb+WcMfnkN0lOCI5fg3sTCkX8
Zk/4MUwmTWeBeecQyEUJrM29otEpax3n2/2ZmV/EfX8snL7sHVb7DRNeEncEStny
OOzKbWD64OwLhTTjP6GpPkxyYR3Wyqmniw0XwAXuEuG1smi7W6huWwmLhpTgNOTa
+Cx6YArXLe6ySA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:39:44 2025 by rpki-client