Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json)
Hash identifier: iHONQAqfK9GSxzww51SOR85FMIjPaPDMltYw8aC+nfc=
Subject key identifier: 6A:61:E2:37:40:D5:43:B9:A4:A8:45:C9:5B:FF:ED:1D:C2:61:44:15
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial: 019748C2D8F972B1D80CFA416C5A60DFBA62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
Manifest number: 0204
Signing time: Sat 07 Jun 2025 05:00:18 +0000
Manifest this update: Sat 07 Jun 2025 05:00:18 +0000
Manifest next update: Sun 08 Jun 2025 05:00:18 +0000
Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: kEISrEpsHxxA9rm0rpnR1GYFjAoOwfWpHF9Vu9v5Pzg=)
2: wSO8Qf5_v1p-oNDifbsTI9tUaPY.roa (hash: t8VFb4R1YuauyoB16s9G5smfDaNXuP879i5idHgDRZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:d8:f9:72:b1:d8:0c:fa:41:6c:5a:60:df:ba:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Validity
Not Before: Jun 7 05:00:18 2025 GMT
Not After : Jun 8 05:00:18 2025 GMT
Subject: CN=6a61e23740d543b9a4a845c95bffed1dc2614415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:bd:43:4b:8a:e1:38:3f:7b:3a:49:1a:42:
88:38:bd:d6:72:51:06:a6:be:9f:e3:2b:fa:99:4a:
8d:9d:6c:08:89:34:05:f1:e4:4a:a5:64:93:5c:5d:
0a:0d:7f:6c:57:fb:66:ac:b2:78:4e:df:22:0e:74:
f7:2f:1e:4b:c1:10:99:5c:cb:1b:66:b8:73:2f:02:
26:a9:22:07:ed:e3:76:0e:63:7b:6f:28:e3:37:22:
02:a9:c1:16:0a:2d:39:3e:cd:db:61:d9:75:11:c0:
95:b9:40:90:7c:13:84:e6:f2:ab:b6:4b:4f:8c:00:
01:ec:53:97:8a:62:b8:e5:29:aa:07:0c:20:d3:1f:
ed:4b:e6:84:47:0d:e7:81:cd:85:17:40:93:80:7b:
b1:38:41:2f:35:7d:69:41:8a:e2:f6:9a:5e:72:19:
56:8b:ff:6c:fa:6c:ac:3f:1e:bf:d7:8a:58:af:88:
02:27:46:a1:15:01:0f:63:ff:8f:8c:75:81:fb:12:
16:d3:2c:a9:e2:56:3a:51:7b:a7:4c:0e:0a:81:1e:
e9:86:25:93:2d:e1:95:e6:01:b6:49:ab:00:a5:d5:
94:57:92:54:eb:71:04:92:68:45:0c:a0:03:dd:79:
52:14:5a:e0:9c:2b:60:61:02:bb:5f:13:5e:47:89:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:61:E2:37:40:D5:43:B9:A4:A8:45:C9:5B:FF:ED:1D:C2:61:44:15
X509v3 Authority Key Identifier:
keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6d:bb:b8:e8:b3:56:b9:61:04:21:e2:42:10:c8:7e:49:f7:
92:4e:6d:5a:36:95:c4:b1:c1:56:c7:5a:2a:0d:e2:75:2e:ba:
0f:d3:a5:65:8a:62:c4:c5:2b:f0:0c:59:0a:95:50:99:d9:88:
2e:b5:fe:51:5b:6a:c3:00:d0:c0:fa:60:f9:ea:80:cf:34:23:
0a:0c:56:98:c0:22:e2:60:2e:4f:cf:fb:94:7b:d7:22:3e:d8:
06:47:68:de:ed:b7:11:c8:96:40:84:94:ba:b1:91:da:9b:e5:
b4:97:6e:fe:b5:33:a1:67:57:89:1c:70:21:0b:42:22:54:45:
b7:0f:4d:56:db:ab:74:e4:d2:11:ab:c5:14:c6:56:53:c6:b9:
61:ea:ee:ca:47:97:ee:3c:e6:ce:56:2f:13:9c:3b:b6:c0:c6:
56:b4:22:d7:31:70:74:be:98:d3:6f:3b:3c:16:92:f9:69:a4:
c5:9f:f3:59:cb:6d:1a:43:99:9a:0f:ab:3b:b5:16:b5:71:37:
78:f0:2c:2c:a0:53:66:9f:fb:20:ec:17:45:af:75:3d:09:32:
e7:a6:41:3d:61:aa:4c:eb:87:94:82:c8:81:24:98:89:28:04:
ad:61:e4:77:66:e4:a6:58:f0:7a:f6:55:ff:b0:7a:b0:fe:40:
be:80:64:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIwtj5crHYDPpBbFpg37piMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOGUzODE4N2FlNzBjYmM3YmVkNjk1NzU5ZjBlMDMyOTlm
YmIzMDIwHhcNMjUwNjA3MDUwMDE4WhcNMjUwNjA4MDUwMDE4WjAzMTEwLwYDVQQD
Eyg2YTYxZTIzNzQwZDU0M2I5YTRhODQ1Yzk1YmZmZWQxZGMyNjE0NDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW69Q0uK4Tg/ezpJGkKIOL3WclEG
pr6f4yv6mUqNnWwIiTQF8eRKpWSTXF0KDX9sV/tmrLJ4Tt8iDnT3Lx5LwRCZXMsb
ZrhzLwImqSIH7eN2DmN7byjjNyICqcEWCi05Ps3bYdl1EcCVuUCQfBOE5vKrtktP
jAAB7FOXimK45SmqBwwg0x/tS+aERw3ngc2FF0CTgHuxOEEvNX1pQYri9ppechlW
i/9s+mysPx6/14pYr4gCJ0ahFQEPY/+PjHWB+xIW0yyp4lY6UXunTA4KgR7phiWT
LeGV5gG2SasApdWUV5JU63EEkmhFDKAD3XlSFFrgnCtgYQK7XxNeR4kPgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGph4jdA1UO5pKhFyVv/7R3CYUQVMB8GA1UdIwQY
MBaAFN6OOBh65wy8e+1pV1nw4DKZ+7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ODBjMTEtMzkxMy00NDc5LWJlYTMt
NWIxZjQ4YjNlMjE0LzEvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81ODBjMTEtMzkxMy00NDc5LWJlYTMtNWIxZjQ4YjNlMjE0
LzEvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaW27uOiz
VrlhBCHiQhDIfkn3kk5tWjaVxLHBVsdaKg3idS66D9OlZYpixMUr8AxZCpVQmdmI
LrX+UVtqwwDQwPpg+eqAzzQjCgxWmMAi4mAuT8/7lHvXIj7YBkdo3u23EciWQISU
urGR2pvltJdu/rUzoWdXiRxwIQtCIlRFtw9NVturdOTSEavFFMZWU8a5YeruykeX
7jzmzlYvE5w7tsDGVrQi1zFwdL6Y0287PBaS+WmkxZ/zWcttGkOZmg+rO7UWtXE3
ePAsLKBTZp/7IOwXRa91PQky56ZBPWGqTOuHlILIgSSYiSgErWHkd2bkpljwevZV
/7B6sP5AvoBknQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:38:43 2025 by rpki-client