Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
File: P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json)
Hash identifier: +dp0x84nWqw4VU/FuvJ7EAx4t/q9UMu0BGEz5v70M6s=
Subject key identifier: FB:A2:E8:F3:C3:4C:56:95:F0:92:46:4B:98:8E:EE:70:2D:53:1C:2C
Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
Certificate issuer: /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Certificate serial: 01976094C2EE7FE7869267CA776B256A63BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
Manifest number: 03DE
Signing time: Wed 11 Jun 2025 20:00:51 +0000
Manifest this update: Wed 11 Jun 2025 20:00:51 +0000
Manifest next update: Thu 12 Jun 2025 20:00:51 +0000
Files and hashes: 1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: 8E07vcK3RK2fiKHW9q5yloBhNC+4MsGCupN3c7s/4v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:94:c2:ee:7f:e7:86:92:67:ca:77:6b:25:6a:63:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Validity
Not Before: Jun 11 20:00:51 2025 GMT
Not After : Jun 12 20:00:51 2025 GMT
Subject: CN=fba2e8f3c34c5695f092464b988eee702d531c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:77:0a:de:0b:66:79:4d:c3:8b:5c:99:bc:
85:49:ec:be:8e:18:11:0e:30:74:33:71:9b:1c:13:
c3:3c:c6:71:16:34:5c:0d:c9:35:96:31:f6:fb:07:
89:4a:4b:ad:ea:45:d9:27:42:bf:a2:63:52:ed:b3:
97:78:36:7a:e4:9d:d2:3a:ab:b9:e0:00:02:47:91:
4a:37:e2:f3:5b:04:6c:5c:cc:37:ce:b7:9a:ff:84:
09:16:e9:2e:f3:25:c5:6c:58:ba:3a:d8:6d:4e:43:
c0:9c:f7:72:ea:9b:7d:80:7b:05:34:0d:0e:20:a8:
c1:cc:ac:45:72:06:9f:a5:99:84:ec:90:ce:ec:7e:
13:12:63:c3:17:e2:20:d9:9a:4f:b9:68:7b:61:71:
a6:54:26:a1:47:e9:31:5a:a9:1b:6e:a4:ae:ba:b1:
43:ca:da:59:d6:61:21:3c:49:12:41:5c:ea:b4:1e:
8a:69:78:da:bf:15:4e:c3:02:cf:3a:3f:8b:b0:ee:
33:27:20:75:6c:12:94:b6:fa:60:4d:c5:67:5d:da:
73:4f:d4:15:2c:57:8c:65:3a:34:ee:61:25:1c:3d:
2e:bf:65:9e:50:2b:f7:6a:46:a6:d8:a4:ea:e4:bf:
51:e6:6d:52:a9:4c:70:a1:b0:07:d3:40:90:02:42:
b5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A2:E8:F3:C3:4C:56:95:F0:92:46:4B:98:8E:EE:70:2D:53:1C:2C
X509v3 Authority Key Identifier:
keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b3:d0:67:6a:07:38:eb:fc:53:c4:3b:5d:16:46:2d:01:84:
6c:19:01:c4:f2:5c:88:09:c0:03:76:85:cf:48:5a:eb:e8:2a:
e2:54:dd:86:9c:71:47:22:3e:0f:0a:e2:80:31:90:13:56:e6:
f7:50:df:f4:e0:c8:b2:f6:51:25:40:52:55:93:0a:8d:de:5b:
ba:f6:5f:48:d0:42:b2:4a:76:be:5d:a1:ea:91:96:0f:45:f7:
91:29:1d:f5:f2:32:d3:df:03:08:30:c8:f2:2b:6d:9f:a4:54:
71:29:e3:27:ae:f7:25:57:34:a6:34:33:58:a5:b0:4c:4c:d0:
cd:ec:09:0e:d1:5e:a4:a7:cd:18:bf:9c:ea:41:10:cc:04:92:
71:32:6d:17:bf:18:2b:c0:df:51:08:41:d8:9b:45:af:40:74:
47:cd:3b:86:08:29:37:2c:11:cf:ed:9d:2b:40:d2:7a:df:3f:
86:5d:85:7b:27:33:ba:de:ef:ca:55:c0:d6:7a:91:99:50:47:
12:e1:6f:c7:16:30:1f:5a:4a:22:7f:fc:db:3b:6f:02:67:0d:
37:37:6d:f9:66:03:0d:67:09:8b:81:e7:a5:72:84:8e:9c:36:
e3:f3:f8:c1:db:05:22:6b:4d:c8:08:c2:d1:ef:42:70:1a:a2:
41:a4:06:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdglMLuf+eGkmfKd2slamO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNWJhNjFmY2U1NWZmNWY2MDhlM2FmNmVjNTYwYjM3YWVj
MjM1ZmYwHhcNMjUwNjExMjAwMDUxWhcNMjUwNjEyMjAwMDUxWjAzMTEwLwYDVQQD
EyhmYmEyZThmM2MzNGM1Njk1ZjA5MjQ2NGI5ODhlZWU3MDJkNTMxYzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoZ3Ct4LZnlNw4tcmbyFSey+jhgR
DjB0M3GbHBPDPMZxFjRcDck1ljH2+weJSkut6kXZJ0K/omNS7bOXeDZ65J3SOqu5
4AACR5FKN+LzWwRsXMw3zrea/4QJFuku8yXFbFi6OthtTkPAnPdy6pt9gHsFNA0O
IKjBzKxFcgafpZmE7JDO7H4TEmPDF+Ig2ZpPuWh7YXGmVCahR+kxWqkbbqSuurFD
ytpZ1mEhPEkSQVzqtB6KaXjavxVOwwLPOj+LsO4zJyB1bBKUtvpgTcVnXdpzT9QV
LFeMZTo07mElHD0uv2WeUCv3akam2KTq5L9R5m1SqUxwobAH00CQAkK18wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPui6PPDTFaV8JJGS5iO7nAtUxwsMB8GA1UdIwQY
MBaAFD9bph/OVf9fYI469uxWCzeuwjX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZGM0ZWUtYmIxMC00YzE1LTk0NTct
M2JkYjBlYzE0ODAwLzEvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hZGM0ZWUtYmIxMC00YzE1LTk0NTctM2JkYjBlYzE0ODAw
LzEvUDF1bUg4NVZfMTlnampyMjdGWUxONjdDTmY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7PQZ2oH
OOv8U8Q7XRZGLQGEbBkBxPJciAnAA3aFz0ha6+gq4lTdhpxxRyI+DwrigDGQE1bm
91Df9ODIsvZRJUBSVZMKjd5buvZfSNBCskp2vl2h6pGWD0X3kSkd9fIy098DCDDI
8ittn6RUcSnjJ673JVc0pjQzWKWwTEzQzewJDtFepKfNGL+c6kEQzASScTJtF78Y
K8DfUQhB2JtFr0B0R807hggpNywRz+2dK0DSet8/hl2Feyczut7vylXA1nqRmVBH
EuFvxxYwH1pKIn/82ztvAmcNNzdt+WYDDWcJi4HnpXKEjpw24/P4wdsFImtNyAjC
0e9CcBqiQaQGdg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 21:57:43 2025 by rpki-client