Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File: 0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier: U7L0nKjrL6LT2LggNE9otzHdHv5i2JMcZjobDRw5xOI=
Subject key identifier: C1:DF:4D:C4:19:D4:D9:72:1D:5E:49:46:D1:20:0B:47:10:79:6C:7C
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0197512205B47F9961870CF076C7A6D2B5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number: 0924
Signing time: Sun 08 Jun 2025 20:01:13 +0000
Manifest this update: Sun 08 Jun 2025 20:01:13 +0000
Manifest next update: Mon 09 Jun 2025 20:01:13 +0000
Files and hashes: 1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: +RqZkdYf6uMR7UuD+uleDvd1T9huEugOByscG5hLRqQ=)
2: 73fgtycAM2crZ_LHwWRiB0oEU9Y.roa (hash: flrMOVA6rk3M5Itkv7RZo+kAVGvmhl0NxmnJ1f7lgFI=)
3: 73r0yHigeP71uLa7NYE9z1RHaDw.roa (hash: Jbt96nWXVe5WPVo962Y5M8IHa7FOt8IKPobN6TJWliA=)
4: Bt-AqMlv5AGS23NSAHAOENpSz_w.roa (hash: Om38jAdn/FiagKwN0JD11FdBcj5g/guHfAWt957SB1c=)
5: EVNYCEZdUMzdR7485Sxb1aaU4DE.roa (hash: J2TH0tVcNlED4eWHymgRzOY7kV7+JyPdA6oqZNJJZbw=)
6: Eey_cZJG1JzbE89yJ5-3WKAQnps.roa (hash: Sd/BEYaeo7DwAgjKLvAs+URaNM8tk1wO8kSwFI5eaf8=)
7: G6xf-2_9WqQfQEDF7v7pcNM6cBg.roa (hash: hCbc2HcFchj9v9WZR4JcZ3aDEye7Ter5KkTxwI9k97k=)
8: YcTIc32XZA-ghsWcGzLeleFcTdg.roa (hash: hArIQsrZH8U5ODHNwYYROkxmUYJ8DizJuV1l/Z6DTPE=)
9: xMV0bTTXomTVa8xc0iCn0sD7g_Q.roa (hash: 43WOZICTIxPYcL8p7aD3gmAQjRkX3uJE7dpL5l+yfxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:22:05:b4:7f:99:61:87:0c:f0:76:c7:a6:d2:b5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Jun 8 20:01:13 2025 GMT
Not After : Jun 9 20:01:13 2025 GMT
Subject: CN=c1df4dc419d4d9721d5e4946d1200b4710796c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:39:e7:7d:be:ef:92:d5:b9:50:3a:65:c3:
ca:92:94:48:32:62:44:8f:06:c1:82:0c:7a:00:ce:
48:70:7d:43:c6:28:fa:6b:47:cb:a1:a8:32:54:a4:
51:a4:70:da:95:d2:53:a3:6c:73:4b:f1:e5:e0:3c:
09:a4:96:8a:1c:e9:05:e7:ba:fa:c2:56:59:80:50:
8e:52:0d:67:c7:36:32:5c:b7:a0:17:c4:0c:be:eb:
82:89:0e:d2:37:bc:56:21:4e:3e:c7:17:df:9a:32:
d2:bb:c0:0a:80:d7:f5:b4:b0:83:86:c0:f3:de:97:
34:75:54:b4:d5:8e:9f:a7:e8:3b:0f:f4:2f:96:7b:
06:8d:90:55:30:31:d9:3a:d3:93:7a:a5:e4:dc:5f:
da:9a:05:8e:e9:d6:79:9d:93:62:ff:0d:35:22:37:
2d:f9:81:84:3c:bb:5b:a4:cd:b7:ec:c4:98:bc:e0:
3f:08:e4:24:a1:e6:15:12:ad:4c:43:05:35:18:24:
8b:27:89:b5:8c:d1:2c:08:0e:00:a0:aa:fc:da:36:
dd:1a:c8:e8:0d:ea:5f:4c:ed:91:ce:52:2e:45:e6:
f2:23:ff:2f:e0:85:6f:f4:60:4a:38:aa:3a:96:41:
40:4c:17:78:9f:e9:99:c5:63:b1:63:c3:3e:ae:59:
dc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DF:4D:C4:19:D4:D9:72:1D:5E:49:46:D1:20:0B:47:10:79:6C:7C
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:42:5b:7a:cd:6b:47:83:a9:72:d5:41:4a:3b:ed:53:9b:60:
8c:a6:b9:0a:0d:aa:0d:be:74:ae:60:70:1a:a5:85:9f:4d:bc:
52:e2:0f:19:e0:83:59:b4:f2:f2:c1:a3:ff:ff:59:35:2f:2d:
f6:2b:d7:03:ca:46:7e:21:7a:b4:6c:7a:3c:02:df:ab:c7:a0:
9d:aa:e3:a8:2a:27:54:6a:32:eb:d2:b2:00:ce:76:cc:f2:ab:
8c:81:bb:d3:18:94:ae:12:28:8c:f6:b7:77:f0:8c:8f:d7:e7:
66:1c:37:d1:4c:eb:47:ac:69:6b:d0:38:0f:38:97:3f:c9:71:
06:3d:2f:b9:f8:0b:fe:19:3d:88:85:fc:2a:1f:c1:a3:c3:fe:
f5:a0:9b:ee:3b:2b:c7:6b:60:6e:fe:a7:20:04:73:e8:91:00:
03:be:72:9a:a6:c7:40:3a:98:54:9d:6e:77:89:a6:81:3a:25:
76:b2:91:05:e4:b1:1e:98:30:fb:5a:fb:21:b9:70:48:9d:62:
0b:7e:2f:74:cc:bc:d7:7b:00:15:f1:27:aa:55:e2:ca:13:4e:
e5:98:a4:03:43:64:7e:cd:1f:c4:1c:f4:57:79:90:cb:a2:32:
a4:ec:a0:46:9f:0d:15:19:37:6e:7b:f7:2d:d0:57:ee:c5:23:
be:14:54:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRIgW0f5lhhwzwdsem0rX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGIzN2I2ZjRiNDQ1NjQ1ZTY5OTNhOWM1ZWM2MDg0OTI0
MjVmMGUwHhcNMjUwNjA4MjAwMTEzWhcNMjUwNjA5MjAwMTEzWjAzMTEwLwYDVQQD
EyhjMWRmNGRjNDE5ZDRkOTcyMWQ1ZTQ5NDZkMTIwMGI0NzEwNzk2YzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr945532+75LVuVA6ZcPKkpRIMmJE
jwbBggx6AM5IcH1Dxij6a0fLoagyVKRRpHDaldJTo2xzS/Hl4DwJpJaKHOkF57r6
wlZZgFCOUg1nxzYyXLegF8QMvuuCiQ7SN7xWIU4+xxffmjLSu8AKgNf1tLCDhsDz
3pc0dVS01Y6fp+g7D/QvlnsGjZBVMDHZOtOTeqXk3F/amgWO6dZ5nZNi/w01Ijct
+YGEPLtbpM237MSYvOA/COQkoeYVEq1MQwU1GCSLJ4m1jNEsCA4AoKr82jbdGsjo
DepfTO2RzlIuRebyI/8v4IVv9GBKOKo6lkFATBd4n+mZxWOxY8M+rlnckQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHfTcQZ1NlyHV5JRtEgC0cQeWx8MB8GA1UdIwQY
MBaAFNALN7b0tEVkXmmTqcXsYISSQl8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEt
N2RiNjg2OGQ4NDc0LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEtN2RiNjg2OGQ4NDc0
LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0Jbes1r
R4OpctVBSjvtU5tgjKa5Cg2qDb50rmBwGqWFn028UuIPGeCDWbTy8sGj//9ZNS8t
9ivXA8pGfiF6tGx6PALfq8egnarjqConVGoy69KyAM52zPKrjIG70xiUrhIojPa3
d/CMj9fnZhw30UzrR6xpa9A4DziXP8lxBj0vufgL/hk9iIX8Kh/Bo8P+9aCb7jsr
x2tgbv6nIARz6JEAA75ymqbHQDqYVJ1ud4mmgToldrKRBeSxHpgw+1r7IblwSJ1i
C34vdMy813sAFfEnqlXiyhNO5ZikA0Nkfs0fxBz0V3mQy6IypOygRp8NFRk3bnv3
LdBX7sUjvhRULw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:33:14 2025 by rpki-client