Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier: 4IOhE5G+OWRnIuDUve7M/UnCFSqdW3125bN7hsGDK8E=
Subject key identifier: 66:F2:9B:79:59:3F:9C:CF:35:65:A8:70:16:E8:1F:41:36:58:D5:88
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial: 01974AB1B8BFED221C1F25BB24D3AFDA151F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number: 0C64
Signing time: Sat 07 Jun 2025 14:00:50 +0000
Manifest this update: Sat 07 Jun 2025 14:00:50 +0000
Manifest next update: Sun 08 Jun 2025 14:00:50 +0000
Files and hashes: 1: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: NrV3i7zohzPU+w5HmeyfzATkm6yfM9vQyyrkedp1aCE=)
2: x9hUxJfn47T_kDyiFQOIzJ-cz6A.roa (hash: xdaaD+GtntD/xfR79byZL40UTK4Nd3mN7SfVEUnzNx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:b8:bf:ed:22:1c:1f:25:bb:24:d3:af:da:15:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Validity
Not Before: Jun 7 14:00:50 2025 GMT
Not After : Jun 8 14:00:50 2025 GMT
Subject: CN=66f29b79593f9ccf3565a87016e81f413658d588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:49:2b:2e:d6:09:58:c0:a3:d7:6a:17:7b:72:
2b:64:59:ef:3d:27:52:7b:aa:b4:30:85:e8:30:11:
51:93:8a:22:96:51:14:75:1a:64:a2:f5:f7:89:f0:
b5:93:40:87:cc:33:56:77:5a:de:4e:84:2d:9c:af:
4e:09:ea:36:f3:cc:23:de:83:b9:96:d1:6a:c1:58:
dd:7b:bd:ca:47:d3:2c:34:c4:21:78:ef:c5:57:da:
48:5e:47:f4:4c:9e:37:e3:dc:f1:6e:a5:43:23:2a:
f4:1d:ac:a0:1f:d1:16:cd:70:45:5e:1f:5d:20:97:
04:d1:b8:f5:56:1b:2e:2a:af:0d:ad:dc:cf:8d:8a:
47:77:b1:d8:b8:11:90:95:9a:63:1c:b4:8f:8c:60:
fa:71:d9:f1:80:2b:74:f1:b8:2a:22:60:13:fe:8e:
17:bb:72:3d:15:3e:10:d0:e0:2d:81:4b:e7:01:e9:
53:6b:22:b8:3b:70:28:08:4d:a9:a7:d6:0a:21:bb:
52:aa:62:88:e2:d1:ca:83:a5:ef:7b:75:4f:d0:76:
aa:a6:ab:51:67:9d:95:f6:23:a3:7b:35:84:67:d7:
9b:89:66:dc:4d:ba:9f:61:ab:d6:7d:77:e5:a3:c3:
45:4a:5c:c3:30:9a:3e:36:4d:21:7a:35:3c:45:38:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F2:9B:79:59:3F:9C:CF:35:65:A8:70:16:E8:1F:41:36:58:D5:88
X509v3 Authority Key Identifier:
keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:07:ad:9b:48:83:1a:02:b8:52:d2:27:fa:87:ed:c7:d2:b1:
5d:4b:f5:6a:dd:38:4c:11:5b:24:25:68:10:b7:2a:a4:02:0d:
51:eb:77:b3:0a:f1:f8:ec:ad:89:25:ad:55:df:93:c5:c5:1d:
19:79:76:97:cf:20:6e:59:b3:23:7b:ce:df:97:fa:2e:68:aa:
ba:db:d4:aa:1d:9f:1a:a4:33:c2:14:17:5b:b5:3c:11:75:1a:
2b:72:30:b7:d3:aa:a2:e7:9c:77:b9:e5:fb:80:53:53:7c:9a:
80:c5:51:8e:a5:93:ba:a8:a9:5c:1d:cd:5c:b7:31:69:6a:dd:
ac:df:10:32:76:90:68:c2:2d:9c:08:c1:20:db:01:89:10:16:
bf:ed:4c:d6:a2:a5:f3:0c:bc:e7:a7:47:7c:36:b5:b1:37:87:
35:fc:65:dd:bc:31:96:99:5b:fd:37:38:5f:d9:e6:75:06:c9:
f6:d1:90:8e:fc:f0:fc:fc:43:8c:85:f8:30:8a:9f:9a:30:b9:
7a:79:d1:12:98:39:91:7f:a0:7c:19:f8:58:a2:c0:8a:f7:4e:
d6:d4:e9:08:b6:95:b0:66:be:0f:c8:a5:e2:90:19:2c:ee:05:
80:01:d5:c3:e7:f3:ea:f7:64:68:f6:62:39:05:67:c7:1d:a2:
f7:75:6e:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsbi/7SIcHyW7JNOv2hUfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjM2Y0NTAyMWQ2ZWIzNDBhNDJiMmU1ZGQxZmJmNzIxYTFh
NjZkNjEwHhcNMjUwNjA3MTQwMDUwWhcNMjUwNjA4MTQwMDUwWjAzMTEwLwYDVQQD
Eyg2NmYyOWI3OTU5M2Y5Y2NmMzU2NWE4NzAxNmU4MWY0MTM2NThkNTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0krLtYJWMCj12oXe3IrZFnvPSdS
e6q0MIXoMBFRk4oillEUdRpkovX3ifC1k0CHzDNWd1reToQtnK9OCeo288wj3oO5
ltFqwVjde73KR9MsNMQheO/FV9pIXkf0TJ4349zxbqVDIyr0HaygH9EWzXBFXh9d
IJcE0bj1VhsuKq8NrdzPjYpHd7HYuBGQlZpjHLSPjGD6cdnxgCt08bgqImAT/o4X
u3I9FT4Q0OAtgUvnAelTayK4O3AoCE2pp9YKIbtSqmKI4tHKg6Xve3VP0HaqpqtR
Z52V9iOjezWEZ9ebiWbcTbqfYavWfXflo8NFSlzDMJo+Nk0hejU8RTgn2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbym3lZP5zPNWWocBboH0E2WNWIMB8GA1UdIwQY
MBaAFDw/RQIdbrNApCsuXdH79yGhpm1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wNTI1N2UtMWU2Ny00MTU4LThhZGIt
NDdkNmU0YmFlMmNmLzEvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wNTI1N2UtMWU2Ny00MTU4LThhZGItNDdkNmU0YmFlMmNm
LzEvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzgetm0iD
GgK4UtIn+oftx9KxXUv1at04TBFbJCVoELcqpAINUet3swrx+OytiSWtVd+TxcUd
GXl2l88gblmzI3vO35f6LmiqutvUqh2fGqQzwhQXW7U8EXUaK3Iwt9Oqouecd7nl
+4BTU3yagMVRjqWTuqipXB3NXLcxaWrdrN8QMnaQaMItnAjBINsBiRAWv+1M1qKl
8wy856dHfDa1sTeHNfxl3bwxlplb/Tc4X9nmdQbJ9tGQjvzw/PxDjIX4MIqfmjC5
ennREpg5kX+gfBn4WKLAivdO1tTpCLaVsGa+D8il4pAZLO4FgAHVw+fz6vdkaPZi
OQVnxx2i93Vu7w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:01:18 2025 by rpki-client