Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
File: 3BsrDhzng-t6Ljk__dEoxqnAIjk.mft (raw, json)
Hash identifier: V9waY2nzgWLSibG+GT/DBMIvu0e1CFXma95VKHg7UMU=
Subject key identifier: 11:1F:06:32:36:6B:B9:B3:48:88:81:6D:D2:C1:9F:1E:DF:A7:C9:77
Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Certificate serial: 0197499F4A7AFB8DF1FC068D029F74CFF972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
Manifest number: 02D5
Signing time: Sat 07 Jun 2025 09:01:05 +0000
Manifest this update: Sat 07 Jun 2025 09:01:05 +0000
Manifest next update: Sun 08 Jun 2025 09:01:05 +0000
Files and hashes: 1: 3BsrDhzng-t6Ljk__dEoxqnAIjk.crl (hash: 5mTSuwahI0ufdgBb98pXDqE91rIVbPq5JyqL/mav9Rg=)
2: b4tFKCMFhyngaw1LlIGrAjikYiE.roa (hash: zlYQxGhdtm2zm501rwjVL8YUyfYWJBRUvSyMolHaDtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:4a:7a:fb:8d:f1:fc:06:8d:02:9f:74:cf:f9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Validity
Not Before: Jun 7 09:01:05 2025 GMT
Not After : Jun 8 09:01:05 2025 GMT
Subject: CN=111f0632366bb9b34888816dd2c19f1edfa7c977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e5:54:a8:11:2b:b0:b9:c0:ee:5c:0c:29:f9:
81:cb:d3:76:a2:29:44:ec:29:29:fc:f7:47:37:53:
1e:92:70:10:6e:c0:84:d1:f4:8c:be:f9:82:ed:6f:
e5:0e:7d:21:d6:33:44:56:4d:76:3a:c5:32:e1:14:
bb:a3:f5:ac:94:8b:41:d6:bb:b6:ba:8b:e3:78:61:
64:50:aa:8d:dd:6c:36:cb:10:ab:b0:5c:98:29:e5:
71:02:32:ba:8e:12:60:f9:06:28:19:0d:52:87:b3:
09:ec:3c:41:60:4a:25:33:f8:d1:aa:07:3c:47:f5:
a1:28:a1:22:92:6b:4e:42:b1:22:0e:c3:c1:35:87:
19:e9:32:29:18:31:93:97:77:71:af:08:ea:63:ef:
f1:80:4c:90:d2:13:c7:f1:47:8e:71:36:06:74:bf:
6a:2f:15:72:a9:d9:0e:10:5c:c2:a2:f6:f6:f0:df:
b0:0d:20:e4:94:c7:34:6c:dc:f6:b0:fd:c4:9e:bf:
b5:3d:99:f6:88:8d:f0:8c:f1:5e:d7:1d:7b:59:a6:
45:8b:32:e1:04:ce:f4:9a:41:bc:55:fa:9c:7f:b7:
bc:c7:0e:ad:75:d3:eb:d1:12:0a:4c:b6:34:5a:20:
83:b6:01:7c:0f:77:64:85:8f:f8:5f:29:0f:76:62:
e2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1F:06:32:36:6B:B9:B3:48:88:81:6D:D2:C1:9F:1E:DF:A7:C9:77
X509v3 Authority Key Identifier:
keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:af:0a:36:eb:ef:63:d6:0b:a3:09:18:d8:3a:d1:43:e9:cf:
5d:49:e8:ac:01:ae:eb:32:f6:24:ae:32:c3:0b:79:6e:e7:56:
e7:ab:fa:d4:38:ff:18:4d:d4:26:c3:0c:54:41:c0:30:ce:30:
b8:59:a4:b9:93:86:00:b4:7f:8c:f6:bd:bf:53:1e:de:eb:32:
a3:5b:2e:06:7e:4a:8e:b0:23:22:79:f3:04:64:77:f6:5d:27:
32:7e:a6:58:44:7f:99:c9:82:84:37:b1:6f:7d:80:5b:78:5f:
a5:38:41:0c:e1:55:9c:d4:88:73:e3:22:33:3b:9a:45:ad:61:
a4:9b:83:d8:d9:d0:8b:b0:b9:c2:a6:54:8f:ac:59:78:bd:81:
0a:15:14:5e:b8:3f:61:ea:64:37:08:43:6d:86:6e:df:3f:c1:
03:1c:73:c9:de:26:22:a1:94:30:53:67:94:9b:e7:f9:cb:23:
d5:58:3e:4e:72:02:84:37:5f:48:29:fa:6e:2e:11:99:96:e1:
d1:ae:73:cd:da:7f:36:c5:ef:12:b7:e9:4b:8f:6b:ff:55:aa:
a0:7d:e0:d6:1a:e7:42:43:6d:da:5b:ac:cc:cf:9f:0b:7d:c3:
51:d6:ca:0c:d3:fc:e0:34:73:30:ca:4a:dc:27:b2:1f:98:b8:
40:3a:06:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn0p6+43x/AaNAp90z/lyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMWIyYjBlMWNlNzgzZWI3YTJlMzkzZmZkZDEyOGM2YTlj
MDIyMzkwHhcNMjUwNjA3MDkwMTA1WhcNMjUwNjA4MDkwMTA1WjAzMTEwLwYDVQQD
EygxMTFmMDYzMjM2NmJiOWIzNDg4ODgxNmRkMmMxOWYxZWRmYTdjOTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+VUqBErsLnA7lwMKfmBy9N2oilE
7Ckp/PdHN1MeknAQbsCE0fSMvvmC7W/lDn0h1jNEVk12OsUy4RS7o/WslItB1ru2
uovjeGFkUKqN3Ww2yxCrsFyYKeVxAjK6jhJg+QYoGQ1Sh7MJ7DxBYEolM/jRqgc8
R/WhKKEikmtOQrEiDsPBNYcZ6TIpGDGTl3dxrwjqY+/xgEyQ0hPH8UeOcTYGdL9q
LxVyqdkOEFzCovb28N+wDSDklMc0bNz2sP3Enr+1PZn2iI3wjPFe1x17WaZFizLh
BM70mkG8Vfqcf7e8xw6tddPr0RIKTLY0WiCDtgF8D3dkhY/4XykPdmLiWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEfBjI2a7mzSIiBbdLBnx7fp8l3MB8GA1UdIwQY
MBaAFNwbKw4c54Prei45P/3RKMapwCI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wMjFmODMtYjM3Yy00Zjg0LTljOWUt
YWRmZTdlNzNkZmVlLzEvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8wMjFmODMtYjM3Yy00Zjg0LTljOWUtYWRmZTdlNzNkZmVl
LzEvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiq8KNuvv
Y9YLowkY2DrRQ+nPXUnorAGu6zL2JK4ywwt5budW56v61Dj/GE3UJsMMVEHAMM4w
uFmkuZOGALR/jPa9v1Me3usyo1suBn5KjrAjInnzBGR39l0nMn6mWER/mcmChDex
b32AW3hfpThBDOFVnNSIc+MiMzuaRa1hpJuD2NnQi7C5wqZUj6xZeL2BChUUXrg/
YepkNwhDbYZu3z/BAxxzyd4mIqGUMFNnlJvn+csj1Vg+TnIChDdfSCn6bi4RmZbh
0a5zzdp/NsXvErfpS49r/1WqoH3g1hrnQkNt2luszM+fC33DUdbKDNP84DRzMMpK
3CeyH5i4QDoGow==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:06 2025 by rpki-client