Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier: Y4YQf5EjFIKGj2fooM9xmYRxhLBEYAukoaVNuyau9XQ=
Subject key identifier: D7:B2:3D:BD:60:23:F3:25:EC:D3:93:64:EE:BD:E6:9F:97:08:37:FC
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 01974F6A3D0CE60A1A51CCECCFC12F8B600D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 12:00:51 +0000
Manifest this update: Sun 08 Jun 2025 12:00:51 +0000
Manifest next update: Mon 09 Jun 2025 12:00:51 +0000
Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: H1w3p5a9VtdPWkdD3Aclwtx646JADmxflcH212nQviU=)
2: Q6UDfcr6-wjzrSR02hz91bMMgCQ.roa (hash: Ri+ho1nwscaoaR+lGA/lmNvU5bMAzGg4wnbtbjS6IAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:3d:0c:e6:0a:1a:51:cc:ec:cf:c1:2f:8b:60:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Jun 8 12:00:51 2025 GMT
Not After : Jun 9 12:00:51 2025 GMT
Subject: CN=d7b23dbd6023f325ecd39364eebde69f970837fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:6f:7c:6c:61:4f:28:04:fb:04:97:d9:da:
c9:d6:58:c6:23:80:b3:1d:e9:b0:20:fa:c4:8e:f8:
40:4d:fd:43:5c:49:34:ff:c7:41:a6:ce:cf:64:a4:
7a:eb:bf:a3:fe:6b:aa:6f:00:31:39:7d:69:df:cf:
c9:d3:63:c6:22:27:c1:92:37:c5:45:c6:87:d1:98:
5b:f1:59:f5:3d:97:84:1d:f2:55:01:60:65:5c:ed:
0d:4f:20:a7:4c:fe:d6:ff:2c:e9:3c:fc:aa:32:8c:
d8:57:52:2f:16:6c:5f:8b:16:97:ed:63:33:58:1d:
44:10:1d:7c:ac:f1:72:63:75:d9:d5:a4:ce:d7:ce:
28:5c:cf:1b:ac:d7:e8:46:21:96:6c:d4:1e:b3:53:
35:8a:64:cd:ed:02:f4:0c:31:27:35:f9:ff:37:ae:
27:00:cd:7f:60:73:70:75:c1:5b:fe:12:42:e2:a9:
0c:da:1b:95:bd:9b:3c:bc:fe:e9:3e:68:b7:01:65:
81:ad:e7:33:61:8d:7b:99:9a:07:31:30:28:1d:02:
ff:36:5d:f0:7f:eb:ff:2c:ff:ec:37:08:9c:c7:58:
e8:e3:43:3a:9c:0e:d6:f4:b9:ae:72:20:41:4e:2d:
15:ed:df:5d:79:23:55:6c:08:5f:b6:3c:8b:a5:a5:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B2:3D:BD:60:23:F3:25:EC:D3:93:64:EE:BD:E6:9F:97:08:37:FC
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:08:a0:41:21:0f:fc:39:bd:f7:06:a6:fd:a0:fc:1b:01:9a:
72:1a:3b:41:b6:6b:35:2b:31:af:44:08:1b:bb:f3:85:d9:4d:
b8:a5:73:af:c9:f8:03:3f:48:6f:c1:58:9a:ce:04:ba:60:fe:
ce:5d:d0:25:27:85:c0:bd:94:63:12:af:55:96:07:23:8b:3d:
fb:5f:92:0f:f8:2c:b3:60:57:1a:87:8f:e6:30:53:d7:b7:6f:
40:41:7a:55:ea:3f:8a:0a:42:27:04:cf:c6:19:57:ed:b3:65:
95:5b:e5:af:95:43:37:fd:e8:22:31:e2:4a:4e:d5:fb:ba:ab:
14:c4:83:aa:26:3e:ad:15:08:be:3b:f7:d8:bc:af:c7:10:38:
a8:8f:c5:41:4a:b4:37:55:ad:84:bb:e9:11:5a:a3:34:e9:11:
27:34:6e:aa:7f:1a:96:56:0d:1a:ff:03:3a:41:ab:c3:56:64:
6a:75:40:0d:27:e3:5d:54:bd:31:61:84:39:e4:bf:3d:b1:d4:
71:19:d5:25:57:78:ef:c7:c2:db:9b:79:7c:a1:1d:17:9f:d9:
c0:83:c8:ac:77:7e:e8:02:28:c6:27:25:24:6f:19:8f:cc:24:
c3:bf:7f:db:62:29:31:54:8f:57:b2:a4:87:d3:3e:bc:ca:f0:
ee:3d:5d:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPaj0M5goaUczsz8Evi2ANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOGU2MGJiMTExMDg3ZDA4MDNmYzNmY2M0YWYzMjdhYTg1
YzBiODEwHhcNMjUwNjA4MTIwMDUxWhcNMjUwNjA5MTIwMDUxWjAzMTEwLwYDVQQD
EyhkN2IyM2RiZDYwMjNmMzI1ZWNkMzkzNjRlZWJkZTY5Zjk3MDgzN2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYZvfGxhTygE+wSX2drJ1ljGI4Cz
HemwIPrEjvhATf1DXEk0/8dBps7PZKR667+j/muqbwAxOX1p38/J02PGIifBkjfF
RcaH0Zhb8Vn1PZeEHfJVAWBlXO0NTyCnTP7W/yzpPPyqMozYV1IvFmxfixaX7WMz
WB1EEB18rPFyY3XZ1aTO184oXM8brNfoRiGWbNQes1M1imTN7QL0DDEnNfn/N64n
AM1/YHNwdcFb/hJC4qkM2huVvZs8vP7pPmi3AWWBreczYY17mZoHMTAoHQL/Nl3w
f+v/LP/sNwicx1jo40M6nA7W9LmuciBBTi0V7d9deSNVbAhftjyLpaVDRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeyPb1gI/Ml7NOTZO695p+XCDf8MB8GA1UdIwQY
MBaAFN6OYLsREIfQgD/D/MSvMnqoXAuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYt
YTZmNTM0YzMwN2YxLzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYtYTZmNTM0YzMwN2Yx
LzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwigQSEP
/Dm99wam/aD8GwGacho7QbZrNSsxr0QIG7vzhdlNuKVzr8n4Az9Ib8FYms4EumD+
zl3QJSeFwL2UYxKvVZYHI4s9+1+SD/gss2BXGoeP5jBT17dvQEF6Veo/igpCJwTP
xhlX7bNllVvlr5VDN/3oIjHiSk7V+7qrFMSDqiY+rRUIvjv32LyvxxA4qI/FQUq0
N1WthLvpEVqjNOkRJzRuqn8allYNGv8DOkGrw1ZkanVADSfjXVS9MWGEOeS/PbHU
cRnVJVd478fC25t5fKEdF5/ZwIPIrHd+6AIoxiclJG8Zj8wkw79/22IpMVSPV7Kk
h9M+vMrw7j1dtg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:27:08 2025 by rpki-client