Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
File: G3NaOdmSptxEu-c6TZm-PIQvqWg.mft (raw, json)
Hash identifier: hRJ7EVv9qun9LG3mhDv/mUdOXyMJhi/ADZkbWXYfW14=
Subject key identifier: DB:74:45:F2:F3:FC:0B:B5:8D:DD:40:AB:FE:46:BA:FA:52:EB:2C:D6
Authority key identifier: 1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68
Certificate issuer: /CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968
Certificate serial: 01974AB1BADC1E378096323A174BC7F8BE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
Manifest number: 030C
Signing time: Sat 07 Jun 2025 14:00:51 +0000
Manifest this update: Sat 07 Jun 2025 14:00:51 +0000
Manifest next update: Sun 08 Jun 2025 14:00:51 +0000
Files and hashes: 1: G3NaOdmSptxEu-c6TZm-PIQvqWg.crl (hash: kQbOsv7NkHJtfAfYJxkPFyg+nTw2wt3nZ00yzDSwok4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:ba:dc:1e:37:80:96:32:3a:17:4b:c7:f8:be:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b735a39d992a6dc44bbe73a4d99be3c842fa968
Validity
Not Before: Jun 7 14:00:51 2025 GMT
Not After : Jun 8 14:00:51 2025 GMT
Subject: CN=db7445f2f3fc0bb58ddd40abfe46bafa52eb2cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fe:71:22:32:ac:15:b3:69:3f:68:20:9e:01:
f6:c5:2d:75:b0:ac:db:18:ee:c0:a7:06:bd:20:ac:
e3:71:97:b0:7d:c3:b0:da:f5:71:a5:f1:12:ff:10:
50:83:e9:46:43:a0:aa:f1:54:3e:5d:60:8b:de:d9:
49:ea:46:03:03:75:f5:01:6b:e0:6e:69:56:a7:2f:
81:9a:cd:eb:90:c7:21:de:48:55:b0:99:3e:a3:ad:
56:69:2e:e1:ef:a9:62:ad:54:da:4f:56:cc:03:15:
be:e1:50:f3:9a:79:a5:5c:d6:e4:bf:6c:9f:d4:02:
eb:ce:9e:90:64:83:81:e3:30:85:9b:64:97:03:72:
cb:96:ff:f5:f9:2a:14:b8:5c:57:70:e4:dd:a0:ba:
18:b0:80:e0:45:c7:0e:fc:ae:9c:c5:58:44:97:f1:
fd:bd:c7:47:d3:fd:d8:f8:51:07:aa:96:0c:0d:00:
66:ef:08:bf:9d:f2:a7:de:bd:d6:8a:33:63:59:9b:
75:13:1e:2d:ec:16:7c:78:67:6d:29:95:48:60:d4:
e7:f9:75:c9:c9:98:0e:fa:99:d6:f2:cb:54:68:9a:
a7:fe:fd:b1:34:c4:89:8d:5f:fc:ce:47:2a:3e:07:
3d:a2:51:24:65:64:75:9b:be:88:aa:e8:30:ad:e7:
23:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:74:45:F2:F3:FC:0B:B5:8D:DD:40:AB:FE:46:BA:FA:52:EB:2C:D6
X509v3 Authority Key Identifier:
keyid:1B:73:5A:39:D9:92:A6:DC:44:BB:E7:3A:4D:99:BE:3C:84:2F:A9:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3NaOdmSptxEu-c6TZm-PIQvqWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/06da0b-45fa-4bc9-9717-4001369ba11f/1/G3NaOdmSptxEu-c6TZm-PIQvqWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:75:5f:69:01:60:06:24:1f:77:6a:b6:4d:0c:c4:17:8c:00:
87:ef:03:e4:66:e9:3a:f1:57:d7:03:a1:dc:65:68:8d:64:2e:
aa:40:46:51:d8:20:da:58:2c:6e:13:bf:dc:b6:a1:f8:dd:6d:
94:1c:2c:75:83:b4:5e:31:1d:63:6e:1b:fd:fa:b2:e0:c9:c7:
62:78:ff:b9:86:93:2f:10:de:61:93:51:85:e1:ce:5a:a6:24:
a1:da:20:b8:db:cc:7c:5f:36:9a:fd:6f:31:03:3f:d2:f4:fe:
22:e1:44:c5:90:f7:da:fa:14:d2:bd:18:4e:78:5f:68:d3:68:
11:63:a5:13:64:90:bd:a9:91:ee:86:ad:9a:7e:fe:62:c5:a1:
d7:2e:9a:a4:65:07:81:be:da:e8:c1:ae:93:c6:1e:df:1e:c2:
ad:21:9a:a0:87:85:af:35:5e:07:6d:7f:79:7c:45:e7:52:0c:
f9:14:38:e3:7a:c3:f8:db:68:cb:3d:9d:9b:d6:88:95:1f:76:
a1:50:a0:67:5f:17:72:4e:32:00:23:8d:76:d1:28:a6:cd:08:
cd:2c:26:8c:89:62:06:5c:18:7c:6b:05:2b:c4:a8:12:14:d8:
ce:75:42:69:14:76:78:80:ed:97:e0:e1:41:79:2e:76:e6:02:
0d:63:df:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsbrcHjeAljI6F0vH+L4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNzM1YTM5ZDk5MmE2ZGM0NGJiZTczYTRkOTliZTNjODQy
ZmE5NjgwHhcNMjUwNjA3MTQwMDUxWhcNMjUwNjA4MTQwMDUxWjAzMTEwLwYDVQQD
EyhkYjc0NDVmMmYzZmMwYmI1OGRkZDQwYWJmZTQ2YmFmYTUyZWIyY2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP5xIjKsFbNpP2ggngH2xS11sKzb
GO7Apwa9IKzjcZewfcOw2vVxpfES/xBQg+lGQ6Cq8VQ+XWCL3tlJ6kYDA3X1AWvg
bmlWpy+Bms3rkMch3khVsJk+o61WaS7h76lirVTaT1bMAxW+4VDzmnmlXNbkv2yf
1ALrzp6QZIOB4zCFm2SXA3LLlv/1+SoUuFxXcOTdoLoYsIDgRccO/K6cxVhEl/H9
vcdH0/3Y+FEHqpYMDQBm7wi/nfKn3r3WijNjWZt1Ex4t7BZ8eGdtKZVIYNTn+XXJ
yZgO+pnW8stUaJqn/v2xNMSJjV/8zkcqPgc9olEkZWR1m76Iqugwrecj/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNt0RfLz/Au1jd1Aq/5GuvpS6yzWMB8GA1UdIwQY
MBaAFBtzWjnZkqbcRLvnOk2ZvjyEL6loMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzNOYU9kbVNwdHhFdS1jNlRabS1QSVF2cVdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wNmRhMGItNDVmYS00YmM5LTk3MTct
NDAwMTM2OWJhMTFmLzEvRzNOYU9kbVNwdHhFdS1jNlRabS1QSVF2cVdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8wNmRhMGItNDVmYS00YmM5LTk3MTctNDAwMTM2OWJhMTFm
LzEvRzNOYU9kbVNwdHhFdS1jNlRabS1QSVF2cVdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHVfaQFg
BiQfd2q2TQzEF4wAh+8D5GbpOvFX1wOh3GVojWQuqkBGUdgg2lgsbhO/3Lah+N1t
lBwsdYO0XjEdY24b/fqy4MnHYnj/uYaTLxDeYZNRheHOWqYkodoguNvMfF82mv1v
MQM/0vT+IuFExZD32voU0r0YTnhfaNNoEWOlE2SQvamR7oatmn7+YsWh1y6apGUH
gb7a6MGuk8Ye3x7CrSGaoIeFrzVeB21/eXxF51IM+RQ443rD+Ntoyz2dm9aIlR92
oVCgZ18Xck4yACONdtEops0IzSwmjIliBlwYfGsFK8SoEhTYznVCaRR2eIDtl+Dh
QXkuduYCDWPfnA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:29:03 2025 by rpki-client