Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
File: M3L10Rir0Ska4kjmxp1kqZqa7wY.mft (raw, json)
Hash identifier: WhOwf4FYhpF640P81B9XDP4Bx3b0EQY/J39SYBIIMqU=
Subject key identifier: D2:B1:C7:B1:90:96:A9:15:DA:58:4C:20:F3:9C:0B:9B:45:7C:89:17
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 01974D44F5A40589C1E0C657D59A03069DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
Manifest number: 0BAD
Signing time: Sun 08 Jun 2025 02:00:54 +0000
Manifest this update: Sun 08 Jun 2025 02:00:54 +0000
Manifest next update: Mon 09 Jun 2025 02:00:54 +0000
Files and hashes: 1: M3L10Rir0Ska4kjmxp1kqZqa7wY.crl (hash: PrOC/HwY8XmZseaUPDqlSl2sD1JSlAe48FenEuC2YoM=)
2: NH9bJkmOLcBYnLsAYTfcsFMJkSM.roa (hash: sPNuwdbSLXSgaPh+BpoER3Hzbei/qqQBt4s/TVbjmVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:f5:a4:05:89:c1:e0:c6:57:d5:9a:03:06:9d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: Jun 8 02:00:54 2025 GMT
Not After : Jun 9 02:00:54 2025 GMT
Subject: CN=d2b1c7b19096a915da584c20f39c0b9b457c8917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8b:ba:73:64:2a:80:25:22:c4:34:90:c5:11:
fd:b9:71:e8:28:3f:ed:35:1b:d0:37:82:27:06:cf:
5a:b3:5a:5a:e8:31:67:92:11:d1:bb:d7:5f:ce:37:
50:26:73:30:6c:7b:ab:5d:79:9f:69:66:21:42:78:
ee:1a:0c:3a:56:a6:96:b7:68:63:23:aa:46:af:2a:
b9:55:ed:b5:4c:b0:88:68:3c:ae:cd:3e:a1:c5:45:
18:ad:5a:f3:00:48:75:0d:5c:2c:ef:a6:c9:51:7a:
fe:6b:a4:3f:dd:91:fc:eb:2b:4c:b4:64:39:d6:83:
74:1e:6e:0e:36:02:06:be:50:0f:ef:cb:da:9d:b0:
79:0c:9e:88:c3:82:be:70:4f:a3:f9:17:02:d8:41:
7b:74:98:08:d1:f9:b2:03:d8:57:c8:23:f9:21:a5:
62:76:8a:d2:46:6f:8a:8b:17:56:e7:95:d4:88:2e:
0e:3c:8a:7f:77:24:5d:b7:e9:e9:63:f9:4e:cf:9f:
ae:73:71:c0:9d:f2:99:46:03:38:c0:94:b5:96:ff:
54:1d:41:d0:7b:28:ee:e0:58:a8:5e:3f:3f:57:25:
0f:bb:92:a8:78:6d:2b:81:dc:aa:29:d0:1d:9d:62:
d6:31:29:79:27:b2:05:07:59:d2:73:73:7e:fe:0c:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B1:C7:B1:90:96:A9:15:DA:58:4C:20:F3:9C:0B:9B:45:7C:89:17
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:44:49:a5:c2:25:ca:ea:79:0c:9f:a1:b7:da:76:00:cb:c6:
c0:cd:90:9e:a8:ca:dc:38:36:34:c0:06:8d:a1:41:c2:b3:db:
8c:73:13:4a:69:5a:c3:ee:6f:74:46:e3:6e:80:93:15:4b:36:
8c:4c:ca:61:70:c6:cb:27:b8:71:07:76:07:80:b5:23:b1:a6:
27:34:f5:4d:00:88:40:d5:11:3c:7b:ea:a8:a0:02:83:28:b2:
92:e3:16:bc:14:4b:a1:46:af:32:5d:ec:16:15:34:2a:ea:08:
28:70:ee:a0:a1:2b:d9:ec:83:0a:b0:a6:e3:b2:25:78:a6:21:
3e:90:ee:b3:21:b4:dd:96:e9:43:cf:6b:d2:d0:99:c8:2f:6a:
9b:40:5c:16:e0:91:87:6e:80:79:fc:5e:96:19:2e:8a:3f:62:
29:d6:27:49:e6:34:39:d1:88:1b:92:24:75:b4:92:e9:37:f4:
97:30:37:67:84:03:38:03:62:e6:d1:6d:6d:7b:be:c5:2b:10:
61:54:8c:17:ab:8a:f1:c3:d8:b7:75:7a:16:86:50:24:45:c1:
ca:23:03:1e:10:bf:62:9f:1d:0b:9f:f7:2a:e4:83:55:8c:10:
5e:86:c9:14:a7:ff:be:c3:b6:0f:b6:5d:ae:2d:62:ef:0c:48:
50:86:b7:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRPWkBYnB4MZX1ZoDBp2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNzJmNWQxMThhYmQxMjkxYWUyNDhlNmM2OWQ2NGE5OWE5
YWVmMDYwHhcNMjUwNjA4MDIwMDU0WhcNMjUwNjA5MDIwMDU0WjAzMTEwLwYDVQQD
EyhkMmIxYzdiMTkwOTZhOTE1ZGE1ODRjMjBmMzljMGI5YjQ1N2M4OTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4u6c2QqgCUixDSQxRH9uXHoKD/t
NRvQN4InBs9as1pa6DFnkhHRu9dfzjdQJnMwbHurXXmfaWYhQnjuGgw6VqaWt2hj
I6pGryq5Ve21TLCIaDyuzT6hxUUYrVrzAEh1DVws76bJUXr+a6Q/3ZH86ytMtGQ5
1oN0Hm4ONgIGvlAP78vanbB5DJ6Iw4K+cE+j+RcC2EF7dJgI0fmyA9hXyCP5IaVi
dorSRm+KixdW55XUiC4OPIp/dyRdt+npY/lOz5+uc3HAnfKZRgM4wJS1lv9UHUHQ
eyju4FioXj8/VyUPu5KoeG0rgdyqKdAdnWLWMSl5J7IFB1nSc3N+/gyU0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKxx7GQlqkV2lhMIPOcC5tFfIkXMB8GA1UdIwQY
MBaAFDNy9dEYq9EpGuJI5sadZKmamu8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMt
ZDJkOTI0MWVjNWRiLzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hMmRkYWQtN2Q0ZC00MWNiLWE2OTMtZDJkOTI0MWVjNWRi
LzEvTTNMMTBSaXIwU2thNGtqbXhwMWtxWnFhN3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0RJpcIl
yup5DJ+ht9p2AMvGwM2QnqjK3Dg2NMAGjaFBwrPbjHMTSmlaw+5vdEbjboCTFUs2
jEzKYXDGyye4cQd2B4C1I7GmJzT1TQCIQNURPHvqqKACgyiykuMWvBRLoUavMl3s
FhU0KuoIKHDuoKEr2eyDCrCm47IleKYhPpDusyG03ZbpQ89r0tCZyC9qm0BcFuCR
h26Aefxelhkuij9iKdYnSeY0OdGIG5IkdbSS6Tf0lzA3Z4QDOANi5tFtbXu+xSsQ
YVSMF6uK8cPYt3V6FoZQJEXByiMDHhC/Yp8dC5/3KuSDVYwQXobJFKf/vsO2D7Zd
ri1i7wxIUIa3Ng==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:48:31 2025 by rpki-client