Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
File: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft (raw, json)
Hash identifier: h186fgu+gisrsVuzQJRCEKTm9ltAhPvHHxnZJzKBWfk=
Subject key identifier: 83:94:F7:3E:27:C2:9B:7A:14:FC:58:11:A7:04:DD:0E:5C:BE:32:45
Authority key identifier: DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
Certificate issuer: /CN=df0f32e5f098b86a8794825c81122da953466284
Certificate serial: 019745C25574F405F7C246AD9C88A3FAA1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
Manifest number: 05EE
Signing time: Fri 06 Jun 2025 15:00:53 +0000
Manifest this update: Fri 06 Jun 2025 15:00:53 +0000
Manifest next update: Sat 07 Jun 2025 15:00:53 +0000
Files and hashes: 1: 3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl (hash: xeF1hJ0hPSp083dUI44PySV+wHWIYTAu5eLU45C8JNg=)
2: gBjKKqKZuEY4WvRauB7caOw1S-0.roa (hash: KcvP3QvpprIZ7nrbS5q17f/tcN31DqhQB7sqPQGvSG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:55:74:f4:05:f7:c2:46:ad:9c:88:a3:fa:a1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0f32e5f098b86a8794825c81122da953466284
Validity
Not Before: Jun 6 15:00:53 2025 GMT
Not After : Jun 7 15:00:53 2025 GMT
Subject: CN=8394f73e27c29b7a14fc5811a704dd0e5cbe3245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:6a:24:2a:66:86:5b:36:b0:0a:f7:48:22:
d5:3f:13:34:ff:83:23:cf:c0:4b:5a:e8:d4:24:94:
69:01:1d:01:97:0e:70:44:78:6e:e4:b7:70:5f:cf:
32:03:ab:e3:a3:f7:24:d0:0b:0c:dc:85:c5:84:e4:
ed:f4:5f:e0:54:6d:d4:f2:23:69:cd:27:bc:a4:18:
bb:bb:b2:5a:58:e9:f0:f6:84:76:ce:5e:d5:47:bf:
4f:f4:f3:f2:87:86:39:a6:f8:4c:bd:2c:be:bc:1e:
ed:81:dc:e1:a1:fe:cf:94:3a:90:7f:53:a2:8d:a7:
19:e7:f4:2f:71:8f:b5:86:0b:ed:7b:9d:93:ba:7d:
1e:76:f4:1b:a9:c2:96:69:ee:6e:14:26:fb:45:56:
68:f3:ab:6a:67:36:71:53:a1:db:94:c3:80:f5:b1:
9a:c0:38:97:af:37:06:33:97:7f:e6:b1:53:dd:e3:
45:9d:cd:c4:46:cc:2a:95:a6:82:b3:d4:52:d9:bd:
5c:c9:80:3a:e1:bd:a9:ee:90:71:e8:e3:f8:12:e4:
0c:f8:7c:40:4b:94:c1:ba:c0:0c:48:c2:0a:7c:e7:
d5:dd:76:1a:d3:25:12:8d:9d:ed:ad:d8:70:a9:c1:
93:47:ef:88:f0:19:d7:de:ac:7e:10:45:aa:93:15:
39:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:94:F7:3E:27:C2:9B:7A:14:FC:58:11:A7:04:DD:0E:5C:BE:32:45
X509v3 Authority Key Identifier:
keyid:DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:14:95:0d:3c:fe:8a:5a:cf:28:ba:f4:0c:ec:af:22:dd:8d:
a5:b2:50:43:2b:61:c7:4f:91:3a:ec:f8:79:7a:ea:6e:9a:80:
ad:2e:7b:35:ee:83:f2:af:1f:8a:aa:72:2d:42:9b:7a:b4:ed:
91:39:9f:01:a2:27:d3:24:67:60:c5:0d:50:1c:94:72:fc:8d:
b6:2f:fd:fa:e4:c4:5c:e8:dc:fa:3a:70:1c:97:37:b5:db:ce:
e8:d3:57:a1:ea:4a:95:98:c4:d5:3d:df:60:0b:fb:48:18:6b:
f3:f1:f1:d6:e9:cb:31:05:68:55:f9:05:75:63:f2:42:46:f2:
dd:d9:a9:3f:e2:d6:7b:18:0d:dd:0d:07:a5:fe:1f:f3:f3:74:
aa:f0:82:6d:44:de:39:2f:41:04:f2:0c:97:31:93:51:b3:69:
33:cb:ae:91:05:09:af:8a:a7:bd:af:3b:10:c0:06:ff:75:16:
11:f5:f9:61:1a:22:6f:b5:bb:b8:a7:97:8e:57:1c:7e:b7:ff:
1e:14:1f:0c:10:bf:75:09:85:cf:ff:1a:db:fa:03:46:09:bc:
b4:b5:29:67:f1:70:89:92:16:d2:de:24:4b:56:17:4e:b2:e5:
b8:da:db:96:01:84:d2:30:59:be:70:a1:ef:91:01:31:e3:a1:
a2:ff:e2:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdFwlV09AX3wkatnIij+qHzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMGYzMmU1ZjA5OGI4NmE4Nzk0ODI1YzgxMTIyZGE5NTM0
NjYyODQwHhcNMjUwNjA2MTUwMDUzWhcNMjUwNjA3MTUwMDUzWjAzMTEwLwYDVQQD
Eyg4Mzk0ZjczZTI3YzI5YjdhMTRmYzU4MTFhNzA0ZGQwZTVjYmUzMjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl99qJCpmhls2sAr3SCLVPxM0/4Mj
z8BLWujUJJRpAR0Blw5wRHhu5LdwX88yA6vjo/ck0AsM3IXFhOTt9F/gVG3U8iNp
zSe8pBi7u7JaWOnw9oR2zl7VR79P9PPyh4Y5pvhMvSy+vB7tgdzhof7PlDqQf1Oi
jacZ5/QvcY+1hgvte52Tun0edvQbqcKWae5uFCb7RVZo86tqZzZxU6HblMOA9bGa
wDiXrzcGM5d/5rFT3eNFnc3ERswqlaaCs9RS2b1cyYA64b2p7pBx6OP4EuQM+HxA
S5TBusAMSMIKfOfV3XYa0yUSjZ3trdhwqcGTR++I8BnX3qx+EEWqkxU55wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOU9z4nwpt6FPxYEacE3Q5cvjJFMB8GA1UdIwQY
MBaAFN8PMuXwmLhqh5SCXIESLalTRmKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3c4eTVmQ1l1R3FIbElKY2dSSXRxVk5HWW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTE2MDctOGVmMC00ZWQ1LWE2OGIt
OGIxMmIxZjFiNWFlLzEvM3c4eTVmQ1l1R3FIbElKY2dSSXRxVk5HWW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wZTE2MDctOGVmMC00ZWQ1LWE2OGItOGIxMmIxZjFiNWFl
LzEvM3c4eTVmQ1l1R3FIbElKY2dSSXRxVk5HWW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARSVDTz+
ilrPKLr0DOyvIt2NpbJQQythx0+ROuz4eXrqbpqArS57Ne6D8q8fiqpyLUKberTt
kTmfAaIn0yRnYMUNUByUcvyNti/9+uTEXOjc+jpwHJc3tdvO6NNXoepKlZjE1T3f
YAv7SBhr8/Hx1unLMQVoVfkFdWPyQkby3dmpP+LWexgN3Q0Hpf4f8/N0qvCCbUTe
OS9BBPIMlzGTUbNpM8uukQUJr4qnva87EMAG/3UWEfX5YRoib7W7uKeXjlccfrf/
HhQfDBC/dQmFz/8a2/oDRgm8tLUpZ/FwiZIW0t4kS1YXTrLluNrblgGE0jBZvnCh
75EBMeOhov/iBA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:18:49 2025 by rpki-client