Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier: hAXYjHoz5JQWcysvVWyBDVQakHPaRAUQDEmh6gNu934=
Subject key identifier: 3A:F9:C5:86:14:7E:B7:D1:89:9E:52:E0:31:4F:A8:4C:CA:A4:AD:D3
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 01975A92C1CEF99423E748E9673569CEC824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number: 02FD
Signing time: Tue 10 Jun 2025 16:00:56 +0000
Manifest this update: Tue 10 Jun 2025 16:00:56 +0000
Manifest next update: Wed 11 Jun 2025 16:00:56 +0000
Files and hashes: 1: KIBPt_IHF6y4uJMTevu1k0aU37E.roa (hash: xnu5MWsk10XHvOorhDM/6K8KY5BqTo0pp6Ckq1C4ML0=)
2: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: o8Z0vA/+czK0ZTrZ+j/VX2mRRWSk3GoimXNP19y8+EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:92:c1:ce:f9:94:23:e7:48:e9:67:35:69:ce:c8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: Jun 10 16:00:56 2025 GMT
Not After : Jun 11 16:00:56 2025 GMT
Subject: CN=3af9c586147eb7d1899e52e0314fa84ccaa4add3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:3f:0b:ec:d0:0b:39:a4:f8:53:e4:22:86:
3a:71:d6:18:23:e6:26:fd:3c:9b:3d:c3:52:a2:88:
f8:ce:76:ab:b0:d8:74:ca:d7:d1:6c:01:05:f4:57:
79:a6:1c:a5:f2:b0:87:8a:3e:a9:0a:1b:78:66:e2:
9c:d3:11:b5:9c:b9:2a:41:ec:5c:29:e2:1e:87:45:
34:8f:ab:de:b7:5f:e4:1a:c7:3d:38:ac:81:fa:e3:
55:1b:ef:40:ca:c9:28:0b:cf:d6:44:0a:6c:5c:b3:
a4:94:dd:97:64:6d:db:54:b3:28:c0:b8:32:20:0f:
4c:99:cd:e5:e4:27:81:c5:96:1f:29:19:32:76:5d:
85:1d:32:0c:3a:0e:79:22:8d:e6:6b:b5:62:7d:df:
24:c5:53:d2:cd:b6:8b:91:a5:8f:bc:f8:8b:4b:68:
f3:cf:fd:42:0a:49:cb:08:48:85:14:a4:46:69:4b:
44:6d:bc:d9:13:30:87:38:80:d6:5f:02:71:38:39:
62:20:e1:e9:ee:81:9a:0f:5a:45:76:5f:29:43:6c:
6c:2d:8e:62:78:60:87:c3:5a:fd:22:9d:88:8f:ac:
63:dd:fa:2f:68:d7:bb:00:0b:32:ac:69:f3:4d:07:
b0:29:e4:e3:e2:5e:6b:fd:fd:ad:c9:b6:2f:86:3f:
59:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F9:C5:86:14:7E:B7:D1:89:9E:52:E0:31:4F:A8:4C:CA:A4:AD:D3
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:3d:64:9b:ff:a3:e5:d4:32:42:45:63:0a:69:b2:ed:10:f0:
8b:13:3a:97:e3:27:13:13:ab:08:0e:2c:6e:8e:17:30:be:b0:
03:22:a0:f3:e8:58:24:54:76:7b:bd:c3:bd:43:0c:ce:71:d7:
a3:84:bd:dd:63:f4:e7:64:21:87:30:ed:b0:98:27:7c:ae:f3:
4a:5a:14:ef:8f:f1:37:e7:0b:4c:04:96:92:f0:50:7f:e9:31:
5b:17:9a:1e:58:17:ff:cf:f4:7a:fc:66:4e:01:b6:96:32:63:
cc:c9:d6:88:97:90:f8:26:c2:21:c9:fd:45:dc:8d:a1:f3:e7:
cb:9a:b2:f3:86:b3:73:d9:fe:f0:ed:7a:02:ed:45:56:69:ca:
6f:b2:ca:3d:c3:10:15:8a:67:22:5f:6e:87:ed:66:a2:13:af:
cb:9f:ca:bd:c7:8c:e7:a1:9e:e2:3b:65:6a:1c:d5:36:a7:4d:
92:3a:da:0a:33:f0:59:56:41:9b:ff:b0:d2:80:7c:44:77:cb:
d5:4c:db:32:ac:df:e1:b6:11:c6:b1:37:51:33:db:b4:16:d3:
15:81:92:47:cc:b1:fe:7b:fa:e9:32:42:4f:4b:32:37:13:25:
ba:d6:3e:09:58:ac:b7:6a:a3:96:cc:72:55:ab:32:7e:59:fc:
aa:bf:e6:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdaksHO+ZQj50jpZzVpzsgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMzEzNzRlYjk2NzkxMDllOTFhMzhlMjhiMTdiZjI2MGFi
OWQzYWIwHhcNMjUwNjEwMTYwMDU2WhcNMjUwNjExMTYwMDU2WjAzMTEwLwYDVQQD
EygzYWY5YzU4NjE0N2ViN2QxODk5ZTUyZTAzMTRmYTg0Y2NhYTRhZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5g/C+zQCzmk+FPkIoY6cdYYI+Ym
/TybPcNSooj4znarsNh0ytfRbAEF9Fd5phyl8rCHij6pCht4ZuKc0xG1nLkqQexc
KeIeh0U0j6vet1/kGsc9OKyB+uNVG+9AyskoC8/WRApsXLOklN2XZG3bVLMowLgy
IA9Mmc3l5CeBxZYfKRkydl2FHTIMOg55Io3ma7Vifd8kxVPSzbaLkaWPvPiLS2jz
z/1CCknLCEiFFKRGaUtEbbzZEzCHOIDWXwJxODliIOHp7oGaD1pFdl8pQ2xsLY5i
eGCHw1r9Ip2Ij6xj3fovaNe7AAsyrGnzTQewKeTj4l5r/f2tybYvhj9ZVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr5xYYUfrfRiZ5S4DFPqEzKpK3TMB8GA1UdIwQY
MBaAFHAxN065Z5EJ6Ro44osXvyYKudOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kOGI3M2ItNTAxMy00M2NkLWJhMmIt
MmMyMTgwNzE0ZTcxLzEvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9kOGI3M2ItNTAxMy00M2NkLWJhMmItMmMyMTgwNzE0ZTcx
LzEvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArz1km/+j
5dQyQkVjCmmy7RDwixM6l+MnExOrCA4sbo4XML6wAyKg8+hYJFR2e73DvUMMznHX
o4S93WP052QhhzDtsJgnfK7zSloU74/xN+cLTASWkvBQf+kxWxeaHlgX/8/0evxm
TgG2ljJjzMnWiJeQ+CbCIcn9RdyNofPny5qy84azc9n+8O16Au1FVmnKb7LKPcMQ
FYpnIl9uh+1mohOvy5/KvceM56Ge4jtlahzVNqdNkjraCjPwWVZBm/+w0oB8RHfL
1UzbMqzf4bYRxrE3UTPbtBbTFYGSR8yx/nv66TJCT0syNxMlutY+CVist2qjlsxy
Vasyfln8qr/mfw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 23:04:09 2025 by rpki-client