Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft (raw, json)
Hash identifier: 1qBkn1apMeU92+LrhQ39b6aBkio81UwZDaSZaenxmfs=
Subject key identifier: 81:44:34:6D:81:B7:B9:76:B5:36:F6:1B:BD:27:A4:23:72:0A:FF:E7
Authority key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
Certificate issuer: /CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Certificate serial: 01976697097C83CF91FEC23A3322D2AF47CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
Manifest number: 09F5
Signing time: Fri 13 Jun 2025 00:01:03 +0000
Manifest this update: Fri 13 Jun 2025 00:01:03 +0000
Manifest next update: Sat 14 Jun 2025 00:01:03 +0000
Files and hashes: 1: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl (hash: M77kvUzL1o436mxJwos3nChbB4sYuRiP4Hjnk6iL5bI=)
2: dKbYijsCo6cz-c8VDyBQbX6KvIQ.roa (hash: s+UDqFCEg39f4gk9fs9ZUXaGmiKaVpMOQ/J8CYcOuY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:97:09:7c:83:cf:91:fe:c2:3a:33:22:d2:af:47:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51
Validity
Not Before: Jun 13 00:01:03 2025 GMT
Not After : Jun 14 00:01:03 2025 GMT
Subject: CN=8144346d81b7b976b536f61bbd27a423720affe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:04:b7:31:d8:2b:81:bc:b5:66:19:e0:c3:a8:
39:0b:39:9d:82:8f:46:ae:c0:b1:c4:78:61:0c:a3:
7d:8d:01:bc:0a:5a:b5:c5:ec:c5:84:70:32:85:7d:
44:f5:f6:17:98:33:b8:6b:53:8c:02:8a:75:75:8a:
cb:81:9e:ad:14:8d:50:bf:ca:02:23:ae:46:7f:93:
3a:a9:a8:32:c4:02:70:da:69:51:21:92:65:fb:21:
cd:53:2f:03:5d:7e:9a:dc:b0:3c:c9:c2:bf:de:c3:
62:37:c6:ba:ca:32:3f:24:be:fe:59:8f:37:35:7c:
40:23:08:38:ff:35:91:0c:62:5f:0a:b8:c6:2c:31:
6a:3d:84:ee:16:a1:6c:74:fa:3b:a3:94:cc:24:ce:
dc:ea:70:2f:ac:f6:90:7f:69:20:e9:dd:df:0a:76:
ce:98:8b:6c:52:90:1c:0f:1e:8c:82:1a:ac:bb:55:
8d:4a:20:70:fd:e1:18:ac:9d:c2:00:df:b3:9f:b8:
09:9a:f4:cb:51:cf:86:58:09:ba:42:73:f0:ed:ab:
18:00:f5:b2:b0:2e:66:de:5b:88:fd:ee:6a:f0:26:
46:8e:a0:32:f8:86:12:88:4a:75:9d:b1:01:de:3f:
8b:c2:ef:dd:fd:ba:84:aa:87:51:37:fd:44:04:ba:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:44:34:6D:81:B7:B9:76:B5:36:F6:1B:BD:27:A4:23:72:0A:FF:E7
X509v3 Authority Key Identifier:
keyid:DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:09:4c:7b:e6:1f:7f:51:88:83:9d:fd:5a:6b:99:6b:ed:8b:
09:23:a2:cd:5c:c6:dd:91:fd:66:5f:7d:0f:fd:d1:b2:74:c3:
cd:c7:d5:a8:4c:a9:bd:e1:2b:02:ed:7c:4e:a5:bb:5c:8d:3c:
90:b2:54:ad:f0:2c:4f:b1:65:88:8f:0c:99:8f:ae:69:67:3b:
1d:fb:18:cc:ff:b7:7c:c0:42:c5:68:d7:2d:ac:3d:29:a2:7d:
40:88:03:fb:c0:16:5f:03:7a:17:9c:cc:18:a1:4d:02:c2:23:
ce:a2:a4:b7:53:b2:18:39:de:b5:a3:7e:f8:4c:b2:d0:a2:ab:
26:61:62:fa:e9:15:07:34:bb:18:22:7f:5d:92:72:59:ae:7b:
c9:a9:28:de:19:40:05:08:cb:b7:fe:b4:d3:20:f6:da:b0:9a:
0d:e6:4e:f9:a3:44:5f:31:c0:2c:19:95:30:37:53:b5:89:4a:
ac:d8:86:5f:e6:0b:7f:85:17:48:9a:07:26:44:68:68:e4:41:
45:77:e2:2f:40:85:94:cc:c8:0c:53:b2:69:cc:ba:79:44:d7:
e4:51:36:a7:67:78:59:e2:06:24:42:69:f2:20:84:56:6c:4d:
b5:b4:16:4d:f0:4e:ba:d2:0c:6b:49:15:f5:d9:43:12:a0:8d:
5e:3b:62:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdmlwl8g8+R/sI6MyLSr0fMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOWMzMDM5OWY2Mzg1NTVmNGMwMmU4ZDFiNTViYzkyNzIy
NWNiNTEwHhcNMjUwNjEzMDAwMTAzWhcNMjUwNjE0MDAwMTAzWjAzMTEwLwYDVQQD
Eyg4MTQ0MzQ2ZDgxYjdiOTc2YjUzNmY2MWJiZDI3YTQyMzcyMGFmZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogS3Mdgrgby1Zhngw6g5Czmdgo9G
rsCxxHhhDKN9jQG8Clq1xezFhHAyhX1E9fYXmDO4a1OMAop1dYrLgZ6tFI1Qv8oC
I65Gf5M6qagyxAJw2mlRIZJl+yHNUy8DXX6a3LA8ycK/3sNiN8a6yjI/JL7+WY83
NXxAIwg4/zWRDGJfCrjGLDFqPYTuFqFsdPo7o5TMJM7c6nAvrPaQf2kg6d3fCnbO
mItsUpAcDx6Mghqsu1WNSiBw/eEYrJ3CAN+zn7gJmvTLUc+GWAm6QnPw7asYAPWy
sC5m3luI/e5q8CZGjqAy+IYSiEp1nbEB3j+Lwu/d/bqEqodRN/1EBLqV3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFENG2Bt7l2tTb2G70npCNyCv/nMB8GA1UdIwQY
MBaAFN2cMDmfY4VV9MAujRtVvJJyJctRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTIt
MGU1MTQwNjJjNTkwLzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZWNhNGQtNzBjYy00Y2E0LWI0NTItMGU1MTQwNjJjNTkw
LzEvM1p3d09aOWpoVlgwd0M2TkcxVzhrbklseTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAlMe+Yf
f1GIg539WmuZa+2LCSOizVzG3ZH9Zl99D/3RsnTDzcfVqEypveErAu18TqW7XI08
kLJUrfAsT7FliI8MmY+uaWc7HfsYzP+3fMBCxWjXLaw9KaJ9QIgD+8AWXwN6F5zM
GKFNAsIjzqKkt1OyGDnetaN++Eyy0KKrJmFi+ukVBzS7GCJ/XZJyWa57yako3hlA
BQjLt/600yD22rCaDeZO+aNEXzHALBmVMDdTtYlKrNiGX+YLf4UXSJoHJkRoaORB
RXfiL0CFlMzIDFOyacy6eUTX5FE2p2d4WeIGJEJp8iCEVmxNtbQWTfBOutIMa0kV
9dlDEqCNXjtiIQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 03:56:28 2025 by rpki-client