Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: TH2PgLFoxzGdtT4GLKd6fHhlR50oHkmx9wqOSRNnfTo=
Subject key identifier: EB:79:56:90:16:F7:E2:63:51:5F:E5:12:B6:06:DC:CD:31:97:54:E5
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 01974D7BEBB9A018D13937AC16779E97153E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 03:00:56 +0000
Manifest this update: Sun 08 Jun 2025 03:00:56 +0000
Manifest next update: Mon 09 Jun 2025 03:00:56 +0000
Files and hashes: 1: 8_r7mVCzzc8i5_iqagGhH6oA6lo.roa (hash: NPDOx5bLEHu2ttrvWwMBmay19BA0wMcB6dN9yEUt368=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: 2FnLBKCVODygAEFX7GMSmTlqCZ+jgjnUdPzWwLfOLAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:eb:b9:a0:18:d1:39:37:ac:16:77:9e:97:15:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Jun 8 03:00:56 2025 GMT
Not After : Jun 9 03:00:56 2025 GMT
Subject: CN=eb79569016f7e263515fe512b606dccd319754e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:38:ef:d3:29:15:02:fb:e0:ed:5e:39:2d:7e:
31:f1:c6:03:c2:e7:a2:17:2d:ae:84:5e:66:d3:ae:
23:83:4b:c5:26:9f:d3:c7:ee:c8:ff:4d:d0:90:cb:
da:15:ac:a1:3f:fd:95:c8:80:32:cc:8d:d0:a5:27:
77:40:24:26:dd:5b:5c:50:da:4a:d1:8b:27:6f:eb:
94:4b:66:1c:8b:46:a1:28:fd:eb:7b:7c:ed:bb:3c:
21:5b:f1:c9:05:51:7a:1c:23:7d:4d:2d:00:f5:92:
cb:5c:65:c0:80:55:b9:ab:7b:fe:6c:95:01:e6:b2:
cb:bf:cf:ba:82:ab:a1:33:28:03:2a:e3:eb:b1:f9:
30:87:d6:19:da:9e:77:40:3c:06:41:61:cf:ff:5a:
3d:bd:aa:36:14:f8:b3:71:9c:38:c6:4d:a7:6e:b5:
c6:39:c7:22:7d:97:a1:b2:11:91:cc:fa:91:b5:9a:
f7:9b:04:56:08:6a:59:f9:9d:4b:f0:71:b6:9d:44:
22:31:39:37:5c:e0:3a:ef:e7:14:fd:2d:9f:7d:1a:
d4:dc:e1:3b:6a:0b:1c:35:ad:43:38:a2:4a:3c:5b:
d3:32:4d:e9:13:5a:37:38:1a:5c:48:1d:41:77:f6:
74:43:3f:66:b9:66:aa:00:9e:40:be:90:a7:5d:c5:
a8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:79:56:90:16:F7:E2:63:51:5F:E5:12:B6:06:DC:CD:31:97:54:E5
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:dd:19:2f:f3:d1:c3:3b:ee:a2:a2:41:13:b6:c8:76:d8:37:
02:5d:f3:d5:26:f5:a4:1f:61:6e:f9:74:0e:78:d2:af:a0:d1:
58:b5:ee:c6:3c:12:7f:33:3b:1c:92:24:f7:45:69:2d:eb:88:
50:44:d3:b9:00:04:3b:fc:cf:5a:f2:94:f9:08:10:a2:76:ef:
0f:4c:c5:06:18:aa:17:63:89:62:11:ad:09:49:e7:80:60:7f:
28:07:12:62:42:ba:9f:b5:54:43:08:06:13:7b:34:71:33:c3:
fb:19:62:97:5a:d0:f2:66:7e:bd:10:5c:c2:bb:80:b9:09:b2:
d2:0d:a0:40:2c:46:71:45:71:c7:8c:3d:d9:8e:5a:64:8a:fd:
48:67:90:0d:0d:22:22:66:63:10:e1:22:ef:14:bc:55:6e:a6:
f1:83:7a:8f:ef:45:1d:87:49:73:e5:41:f4:59:33:6f:ae:86:
f6:f8:0b:76:45:e0:df:1b:15:a1:8c:54:09:6a:0f:5c:89:49:
e1:2b:4a:97:fa:3a:d2:49:24:46:37:2e:ae:51:6c:29:0a:ff:
0e:93:be:da:b7:9f:30:f1:66:eb:c1:be:56:48:be:51:81:8c:
bc:a8:e3:2d:35:33:06:50:ff:f1:9a:9f:f7:3d:22:76:a1:29:
fe:85:fd:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNe+u5oBjROTesFneelxU+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZGEyOWE0OGMyNTc3NThjOGU1MThlZTVjOGIwM2NjZGEw
MjQ3YzkwHhcNMjUwNjA4MDMwMDU2WhcNMjUwNjA5MDMwMDU2WjAzMTEwLwYDVQQD
EyhlYjc5NTY5MDE2ZjdlMjYzNTE1ZmU1MTJiNjA2ZGNjZDMxOTc1NGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jjv0ykVAvvg7V45LX4x8cYDwuei
Fy2uhF5m064jg0vFJp/Tx+7I/03QkMvaFayhP/2VyIAyzI3QpSd3QCQm3VtcUNpK
0Ysnb+uUS2Yci0ahKP3re3ztuzwhW/HJBVF6HCN9TS0A9ZLLXGXAgFW5q3v+bJUB
5rLLv8+6gquhMygDKuPrsfkwh9YZ2p53QDwGQWHP/1o9vao2FPizcZw4xk2nbrXG
OccifZehshGRzPqRtZr3mwRWCGpZ+Z1L8HG2nUQiMTk3XOA67+cU/S2ffRrU3OE7
agscNa1DOKJKPFvTMk3pE1o3OBpcSB1Bd/Z0Qz9muWaqAJ5AvpCnXcWofQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOt5VpAW9+JjUV/lErYG3M0xl1TlMB8GA1UdIwQY
MBaAFD/aKaSMJXdYyOUY7lyLA8zaAkfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jMWMwNjMtOWU0OS00MzUzLWI4YmQt
OTM3NGYyMWU2NDg4LzEvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jMWMwNjMtOWU0OS00MzUzLWI4YmQtOTM3NGYyMWU2NDg4
LzEvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARt0ZL/PR
wzvuoqJBE7bIdtg3Al3z1Sb1pB9hbvl0DnjSr6DRWLXuxjwSfzM7HJIk90VpLeuI
UETTuQAEO/zPWvKU+QgQonbvD0zFBhiqF2OJYhGtCUnngGB/KAcSYkK6n7VUQwgG
E3s0cTPD+xlil1rQ8mZ+vRBcwruAuQmy0g2gQCxGcUVxx4w92Y5aZIr9SGeQDQ0i
ImZjEOEi7xS8VW6m8YN6j+9FHYdJc+VB9Fkzb66G9vgLdkXg3xsVoYxUCWoPXIlJ
4StKl/o60kkkRjcurlFsKQr/DpO+2refMPFm68G+Vki+UYGMvKjjLTUzBlD/8Zqf
9z0idqEp/oX9cA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:45:25 2025 by rpki-client