Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: hUrOhnEWBBnLd7QNKOK+vIKZoc6221AHTHL2pTnEMkw=
Subject key identifier: 58:4F:A6:5F:E8:01:A1:C1:02:2B:0F:45:DC:4E:DB:62:C3:64:4F:E7
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 0197D518ED4D4ADE96CEB8AD68DE6AE67ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 1571
Signing time: Fri 04 Jul 2025 11:01:10 +0000
Manifest this update: Fri 04 Jul 2025 11:01:10 +0000
Manifest next update: Sat 05 Jul 2025 11:01:10 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: avlmCremo8mfJqOTJzuWgRTsunRqnrSSSyfx2kDYb28=)
2: 6BKOzeR_jkv8Td7naSCpGwK2cbo.roa (hash: NdsdWgq7FNtTGsjv+sGoOHpLX3rHnRlY3SsmvrWzKc4=)
3: gTmhFIzM7If-kzl01cWeEzcqqns.roa (hash: lUpkvjKsmC5D6MNw62q7fvgUR6asOsGbY3c+E0HzKW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:18:ed:4d:4a:de:96:ce:b8:ad:68:de:6a:e6:7a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Jul 4 11:01:10 2025 GMT
Not After : Jul 5 11:01:10 2025 GMT
Subject: CN=584fa65fe801a1c1022b0f45dc4edb62c3644fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:45:e5:cf:72:14:fb:8c:5b:3d:ab:48:6c:b2:
be:8d:a8:85:6e:79:a0:ae:84:cf:75:53:f9:04:98:
c5:14:d0:e3:95:ec:6f:74:b2:97:7c:94:16:e6:cf:
91:a7:14:ca:69:54:ae:12:4d:52:68:c4:0c:8f:6e:
09:d7:8c:5b:4a:15:76:e6:00:b7:8e:94:dc:29:e2:
38:86:d9:3a:5b:98:6f:0f:8c:2f:55:49:37:7d:16:
3a:7b:a9:33:15:1e:92:42:73:5f:14:db:50:21:b6:
d5:7f:7e:80:25:41:20:68:6d:ee:53:21:ab:60:e6:
21:2b:5f:34:76:a2:33:91:bf:aa:59:fe:31:2f:66:
58:a1:5c:01:2f:4f:b1:ee:25:f6:3b:f0:af:97:61:
45:a9:be:97:d0:44:d2:4c:e1:d1:20:d8:8e:58:65:
61:24:7c:7a:aa:18:9d:85:62:28:15:58:5f:49:36:
7f:52:1c:76:05:7a:b4:c0:d6:66:61:70:a8:09:30:
d2:f1:0b:98:48:03:a0:c3:98:a4:03:9d:2c:2d:63:
6f:ff:9e:9e:4a:0a:5e:44:f4:29:94:86:92:2f:42:
44:fd:c4:e3:94:c7:27:d2:fa:c5:10:88:df:f4:68:
35:96:5d:3e:39:27:81:9a:10:5a:cd:b3:68:01:78:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4F:A6:5F:E8:01:A1:C1:02:2B:0F:45:DC:4E:DB:62:C3:64:4F:E7
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b3:1b:25:6c:32:1e:a3:33:06:c4:ee:35:e5:34:2c:a0:ce:
dd:6d:4f:7f:fa:fd:5a:c7:9c:62:33:64:b0:d9:49:cc:a3:dd:
b9:c9:6c:17:0b:a3:01:96:71:c3:7d:40:39:58:8a:5c:98:14:
d2:46:c5:c6:ea:f6:e6:48:89:3a:4f:0f:22:77:47:68:d6:a7:
e6:82:65:27:7e:97:28:29:d0:18:47:07:9a:2e:b6:ef:73:a0:
75:12:d8:49:a8:b4:a3:1c:d7:a6:af:01:40:9d:a7:c8:42:67:
eb:d3:dc:a7:b5:b6:f8:d3:03:82:b0:1a:68:c5:73:d1:c5:c2:
28:a1:6d:85:ff:f9:91:f0:84:88:ff:c8:11:ad:6d:74:09:29:
1c:cb:1c:b2:49:d2:b7:3b:f8:e5:1e:fe:fd:f5:88:ae:b9:6e:
b1:6f:d8:25:a1:a0:49:8d:25:14:c7:15:90:04:24:05:28:15:
9c:f8:55:4e:c6:4d:1e:ef:0a:b7:e0:be:37:02:88:3d:bb:25:
09:ac:11:3c:50:f8:07:7b:5c:09:09:aa:85:40:b7:14:fe:7a:
39:9b:49:66:f9:e8:90:33:34:2e:b7:67:47:80:4a:61:95:6b:
52:38:5d:87:52:29:4e:99:e2:a2:7c:f8:80:b4:46:81:a4:87:
77:af:bf:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfVGO1NSt6WzritaN5q5nrOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOTgyZjk3OWEyZDI1ZWJiMmRhYjI2NTRiOGMyN2M5Mjhj
ZjVhYzcwHhcNMjUwNzA0MTEwMTEwWhcNMjUwNzA1MTEwMTEwWjAzMTEwLwYDVQQD
Eyg1ODRmYTY1ZmU4MDFhMWMxMDIyYjBmNDVkYzRlZGI2MmMzNjQ0ZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkXlz3IU+4xbPatIbLK+jaiFbnmg
roTPdVP5BJjFFNDjlexvdLKXfJQW5s+RpxTKaVSuEk1SaMQMj24J14xbShV25gC3
jpTcKeI4htk6W5hvD4wvVUk3fRY6e6kzFR6SQnNfFNtQIbbVf36AJUEgaG3uUyGr
YOYhK180dqIzkb+qWf4xL2ZYoVwBL0+x7iX2O/Cvl2FFqb6X0ETSTOHRINiOWGVh
JHx6qhidhWIoFVhfSTZ/Uhx2BXq0wNZmYXCoCTDS8QuYSAOgw5ikA50sLWNv/56e
SgpeRPQplIaSL0JE/cTjlMcn0vrFEIjf9Gg1ll0+OSeBmhBazbNoAXhozQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhPpl/oAaHBAisPRdxO22LDZE/nMB8GA1UdIwQY
MBaAFN2YL5eaLSXrstqyZUuMJ8koz1rHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8zN2VhMTktNmYyNS00MmJjLWFkMjct
OTg4NmNiMWI2NDBlLzEvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8zN2VhMTktNmYyNS00MmJjLWFkMjctOTg4NmNiMWI2NDBl
LzEvM1pndmw1b3RKZXV5MnJKbFM0d255U2pQV3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7MbJWwy
HqMzBsTuNeU0LKDO3W1Pf/r9WsecYjNksNlJzKPduclsFwujAZZxw31AOViKXJgU
0kbFxur25kiJOk8PIndHaNan5oJlJ36XKCnQGEcHmi6273OgdRLYSai0oxzXpq8B
QJ2nyEJn69Pcp7W2+NMDgrAaaMVz0cXCKKFthf/5kfCEiP/IEa1tdAkpHMscsknS
tzv45R7+/fWIrrlusW/YJaGgSY0lFMcVkAQkBSgVnPhVTsZNHu8Kt+C+NwKIPbsl
CawRPFD4B3tcCQmqhUC3FP56OZtJZvnokDM0LrdnR4BKYZVrUjhdh1IpTpnionz4
gLRGgaSHd6+/Hg==
-----END CERTIFICATE-----
Generated at Fri Jul 4 21:13:58 2025 by rpki-client