Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json)
Hash identifier: LUHOUoxubXb+4KzcaBwlIyazmW6mXlB+p8ye7F4MQvs=
Subject key identifier: 44:DA:80:5A:4B:88:20:95:70:1F:74:97:C5:7D:C9:A4:55:75:F9:3B
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 019748FA3C0C02B9AA5752B4ABE4E68F792B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
Manifest number: 0732
Signing time: Sat 07 Jun 2025 06:00:48 +0000
Manifest this update: Sat 07 Jun 2025 06:00:48 +0000
Manifest next update: Sun 08 Jun 2025 06:00:48 +0000
Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: 1vma1xsGHM0kQpTbkLPJqTKw3CmWY93dmpvlV4FwgyQ=)
2: WrzesfgAIkReChvkvHbeme9Obyo.roa (hash: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:3c:0c:02:b9:aa:57:52:b4:ab:e4:e6:8f:79:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Jun 7 06:00:48 2025 GMT
Not After : Jun 8 06:00:48 2025 GMT
Subject: CN=44da805a4b882095701f7497c57dc9a45575f93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:68:b1:4a:24:c4:5e:af:64:ac:10:65:88:
07:64:e2:a8:ca:b2:3c:24:cc:48:5c:cf:da:14:e9:
bf:a7:bd:48:2c:40:23:1b:0e:c3:e5:71:80:e2:8d:
76:8f:f2:6d:c6:5a:c2:5e:35:af:94:95:14:41:36:
86:10:16:8a:ef:cd:09:59:40:e6:8c:eb:a3:d4:56:
5e:4d:a4:bf:e7:0c:86:a6:c5:aa:96:92:5a:16:0e:
9f:a3:f8:e9:79:b2:7d:c1:26:b0:6f:70:95:21:ce:
02:54:98:88:5d:9c:6c:56:bb:85:5e:89:16:df:59:
1a:9e:71:29:eb:f6:ed:e2:ae:3f:8a:cd:f2:6f:fc:
af:42:14:e5:ca:33:a9:28:67:a7:5f:a4:8f:35:9c:
31:b1:0b:d8:fa:3d:71:fe:18:c3:6d:85:88:de:ab:
80:98:04:72:29:b0:ac:ec:5b:3d:77:ed:5b:67:94:
df:87:25:02:b0:6e:93:6b:77:c9:3e:76:d9:ec:b1:
42:de:e1:4b:9a:f9:1c:45:f1:0b:62:26:b2:e8:9a:
46:e0:a9:6f:12:0b:81:0e:77:93:b5:1e:6a:c1:46:
91:54:67:2d:a2:e8:bc:b4:ea:2e:4a:56:41:96:76:
fc:17:11:f0:d1:34:8b:35:95:e0:35:90:1b:01:78:
a9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DA:80:5A:4B:88:20:95:70:1F:74:97:C5:7D:C9:A4:55:75:F9:3B
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:49:68:e0:54:78:62:a9:35:ab:6e:7d:2a:9f:c8:60:be:06:
48:88:5a:ba:21:3f:14:6a:88:15:4c:97:e9:2c:64:e4:52:84:
e7:1d:e5:2a:b3:7f:90:7d:5b:39:a0:e6:f6:eb:ee:28:db:dc:
c9:72:74:b4:58:26:a6:f4:83:ea:e9:10:7e:f6:ea:fc:06:58:
29:d0:74:e9:4e:2d:80:57:c8:87:2c:c4:aa:76:23:5f:00:2a:
98:5c:22:7f:c5:72:9d:ef:75:b3:3e:68:6b:05:e8:50:cc:1e:
8c:6f:2b:de:27:49:ce:ad:ed:6b:12:12:66:5c:03:d0:1b:9c:
c1:04:21:32:46:7f:65:d9:04:1b:0f:01:10:ea:0a:c0:2a:31:
78:71:db:43:aa:62:14:85:50:15:b8:85:eb:30:fa:e4:66:d1:
6c:d9:85:58:b6:13:11:99:e7:62:68:e4:a9:8a:4f:39:9d:3f:
e2:48:9a:e1:d1:2f:4e:88:fc:4f:61:3e:ce:bf:bb:ed:e0:48:
e8:cb:5e:29:28:57:03:7d:23:6a:d8:34:9c:a5:ec:31:c1:7c:
e2:5b:75:cc:3b:97:8c:d1:dd:a0:17:31:85:a0:f9:db:6f:89:
4f:b4:d4:7c:2f:96:c6:f8:23:fe:55:5a:52:62:3f:8b:ca:da:
86:87:c1:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+jwMArmqV1K0q+Tmj3krMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNDMyNzdiN2NhNzlkMGU5ZTA3ZmM0YTRiMzE4MDQxZGY0
MTVjYjMwHhcNMjUwNjA3MDYwMDQ4WhcNMjUwNjA4MDYwMDQ4WjAzMTEwLwYDVQQD
Eyg0NGRhODA1YTRiODgyMDk1NzAxZjc0OTdjNTdkYzlhNDU1NzVmOTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlJosUokxF6vZKwQZYgHZOKoyrI8
JMxIXM/aFOm/p71ILEAjGw7D5XGA4o12j/JtxlrCXjWvlJUUQTaGEBaK780JWUDm
jOuj1FZeTaS/5wyGpsWqlpJaFg6fo/jpebJ9wSawb3CVIc4CVJiIXZxsVruFXokW
31kannEp6/bt4q4/is3yb/yvQhTlyjOpKGenX6SPNZwxsQvY+j1x/hjDbYWI3quA
mARyKbCs7Fs9d+1bZ5TfhyUCsG6Ta3fJPnbZ7LFC3uFLmvkcRfELYiay6JpG4Klv
EguBDneTtR5qwUaRVGctoui8tOouSlZBlnb8FxHw0TSLNZXgNZAbAXipxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETagFpLiCCVcB90l8V9yaRVdfk7MB8GA1UdIwQY
MBaAFD5DJ3t8p50Ongf8SksxgEHfQVyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUt
M2NmMmE0NjIyZmJjLzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUtM2NmMmE0NjIyZmJj
LzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPElo4FR4
Yqk1q259Kp/IYL4GSIhauiE/FGqIFUyX6Sxk5FKE5x3lKrN/kH1bOaDm9uvuKNvc
yXJ0tFgmpvSD6ukQfvbq/AZYKdB06U4tgFfIhyzEqnYjXwAqmFwif8Vyne91sz5o
awXoUMwejG8r3idJzq3taxISZlwD0BucwQQhMkZ/ZdkEGw8BEOoKwCoxeHHbQ6pi
FIVQFbiF6zD65GbRbNmFWLYTEZnnYmjkqYpPOZ0/4kia4dEvToj8T2E+zr+77eBI
6MteKShXA30jatg0nKXsMcF84lt1zDuXjNHdoBcxhaD522+JT7TUfC+Wxvgj/lVa
UmI/i8rahofBaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:18 2025 by rpki-client