Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
File: Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft (raw, json)
Hash identifier: mkCm1NMC7cpzlyogYwgplgsyOIpx2CN4puju/wwO7zg=
Subject key identifier: 67:54:20:EE:C3:F2:47:E6:BF:B6:84:7B:28:6A:34:FF:BD:96:B3:63
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 019746D488F02CB9063D004B937A2BCDCF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
Manifest number: 140D
Signing time: Fri 06 Jun 2025 20:00:23 +0000
Manifest this update: Fri 06 Jun 2025 20:00:23 +0000
Manifest next update: Sat 07 Jun 2025 20:00:23 +0000
Files and hashes: 1: Cg1rIwAa6O9b5pHj9iMwHAZ7fSE.roa (hash: 4N+U7+PRWNjJVqJ2KygRwPrjK1Ien5sO5KXTSIsM0Ro=)
2: Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl (hash: TR0Z2I+sN0KuQONOurC4ettUd3JsCJJvwpmsgOSdt1g=)
3: jEJLoTRCi4k3NEVL7X3pLoKEmFE.roa (hash: Lc1enY7HbrV71Kk7B0ntI6Fug2DvBrGWJwGE9EwyfTM=)
4: mbp15f0zxyh0dCrGSwd4xsonIIo.roa (hash: sfiOy/EdM6txH5f3xqJYHSVySCyvLRH3tGusFyVii6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:88:f0:2c:b9:06:3d:00:4b:93:7a:2b:cd:cf:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Jun 6 20:00:23 2025 GMT
Not After : Jun 7 20:00:23 2025 GMT
Subject: CN=675420eec3f247e6bfb6847b286a34ffbd96b363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:50:9e:bc:fd:5b:0e:41:88:d9:24:2d:f5:47:
2c:31:c3:3a:93:e0:87:9c:ad:bc:20:07:79:96:b0:
be:3d:99:57:5d:58:da:2a:9a:6f:76:0b:95:d5:cf:
50:51:d8:51:82:8a:3d:c5:12:6d:0c:e6:81:89:3e:
9d:5a:0c:e1:93:c8:96:de:e1:13:84:26:e7:2d:80:
97:ef:b3:9d:21:e2:3f:0f:8a:48:73:b8:c0:71:a6:
65:fe:f9:3c:75:13:0f:81:f1:60:25:36:1b:cc:55:
7e:34:91:cb:0e:e4:75:02:12:e0:6b:b0:d3:4e:59:
18:b9:67:0c:a8:88:ef:00:60:30:3b:b0:ac:d9:29:
fd:f9:da:c2:b0:7e:b5:ae:6f:95:d2:2e:26:0a:e2:
a3:9b:e5:a0:ec:1a:b9:bc:2d:c8:d9:10:92:91:a3:
0a:8b:bf:e1:33:7d:9b:dd:a4:d7:81:20:d9:5a:d0:
8d:0c:15:12:a4:4d:28:84:45:95:14:60:1c:1b:a5:
ea:da:21:47:21:f6:ec:69:2d:89:e4:6a:fa:03:60:
6f:ae:51:4b:bd:ee:9c:43:56:34:64:89:f8:b9:77:
db:7d:0d:07:2c:c3:47:b6:5a:4e:8b:13:53:2a:9d:
01:12:5d:fb:8d:e1:b9:66:91:be:8a:46:cf:b1:cd:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:54:20:EE:C3:F2:47:E6:BF:B6:84:7B:28:6A:34:FF:BD:96:B3:63
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f2:33:da:03:40:e6:3b:62:9d:97:d6:5b:c3:da:a8:b2:7e:
08:f5:47:c3:d2:89:b3:80:44:ad:20:fc:0d:f5:15:f7:82:90:
d7:5a:86:24:29:eb:fb:be:d1:cf:71:ed:35:af:3e:5c:5d:b7:
c6:07:92:ee:60:99:15:70:ab:34:1d:c2:25:50:e9:b3:a6:74:
27:4b:44:c6:2b:52:7f:32:9c:93:ab:c6:68:72:81:bf:bc:6a:
3e:3f:a1:d8:58:09:1f:22:0c:c4:fd:c8:1d:9d:62:e3:b5:ee:
5c:78:4d:81:7b:18:f2:63:4b:61:73:97:2c:98:84:55:a3:0f:
ee:fb:48:aa:dc:82:e4:2a:59:72:8a:83:f8:20:41:80:a9:e2:
c2:a2:94:f4:6e:da:b5:6d:9e:77:74:03:53:79:7a:03:b8:95:
c9:33:e0:61:40:6b:6b:0b:66:a6:10:aa:07:fa:47:b8:a3:d9:
eb:9f:b3:e6:c2:96:84:48:c4:bb:37:45:6b:2c:78:94:6e:5b:
f0:02:d7:60:1c:aa:2d:cb:05:6b:03:35:a5:45:0f:2a:b4:ff:
93:a3:4f:a3:c2:f4:f2:f5:57:b5:e4:0a:c4:19:9e:52:98:9c:
e2:37:6c:33:d5:23:7e:ac:9c:68:92:70:7a:41:23:71:46:59:
4c:c8:89:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1IjwLLkGPQBLk3orzc9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NGRjZmE5NjM5OTcxNjY5MmQyNDVhODA0ODg3YzA5ZGE0
NTFmOGYwHhcNMjUwNjA2MjAwMDIzWhcNMjUwNjA3MjAwMDIzWjAzMTEwLwYDVQQD
Eyg2NzU0MjBlZWMzZjI0N2U2YmZiNjg0N2IyODZhMzRmZmJkOTZiMzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FCevP1bDkGI2SQt9UcsMcM6k+CH
nK28IAd5lrC+PZlXXVjaKppvdguV1c9QUdhRgoo9xRJtDOaBiT6dWgzhk8iW3uET
hCbnLYCX77OdIeI/D4pIc7jAcaZl/vk8dRMPgfFgJTYbzFV+NJHLDuR1AhLga7DT
TlkYuWcMqIjvAGAwO7Cs2Sn9+drCsH61rm+V0i4mCuKjm+Wg7Bq5vC3I2RCSkaMK
i7/hM32b3aTXgSDZWtCNDBUSpE0ohEWVFGAcG6Xq2iFHIfbsaS2J5Gr6A2BvrlFL
ve6cQ1Y0ZIn4uXfbfQ0HLMNHtlpOixNTKp0BEl37jeG5ZpG+ikbPsc0aOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdUIO7D8kfmv7aEeyhqNP+9lrNjMB8GA1UdIwQY
MBaAFEZNz6ljmXFmktJFqASIfAnaRR+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTct
YWYxZjM2ODExMDk4LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82YmU1YTYtZWIwZS00NGI0LWI2YTctYWYxZjM2ODExMDk4
LzEvUmszUHFXT1pjV2FTMGtXb0JJaDhDZHBGSDQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/Iz2gNA
5jtinZfWW8PaqLJ+CPVHw9KJs4BErSD8DfUV94KQ11qGJCnr+77Rz3HtNa8+XF23
xgeS7mCZFXCrNB3CJVDps6Z0J0tExitSfzKck6vGaHKBv7xqPj+h2FgJHyIMxP3I
HZ1i47XuXHhNgXsY8mNLYXOXLJiEVaMP7vtIqtyC5CpZcoqD+CBBgKniwqKU9G7a
tW2ed3QDU3l6A7iVyTPgYUBrawtmphCqB/pHuKPZ65+z5sKWhEjEuzdFayx4lG5b
8ALXYByqLcsFawM1pUUPKrT/k6NPo8L08vVXteQKxBmeUpic4jdsM9UjfqycaJJw
ekEjcUZZTMiJEA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:03 2025 by rpki-client