Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: rC+zJPGFSC7QmvmS8brBFMZt2lIGmjHbISnbYdnEGw4=
Subject key identifier: 9F:40:F0:4D:72:A2:E4:A5:25:AA:51:3C:E4:AE:B2:87:72:29:60:63
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 019765BB2031B5183EF20676DB0262416FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 1590
Signing time: Thu 12 Jun 2025 20:00:51 +0000
Manifest this update: Thu 12 Jun 2025 20:00:51 +0000
Manifest next update: Fri 13 Jun 2025 20:00:51 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: LWKDmtAzw9Qt67Yn1oi5GSBlHG6mtGtBLU65AKlBBQs=)
2: CgFc8x26QM3VY1KiLgccdsxhrXo.roa (hash: P9EWdQX/EOCp7WZ5gfsQmoM4qU0udbuMuOqDFw597IY=)
3: RonOUjE1P34U6vbbFs9w9AsGyN0.roa (hash: fOrx68LqSTvTWV0sMnHRK4WODfXfA787GTb+IyVk3b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 15:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:bb:20:31:b5:18:3e:f2:06:76:db:02:62:41:6f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Jun 12 20:00:51 2025 GMT
Not After : Jun 13 20:00:51 2025 GMT
Subject: CN=9f40f04d72a2e4a525aa513ce4aeb28772296063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:79:fc:86:e8:36:79:ca:ba:fa:2b:b6:ff:
7a:ec:66:00:53:45:ad:e5:f8:d8:1a:57:4e:1e:0d:
09:7c:c2:39:54:6c:2e:63:bd:38:81:6e:ad:23:32:
8e:f4:9e:68:0c:06:d1:72:4c:83:63:15:36:67:f2:
94:1b:1e:b9:73:50:69:f7:14:15:28:8a:b1:29:51:
ee:bd:f0:78:e4:3b:ab:76:e1:0d:b7:73:cd:e8:44:
2e:16:2e:91:63:31:d5:04:f5:aa:67:78:f5:b2:40:
ca:83:5d:4a:66:c5:cb:33:ac:d2:9b:fe:c1:4d:8b:
44:c4:f4:16:a4:dd:f7:56:18:a5:3c:26:61:95:1c:
9c:7e:f0:90:e3:1f:8e:6f:80:b0:d3:71:35:fa:8b:
66:3f:9f:56:b1:8a:f5:7c:97:dc:fa:fb:b2:6d:e4:
03:2c:e1:7c:41:2e:28:74:42:cf:76:88:eb:10:1a:
92:0e:c2:52:1b:64:49:df:c4:f3:aa:ba:e9:53:67:
e6:37:ca:bb:d8:fe:a8:ed:44:20:b5:e5:ee:d9:d8:
2e:2f:6a:12:7d:04:93:38:0d:89:10:00:dc:62:4f:
08:8c:c3:d3:a8:b5:2a:53:da:cd:16:9c:e6:6d:8b:
fe:e8:a7:e6:10:59:cf:bb:01:6e:3e:ea:10:ee:82:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:40:F0:4D:72:A2:E4:A5:25:AA:51:3C:E4:AE:B2:87:72:29:60:63
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:76:b5:d3:d4:58:ac:49:1d:7d:46:25:b8:39:37:80:f7:77:
1a:72:19:bd:a3:29:82:f6:5a:a6:8b:fd:de:8f:15:bc:f0:d0:
e5:45:1a:2e:6a:fe:1b:f6:8f:1d:6e:e7:47:56:79:01:7b:c9:
83:10:17:35:73:78:b1:20:68:68:15:ae:58:32:6e:d2:51:43:
5c:41:3d:36:1a:4d:09:73:3e:8f:46:f0:73:55:a3:16:48:0e:
ba:56:75:84:a8:b2:8d:bf:0a:ac:7a:86:6c:b9:a0:aa:90:34:
4d:52:66:25:b4:51:8c:29:78:54:f4:7f:52:e2:2f:fc:54:5d:
e7:d2:44:7a:5b:88:6e:3c:e6:db:e3:e6:5a:f8:ab:9a:28:05:
88:42:65:01:22:cf:30:b8:19:b4:ed:64:3a:19:25:7d:b0:da:
e7:ef:98:c4:dc:c0:31:c0:8f:21:41:b0:c3:f7:ef:cd:4f:af:
0e:11:81:6a:f2:8a:26:4f:a8:bc:d6:0e:2a:6f:89:17:37:28:
a2:5c:59:ca:3a:a2:5e:eb:6e:1c:86:90:df:32:61:47:ce:f0:
3b:9c:e4:9a:81:eb:82:60:d1:c4:14:20:69:de:fc:86:85:5a:
9e:d4:51:e1:3b:c6:1f:60:ef:31:2b:11:c1:2a:51:aa:d4:1d:
ae:76:87:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdluyAxtRg+8gZ22wJiQW/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMGJhNGY1NmU2ZjAzNzcyNTI4NjAzN2FmYzNjMTRjMjkz
YjliODIwHhcNMjUwNjEyMjAwMDUxWhcNMjUwNjEzMjAwMDUxWjAzMTEwLwYDVQQD
Eyg5ZjQwZjA0ZDcyYTJlNGE1MjVhYTUxM2NlNGFlYjI4NzcyMjk2MDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0J5/IboNnnKuvortv967GYAU0Wt
5fjYGldOHg0JfMI5VGwuY704gW6tIzKO9J5oDAbRckyDYxU2Z/KUGx65c1Bp9xQV
KIqxKVHuvfB45DurduENt3PN6EQuFi6RYzHVBPWqZ3j1skDKg11KZsXLM6zSm/7B
TYtExPQWpN33VhilPCZhlRycfvCQ4x+Ob4Cw03E1+otmP59WsYr1fJfc+vuybeQD
LOF8QS4odELPdojrEBqSDsJSG2RJ38TzqrrpU2fmN8q72P6o7UQgteXu2dguL2oS
fQSTOA2JEADcYk8IjMPTqLUqU9rNFpzmbYv+6KfmEFnPuwFuPuoQ7oJXwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9A8E1youSlJapRPOSusodyKWBjMB8GA1UdIwQY
MBaAFN8LpPVubwN3JShgN6/DwUwpO5uCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hODBiZDktYmExMS00NThlLTg0ZTIt
MzZjNjc4OTAwZjc5LzEvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9hODBiZDktYmExMS00NThlLTg0ZTItMzZjNjc4OTAwZjc5
LzEvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXa109RY
rEkdfUYluDk3gPd3GnIZvaMpgvZapov93o8VvPDQ5UUaLmr+G/aPHW7nR1Z5AXvJ
gxAXNXN4sSBoaBWuWDJu0lFDXEE9NhpNCXM+j0bwc1WjFkgOulZ1hKiyjb8KrHqG
bLmgqpA0TVJmJbRRjCl4VPR/UuIv/FRd59JEeluIbjzm2+PmWvirmigFiEJlASLP
MLgZtO1kOhklfbDa5++YxNzAMcCPIUGww/fvzU+vDhGBavKKJk+ovNYOKm+JFzco
olxZyjqiXutuHIaQ3zJhR87wO5zkmoHrgmDRxBQgad78hoVantRR4TvGH2DvMSsR
wSpRqtQdrnaHZw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 01:22:31 2025 by rpki-client