Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: H8y8GS80/pKaLj1RES636IiEIeeHTpHch5zV5YB/9sM=
Subject key identifier: B4:1C:63:9C:23:A2:62:5C:74:66:35:43:E4:75:51:82:BD:00:68:FA
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 019763CCB26E25B2FA93D74644036B290C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 158F
Signing time: Thu 12 Jun 2025 11:00:48 +0000
Manifest this update: Thu 12 Jun 2025 11:00:48 +0000
Manifest next update: Fri 13 Jun 2025 11:00:48 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: uQD5AvFAw8ANWiiTd6mjZSsJyi1v4OdDf+wvhdl4c0Y=)
2: CgFc8x26QM3VY1KiLgccdsxhrXo.roa (hash: P9EWdQX/EOCp7WZ5gfsQmoM4qU0udbuMuOqDFw597IY=)
3: RonOUjE1P34U6vbbFs9w9AsGyN0.roa (hash: fOrx68LqSTvTWV0sMnHRK4WODfXfA787GTb+IyVk3b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:b2:6e:25:b2:fa:93:d7:46:44:03:6b:29:0c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Jun 12 11:00:48 2025 GMT
Not After : Jun 13 11:00:48 2025 GMT
Subject: CN=b41c639c23a2625c74663543e4755182bd0068fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:77:fb:32:ed:eb:48:27:97:6b:a3:29:1c:8c:
62:20:df:e6:cb:2d:52:2e:9f:b1:87:54:83:d9:9f:
4d:65:91:91:55:7f:01:49:df:a2:63:ed:fc:97:39:
fd:a8:84:a5:09:57:fd:66:12:6e:f4:52:18:38:cb:
c5:b8:7e:ed:63:e3:a0:93:7d:d5:79:b0:c5:1f:2f:
4d:d5:3e:de:23:ab:ce:08:01:a2:f7:26:bd:2a:24:
91:e2:56:43:af:94:84:35:6e:4a:d0:9e:13:5b:59:
54:0b:61:1b:c8:78:5b:23:aa:c0:1b:a0:05:d4:10:
11:e8:5d:95:a5:65:7c:08:63:9f:b7:5b:2e:79:a1:
7b:da:03:7a:99:09:aa:6f:b7:89:c0:8c:b2:6d:ce:
ba:93:f5:f6:06:c0:33:33:8b:06:68:c8:9a:65:42:
46:0f:5a:7b:4d:a3:52:4a:91:8d:ec:7d:de:68:60:
bd:6a:fe:a0:4b:8f:25:55:33:f7:c9:1a:0c:59:44:
35:a4:ed:40:55:bf:86:55:74:3c:67:be:0a:be:6c:
f6:62:58:f1:3d:11:d6:0a:79:c4:1c:34:a3:72:98:
8d:c6:22:60:57:42:63:f1:e5:22:25:fe:43:58:91:
2f:01:73:71:52:a1:a9:c2:7d:6c:d6:dc:a6:4b:d1:
2c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1C:63:9C:23:A2:62:5C:74:66:35:43:E4:75:51:82:BD:00:68:FA
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:42:83:42:df:bd:15:a1:ee:5f:b0:40:78:a9:ff:2b:56:fa:
a5:12:3c:8c:64:cf:e7:81:46:f5:4c:e8:ed:91:4d:95:10:b9:
21:ec:c0:4b:06:c7:b2:ae:55:44:dd:d8:0a:fe:86:0d:d1:27:
6b:8d:4e:5b:8d:22:b1:fe:83:75:ee:ef:c0:dd:f7:4b:fc:b2:
0b:26:19:b8:2e:4e:17:33:08:bb:1a:9e:9e:d2:d1:e7:07:81:
9a:42:a7:19:04:17:25:90:21:40:aa:59:53:d3:84:6c:76:a8:
1b:a5:ee:2c:d8:1e:46:4f:11:0f:f5:21:ed:a3:97:31:cb:a3:
27:9c:09:51:ac:c4:86:a1:8f:a4:1c:0d:c2:b6:f1:8b:6b:42:
ee:9c:ea:57:5b:37:99:1e:1b:6c:a2:46:99:02:0d:7a:1d:f1:
99:1a:5b:67:8e:fd:e4:bf:b3:a1:b5:bf:0c:7a:0b:34:d0:7a:
58:96:09:0d:60:c5:39:28:80:5e:57:5d:f9:b2:dd:11:68:52:
75:76:f5:86:2c:2c:e0:4e:d0:de:dd:97:03:03:fb:11:c5:29:
cd:71:cb:95:c5:87:ef:bc:7a:37:61:b5:c6:71:8d:d8:c3:45:
93:e7:5c:cf:f9:a4:2b:89:82:97:cd:16:fb:c1:32:16:45:41:
7d:3c:37:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjzLJuJbL6k9dGRANrKQxNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMGJhNGY1NmU2ZjAzNzcyNTI4NjAzN2FmYzNjMTRjMjkz
YjliODIwHhcNMjUwNjEyMTEwMDQ4WhcNMjUwNjEzMTEwMDQ4WjAzMTEwLwYDVQQD
EyhiNDFjNjM5YzIzYTI2MjVjNzQ2NjM1NDNlNDc1NTE4MmJkMDA2OGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13f7Mu3rSCeXa6MpHIxiIN/myy1S
Lp+xh1SD2Z9NZZGRVX8BSd+iY+38lzn9qISlCVf9ZhJu9FIYOMvFuH7tY+Ogk33V
ebDFHy9N1T7eI6vOCAGi9ya9KiSR4lZDr5SENW5K0J4TW1lUC2EbyHhbI6rAG6AF
1BAR6F2VpWV8CGOft1sueaF72gN6mQmqb7eJwIyybc66k/X2BsAzM4sGaMiaZUJG
D1p7TaNSSpGN7H3eaGC9av6gS48lVTP3yRoMWUQ1pO1AVb+GVXQ8Z74Kvmz2Yljx
PRHWCnnEHDSjcpiNxiJgV0Jj8eUiJf5DWJEvAXNxUqGpwn1s1tymS9EsJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQcY5wjomJcdGY1Q+R1UYK9AGj6MB8GA1UdIwQY
MBaAFN8LpPVubwN3JShgN6/DwUwpO5uCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hODBiZDktYmExMS00NThlLTg0ZTIt
MzZjNjc4OTAwZjc5LzEvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9hODBiZDktYmExMS00NThlLTg0ZTItMzZjNjc4OTAwZjc5
LzEvM3d1azlXNXZBM2NsS0dBM3I4UEJUQ2s3bTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyUKDQt+9
FaHuX7BAeKn/K1b6pRI8jGTP54FG9Uzo7ZFNlRC5IezASwbHsq5VRN3YCv6GDdEn
a41OW40isf6Dde7vwN33S/yyCyYZuC5OFzMIuxqentLR5weBmkKnGQQXJZAhQKpZ
U9OEbHaoG6XuLNgeRk8RD/Uh7aOXMcujJ5wJUazEhqGPpBwNwrbxi2tC7pzqV1s3
mR4bbKJGmQINeh3xmRpbZ4795L+zobW/DHoLNNB6WJYJDWDFOSiAXldd+bLdEWhS
dXb1hiws4E7Q3t2XAwP7EcUpzXHLlcWH77x6N2G1xnGN2MNFk+dcz/mkK4mCl80W
+8EyFkVBfTw3pQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 14:04:45 2025 by rpki-client