Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
File: r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json)
Hash identifier: pyUACiPTWiPUykJSkYTGvSSoru7B+IAxXGYEB99LJI0=
Subject key identifier: 42:3E:75:D4:36:FF:A9:AA:7E:5A:D4:C3:F3:CD:F7:D3:34:2E:90:CF
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial: 0197B96AB69162D4B63DA50CAE1DBD8F785F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
Manifest number: 15BF
Signing time: Sun 29 Jun 2025 02:01:07 +0000
Manifest this update: Sun 29 Jun 2025 02:01:07 +0000
Manifest next update: Mon 30 Jun 2025 02:01:07 +0000
Files and hashes: 1: N9sOXFw97UnrkSQWGmd4QE2g0Pc.roa (hash: FcVUr7Wqd51Nq1eKBFPb0ZOL/WKLNXNrrGtgMRztb2M=)
2: p6HHOYDEee_YFxcXEQQw4tj_loo.roa (hash: XVgmeoKKw2smz01W8p65Y0a7sBeyS3+sdPmsdrroyxo=)
3: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: 0SS6i1XJRFSzD7mTR/HbzfOLMm/wecwOlcz0tfiMObU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:b6:91:62:d4:b6:3d:a5:0c:ae:1d:bd:8f:78:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Validity
Not Before: Jun 29 02:01:07 2025 GMT
Not After : Jun 30 02:01:07 2025 GMT
Subject: CN=423e75d436ffa9aa7e5ad4c3f3cdf7d3342e90cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:f4:d4:e0:be:26:c9:30:de:66:45:96:b3:
ae:54:46:ee:12:7b:75:71:ef:df:74:10:86:3e:46:
bd:ad:22:f1:cd:c3:1b:45:4e:e7:60:b8:26:2b:30:
ec:a8:35:f2:b7:fc:6e:ef:f4:2b:2a:39:75:cf:5f:
a8:14:c9:f0:ac:78:91:a6:dc:aa:a3:f5:f5:da:6f:
36:8d:ad:bb:bc:42:6d:88:0c:63:78:70:a0:35:6b:
5e:2c:c2:30:cd:96:74:9f:47:8f:18:6f:5f:c3:5d:
a6:c2:23:34:4c:fa:3a:89:d3:f0:fb:4f:18:15:be:
47:f9:80:38:da:7a:d4:54:7e:86:25:46:85:6e:50:
ac:91:17:fd:4f:03:21:e6:dd:c5:c2:ff:78:40:23:
7b:0a:dc:1a:27:be:a1:6b:a9:8d:e6:96:1e:55:15:
9c:e1:3c:a6:65:37:72:10:e4:7b:eb:d6:9a:38:22:
ab:a9:2b:c1:06:77:70:2c:3d:6c:0e:c7:e6:54:dd:
ed:16:90:3d:f5:d8:12:ec:d7:63:6e:af:3c:b1:71:
a1:f7:af:39:f1:18:ab:2f:a6:f0:0d:bc:7b:e2:72:
f0:6a:a0:6f:67:df:d5:1a:02:7a:fa:9b:7f:19:0d:
4b:77:52:e4:72:6a:e0:3e:d7:f5:69:d8:55:85:42:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3E:75:D4:36:FF:A9:AA:7E:5A:D4:C3:F3:CD:F7:D3:34:2E:90:CF
X509v3 Authority Key Identifier:
keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b8:8b:51:5e:f4:78:19:87:2a:70:ed:24:c6:61:1c:ac:32:
6d:a0:76:a3:15:7f:5a:23:52:00:ec:c1:36:47:df:f7:4f:fa:
15:db:42:af:b5:87:7b:54:69:04:31:52:1a:3c:77:1b:2c:75:
d4:30:1f:38:7c:67:eb:9a:b9:6c:11:39:9d:3a:88:0d:62:cd:
24:0b:20:84:9d:3f:b9:06:a6:64:08:83:c9:0d:63:7c:4a:7e:
2f:10:48:1e:87:da:17:73:d7:32:8c:a0:32:84:ed:0f:d9:a7:
61:33:c3:6c:e0:75:63:89:4a:35:7b:3d:7d:29:94:a8:d9:74:
93:64:87:2e:a3:dd:e8:cb:56:4f:27:67:f4:7b:0e:90:de:df:
38:c1:7a:29:ac:29:27:e0:a3:d9:65:9a:1d:f8:d6:6a:9d:b0:
7f:d4:61:a5:24:ec:de:71:38:d4:49:a4:17:8b:40:99:36:04:
a0:89:d5:2f:f5:a6:5e:90:2b:fe:ff:cf:87:b7:c4:a6:04:97:
0e:ed:e1:1d:3f:e5:8a:00:6e:a9:ca:68:68:ba:1a:99:f7:de:
2e:12:66:38:49:1b:23:dd:2f:27:23:c6:be:61:89:77:83:a8:
9b:65:f9:08:a8:4e:13:30:69:8c:de:6f:0e:47:86:51:df:5e:
75:aa:fe:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5araRYtS2PaUMrh29j3hfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzNmZjFlYzU1ZjQ5Mjk2ZGQ3MzQwMzlmYTAyODRjYzQw
MGViMjYwHhcNMjUwNjI5MDIwMTA3WhcNMjUwNjMwMDIwMTA3WjAzMTEwLwYDVQQD
Eyg0MjNlNzVkNDM2ZmZhOWFhN2U1YWQ0YzNmM2NkZjdkMzM0MmU5MGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscb01OC+Jskw3mZFlrOuVEbuEnt1
ce/fdBCGPka9rSLxzcMbRU7nYLgmKzDsqDXyt/xu7/QrKjl1z1+oFMnwrHiRptyq
o/X12m82ja27vEJtiAxjeHCgNWteLMIwzZZ0n0ePGG9fw12mwiM0TPo6idPw+08Y
Fb5H+YA42nrUVH6GJUaFblCskRf9TwMh5t3Fwv94QCN7CtwaJ76ha6mN5pYeVRWc
4TymZTdyEOR769aaOCKrqSvBBndwLD1sDsfmVN3tFpA99dgS7Ndjbq88sXGh9685
8RirL6bwDbx74nLwaqBvZ9/VGgJ6+pt/GQ1Ld1LkcmrgPtf1adhVhUIdewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEI+ddQ2/6mqflrUw/PN99M0LpDPMB8GA1UdIwQY
MBaAFK9z/x7FX0kpbdc0A5+gKEzEAOsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZWE1ODEtNWNkZS00NTc0LWJhMGEt
MmM2MmRlN2IzZTQ1LzEvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jZWE1ODEtNWNkZS00NTc0LWJhMGEtMmM2MmRlN2IzZTQ1
LzEvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKriLUV70
eBmHKnDtJMZhHKwybaB2oxV/WiNSAOzBNkff90/6FdtCr7WHe1RpBDFSGjx3Gyx1
1DAfOHxn65q5bBE5nTqIDWLNJAsghJ0/uQamZAiDyQ1jfEp+LxBIHofaF3PXMoyg
MoTtD9mnYTPDbOB1Y4lKNXs9fSmUqNl0k2SHLqPd6MtWTydn9HsOkN7fOMF6Kawp
J+Cj2WWaHfjWap2wf9RhpSTs3nE41EmkF4tAmTYEoInVL/WmXpAr/v/Ph7fEpgSX
Du3hHT/ligBuqcpoaLoamffeLhJmOEkbI90vJyPGvmGJd4Oom2X5CKhOEzBpjN5v
DkeGUd9edar+fQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:07:54 2025 by rpki-client