Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
File: is3dXDDVgOsP7soqFs9cWoslaP0.mft (raw, json)
Hash identifier: NO0xnxYQ/1aYAXZoXN9ZuPCU61dlvIaR6c+cKS0pStw=
Subject key identifier: AD:B9:45:CD:F3:0B:52:9E:D8:DB:54:FB:3A:65:29:E3:D0:D6:A6:AF
Authority key identifier: 8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
Certificate issuer: /CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Certificate serial: 0197B9A142E7DB55C9F7F28AB310D956F742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 03:00:42 +0000
Manifest this update: Sun 29 Jun 2025 03:00:42 +0000
Manifest next update: Mon 30 Jun 2025 03:00:42 +0000
Files and hashes: 1: 1-BU0QGGPOY6StLl6EjdaPUoRp0U.roa (hash: YErgeEfB3mK/ybWEoY6pFZ+o+6uteNHWASk7smyhzI8=)
2: is3dXDDVgOsP7soqFs9cWoslaP0.crl (hash: pMHT7nCLjgxf+wnRyc+H2NENLRIijhjMXgKODyrSgIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:42:e7:db:55:c9:f7:f2:8a:b3:10:d9:56:f7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Validity
Not Before: Jun 29 03:00:42 2025 GMT
Not After : Jun 30 03:00:42 2025 GMT
Subject: CN=adb945cdf30b529ed8db54fb3a6529e3d0d6a6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:a3:cc:0c:e6:87:77:46:8a:28:5b:36:8a:
1e:28:c8:1a:58:bd:32:14:a0:26:c2:9b:0e:39:6d:
d0:d9:29:63:97:74:15:65:57:3d:2e:7a:17:1a:14:
95:36:fc:7e:c2:96:c8:fe:6b:99:1e:c9:80:f2:f0:
e3:5b:4c:62:ed:1f:51:04:65:3a:5a:3c:ea:a6:57:
fa:26:08:9f:31:a5:56:06:9a:2b:1e:16:41:8c:50:
98:b9:de:65:11:f5:23:57:6c:50:24:ac:f5:f1:f0:
06:38:ac:75:d3:61:d4:69:ac:fb:99:8a:fa:01:0b:
87:49:07:75:55:df:65:f9:e1:55:99:99:e6:54:5d:
96:30:a1:cb:f2:ab:ec:ee:3e:1a:2d:1a:44:bb:e5:
fd:f8:41:71:4b:75:08:70:2e:36:e4:e0:a5:1c:b3:
3d:78:97:45:89:23:d9:1e:85:11:5b:b0:7a:71:2e:
f9:14:e8:9f:09:37:b3:90:33:f5:bd:25:a3:42:ac:
4b:ce:52:0e:b1:85:5b:4c:aa:b1:dd:cc:82:1e:29:
3c:02:22:13:b0:a8:3c:28:75:50:62:8d:8a:e4:bb:
92:dd:b8:43:69:2d:0f:47:3c:1c:13:fc:e2:f0:67:
08:73:b7:ac:e7:62:ab:84:df:b0:99:56:4b:98:4e:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B9:45:CD:F3:0B:52:9E:D8:DB:54:FB:3A:65:29:E3:D0:D6:A6:AF
X509v3 Authority Key Identifier:
keyid:8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ba:be:4e:ce:6e:41:b6:cb:b6:31:ba:6c:9f:25:9f:0c:0b:
de:14:63:30:4e:c7:7e:01:b5:18:58:cf:3e:b8:e0:39:95:e8:
5f:55:e7:5d:43:5a:02:f4:c6:53:d3:36:ae:94:dd:42:51:56:
81:d4:6c:48:5b:ab:2b:0d:6b:53:ac:21:bc:64:3a:92:e4:83:
35:14:e7:02:2e:97:38:e0:ac:f4:fa:8f:33:4b:b6:50:34:dd:
7e:20:3c:c4:ed:cd:fc:e7:c4:be:7e:84:f2:e7:ab:86:dc:73:
c9:c6:ec:f6:61:1d:b3:af:1c:14:6d:3b:75:6c:a1:4e:6d:e2:
ec:1c:0d:a0:2f:ef:4e:40:6a:37:ea:eb:62:87:45:b9:f7:89:
85:af:d8:80:51:4c:5f:c8:42:a2:39:27:ab:47:77:ce:9c:50:
24:41:0f:14:2f:28:d3:12:6f:34:5d:a0:e5:0a:7c:9f:f0:33:
27:32:c0:39:a5:f8:db:9e:fc:9c:3f:2d:07:d5:e2:a0:ca:44:
5b:af:d5:24:81:54:c1:62:e4:2e:fb:f0:bd:42:50:45:e4:d0:
59:5c:9d:51:4f:a6:6a:f3:58:25:0a:0b:6a:e5:b7:2d:d9:7a:
10:a8:fd:f5:27:72:e3:b6:33:9f:26:85:50:c1:f6:a0:19:70:
49:d4:2f:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oULn21XJ9/KKsxDZVvdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhY2RkZDVjMzBkNTgwZWIwZmVlY2EyYTE2Y2Y1YzVhOGIy
NTY4ZmQwHhcNMjUwNjI5MDMwMDQyWhcNMjUwNjMwMDMwMDQyWjAzMTEwLwYDVQQD
EyhhZGI5NDVjZGYzMGI1MjllZDhkYjU0ZmIzYTY1MjllM2QwZDZhNmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxISjzAzmh3dGiihbNooeKMgaWL0y
FKAmwpsOOW3Q2Sljl3QVZVc9LnoXGhSVNvx+wpbI/muZHsmA8vDjW0xi7R9RBGU6
Wjzqplf6JgifMaVWBporHhZBjFCYud5lEfUjV2xQJKz18fAGOKx102HUaaz7mYr6
AQuHSQd1Vd9l+eFVmZnmVF2WMKHL8qvs7j4aLRpEu+X9+EFxS3UIcC425OClHLM9
eJdFiSPZHoURW7B6cS75FOifCTezkDP1vSWjQqxLzlIOsYVbTKqx3cyCHik8AiIT
sKg8KHVQYo2K5LuS3bhDaS0PRzwcE/zi8GcIc7es52KrhN+wmVZLmE4U+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK25Rc3zC1Ke2NtU+zplKePQ1qavMB8GA1UdIwQY
MBaAFIrN3Vww1YDrD+7KKhbPXFqLJWj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXMzZFhERFZnT3NQN3NvcUZzOWNXb3NsYVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yNWFjYTctN2UyOC00ODdjLTg2ZDIt
MTdiMWM3Mzc5MzAwLzEvaXMzZFhERFZnT3NQN3NvcUZzOWNXb3NsYVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yNWFjYTctN2UyOC00ODdjLTg2ZDItMTdiMWM3Mzc5MzAw
LzEvaXMzZFhERFZnT3NQN3NvcUZzOWNXb3NsYVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7q+Ts5u
QbbLtjG6bJ8lnwwL3hRjME7HfgG1GFjPPrjgOZXoX1XnXUNaAvTGU9M2rpTdQlFW
gdRsSFurKw1rU6whvGQ6kuSDNRTnAi6XOOCs9PqPM0u2UDTdfiA8xO3N/OfEvn6E
8uerhtxzycbs9mEds68cFG07dWyhTm3i7BwNoC/vTkBqN+rrYodFufeJha/YgFFM
X8hCojknq0d3zpxQJEEPFC8o0xJvNF2g5Qp8n/AzJzLAOaX42578nD8tB9XioMpE
W6/VJIFUwWLkLvvwvUJQReTQWVydUU+mavNYJQoLauW3Ldl6EKj99Sdy47YznyaF
UMH2oBlwSdQvnw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:40 2025 by rpki-client