Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
File: V3zQhta4KSWruLuBXmWIUlIuCSE.mft (raw, json)
Hash identifier: 8KAOGQqJ0PkaqrI7vFIOSrFdhkYfjq3PsV720rWcyC8=
Subject key identifier: 15:C8:86:6A:85:AF:91:AE:D2:C5:9F:44:A6:19:0F:D7:3F:5E:6D:47
Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
Certificate issuer: /CN=577cd086d6b82925abb8bb815e658852522e0921
Certificate serial: 0197B6D7300607A3E8DAA98A38D4125E1073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 14:00:45 +0000
Manifest this update: Sat 28 Jun 2025 14:00:45 +0000
Manifest next update: Sun 29 Jun 2025 14:00:45 +0000
Files and hashes: 1: 2rRfCyoNB-FJKFhJjElIAYCjuZM.roa (hash: BxYRtCrYD8JZ1KlROq/oLLjDfPXIXRywkgLQEAE4Bdo=)
2: V3zQhta4KSWruLuBXmWIUlIuCSE.crl (hash: BV19kuRaDYOk98w+N5q7xt22KGJeegcGtpm04AYL5L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:30:06:07:a3:e8:da:a9:8a:38:d4:12:5e:10:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921
Validity
Not Before: Jun 28 14:00:45 2025 GMT
Not After : Jun 29 14:00:45 2025 GMT
Subject: CN=15c8866a85af91aed2c59f44a6190fd73f5e6d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:eb:27:b8:8d:83:5b:ed:0f:d1:bd:b0:0d:
23:2b:7f:8f:15:a7:86:52:fc:93:f5:24:c3:1f:5d:
a2:ab:d2:51:43:37:e9:1c:c4:43:0c:64:ad:8b:c7:
7c:71:57:3e:d8:03:ce:6f:3a:6e:45:d8:92:58:31:
ca:e9:f0:ec:95:01:36:45:28:23:7f:91:5d:8a:d4:
9a:1c:ab:4f:bc:00:07:41:3b:8b:9b:ec:63:59:75:
88:87:5d:ad:7e:1c:a4:2e:b8:fc:ca:be:be:fd:20:
06:bc:3b:d8:c6:d8:d2:8c:80:11:a5:22:d6:d0:98:
4f:c6:75:09:49:20:cd:22:84:c7:30:e7:60:09:3b:
57:0d:8b:68:56:d8:83:be:1f:ba:6c:78:cd:78:2b:
67:bc:06:15:dc:10:c2:49:73:7b:08:b0:e4:af:17:
ed:a9:4b:8d:60:ad:76:ff:de:8e:c0:6b:a3:0d:17:
3d:ed:49:d8:bf:a5:89:ec:1e:17:e5:73:06:0e:45:
d9:e3:ef:3c:c3:30:ad:eb:d6:92:3d:61:7f:e7:b9:
0a:cc:00:8e:fa:13:89:c2:3c:18:29:6f:f9:c0:f8:
cd:fb:a1:a4:c9:7d:0c:8e:f2:25:63:aa:27:21:7c:
ca:67:9f:82:40:e8:fc:45:e8:04:d2:c1:22:d9:ec:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C8:86:6A:85:AF:91:AE:D2:C5:9F:44:A6:19:0F:D7:3F:5E:6D:47
X509v3 Authority Key Identifier:
keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d2:83:c3:3d:2b:52:eb:55:9c:ef:8d:d3:24:e0:8d:7d:74:
e7:47:1d:ad:c5:1b:ae:d5:60:f7:c4:ac:db:2c:8e:9d:f5:08:
7c:52:c4:50:ad:9c:1d:e1:be:6a:72:3c:57:31:3c:c9:17:8f:
26:b6:68:40:b2:6a:16:eb:fc:de:16:fc:d2:71:91:fa:97:5b:
5b:b5:75:29:81:e1:63:37:d8:91:dd:ba:0d:8b:16:2e:50:e0:
d2:1b:96:21:77:f8:8f:3a:d1:77:66:26:0e:6f:16:e8:c0:b2:
75:54:50:ae:c1:84:df:c3:d8:2d:45:8d:03:5d:0a:88:fd:65:
5f:ea:5a:3c:ff:75:c1:a9:9b:e4:4d:80:69:7c:14:bd:31:7d:
46:06:ba:6e:36:96:49:f4:9e:8c:14:0b:47:8c:e8:d2:d1:82:
64:d3:31:66:64:b0:23:63:4d:86:a6:d8:ea:b6:d1:6f:28:44:
54:25:5f:3f:5e:53:26:a0:41:33:49:80:6b:ea:3e:29:68:70:
13:3c:c4:1e:59:96:79:6d:77:de:20:ef:93:3e:a3:31:d3:ec:
98:75:0f:4d:f9:61:5b:01:69:88:81:1b:32:5b:2f:64:25:a2:
49:93:51:57:f4:02:48:f4:c0:53:5d:46:92:5c:ee:eb:95:c8:
ef:5d:f4:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21zAGB6Po2qmKONQSXhBzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3N2NkMDg2ZDZiODI5MjVhYmI4YmI4MTVlNjU4ODUyNTIy
ZTA5MjEwHhcNMjUwNjI4MTQwMDQ1WhcNMjUwNjI5MTQwMDQ1WjAzMTEwLwYDVQQD
EygxNWM4ODY2YTg1YWY5MWFlZDJjNTlmNDRhNjE5MGZkNzNmNWU2ZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUrrJ7iNg1vtD9G9sA0jK3+PFaeG
UvyT9STDH12iq9JRQzfpHMRDDGSti8d8cVc+2APObzpuRdiSWDHK6fDslQE2RSgj
f5FditSaHKtPvAAHQTuLm+xjWXWIh12tfhykLrj8yr6+/SAGvDvYxtjSjIARpSLW
0JhPxnUJSSDNIoTHMOdgCTtXDYtoVtiDvh+6bHjNeCtnvAYV3BDCSXN7CLDkrxft
qUuNYK12/96OwGujDRc97UnYv6WJ7B4X5XMGDkXZ4+88wzCt69aSPWF/57kKzACO
+hOJwjwYKW/5wPjN+6GkyX0MjvIlY6onIXzKZ5+CQOj8RegE0sEi2ey7GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXIhmqFr5Gu0sWfRKYZD9c/Xm1HMB8GA1UdIwQY
MBaAFFd80IbWuCklq7i7gV5liFJSLgkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjkt
NzIwOGNkOThkODgxLzEvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjktNzIwOGNkOThkODgx
LzEvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9KDwz0r
UutVnO+N0yTgjX1050cdrcUbrtVg98Ss2yyOnfUIfFLEUK2cHeG+anI8VzE8yReP
JrZoQLJqFuv83hb80nGR+pdbW7V1KYHhYzfYkd26DYsWLlDg0huWIXf4jzrRd2Ym
Dm8W6MCydVRQrsGE38PYLUWNA10KiP1lX+paPP91wamb5E2AaXwUvTF9Rga6bjaW
SfSejBQLR4zo0tGCZNMxZmSwI2NNhqbY6rbRbyhEVCVfP15TJqBBM0mAa+o+KWhw
EzzEHlmWeW133iDvkz6jMdPsmHUPTflhWwFpiIEbMlsvZCWiSZNRV/QCSPTAU11G
klzu65XI7130/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:07 2025 by rpki-client