Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: JDhI+C7Wc/hI8KfR3CEIcnUl1St7dNc9D6JuXWAGkdc=
Subject key identifier: 18:EE:CF:74:2A:00:82:0B:86:5D:78:9C:7D:CF:C8:00:CD:50:53:4E
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 0197B6A0BA4861EAF42E3C0062025D2B5A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 0BB1
Signing time: Sat 28 Jun 2025 13:01:15 +0000
Manifest this update: Sat 28 Jun 2025 13:01:15 +0000
Manifest next update: Sun 29 Jun 2025 13:01:15 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: UhsSkG1iPr0WdHYrX/T2QDwXJxUxlOGEDnAVFMpz4AI=)
2: XaWBl1pdgCEAOtWYlDnABozWGpY.roa (hash: NkTYxkGxoFs3l9oUz9ZXBu6um1xVsgaeI44+mBnF24s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ba:48:61:ea:f4:2e:3c:00:62:02:5d:2b:5a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Jun 28 13:01:15 2025 GMT
Not After : Jun 29 13:01:15 2025 GMT
Subject: CN=18eecf742a00820b865d789c7dcfc800cd50534e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:e1:ba:39:34:4d:e7:70:0e:39:3e:8d:d8:
96:fb:6d:fd:63:5b:19:89:40:eb:22:17:46:76:fc:
64:07:ac:86:16:7c:34:7c:72:63:38:de:53:82:48:
3a:13:70:63:05:7f:c3:da:ef:19:67:03:a1:79:44:
bb:93:95:b1:79:52:bc:92:ae:c0:8f:c2:dd:66:bf:
e5:9b:74:07:90:08:29:f6:5d:22:d5:38:6b:48:95:
3d:3d:7a:7f:32:14:33:43:45:e9:14:be:11:22:88:
b3:28:f5:81:ae:63:9c:ed:6c:19:1c:6e:3b:e0:54:
a0:77:d9:ec:d1:b7:8a:5e:57:31:d4:b9:3b:47:a3:
3d:4c:4d:b0:7c:f8:ec:78:fa:eb:d0:4e:d4:80:d1:
1e:15:5e:5a:6b:6c:b9:aa:26:1a:39:94:f0:91:54:
6d:67:df:cf:12:aa:b6:bb:65:e3:4d:d8:ba:09:9d:
89:24:55:a0:0b:fb:45:e2:8a:a8:f1:56:c0:d8:f5:
7b:23:e6:f8:1a:fc:9d:03:00:08:82:04:31:eb:f8:
91:9b:5d:62:42:80:17:95:e3:d2:23:27:ce:b1:3b:
36:3b:f3:a5:cc:41:53:40:29:a1:da:c4:79:75:25:
9f:9d:41:c0:e5:ff:02:2e:0a:20:be:ac:95:16:e3:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EE:CF:74:2A:00:82:0B:86:5D:78:9C:7D:CF:C8:00:CD:50:53:4E
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a6:bb:3b:2f:27:ff:5d:2a:11:84:f3:b9:30:20:42:ff:63:
00:96:5f:b1:7f:d7:a4:f6:c1:fb:f2:4c:88:55:82:2f:0a:ce:
0a:f5:19:a9:b8:d4:3f:d9:f0:3d:d1:4f:3b:6d:cc:d2:d9:00:
48:c0:97:00:50:da:d3:7f:7b:f8:29:6c:9b:10:ce:8d:3b:1e:
0a:94:17:03:f6:64:fa:1b:1b:78:0f:a8:e5:64:ef:ad:67:e4:
2e:3b:32:23:2a:35:82:49:4e:35:a5:f2:af:e6:dd:ca:10:bc:
48:4a:07:43:2a:0d:3c:5c:36:36:a9:36:eb:1a:51:9b:45:29:
5e:ae:d8:6f:0e:26:3a:48:f8:96:04:3d:ea:fc:2c:8a:c9:bf:
9d:50:ae:9e:a9:97:4f:f1:8a:3d:49:08:69:17:0a:82:d5:6c:
e4:d2:35:f7:3a:c1:95:e5:f8:81:0b:1f:6f:d8:d2:15:a7:55:
ac:18:00:1a:e9:0e:d6:12:e2:f9:d2:3e:7e:9d:15:22:3d:73:
e0:af:ad:73:8a:77:e5:d4:c5:31:fe:67:00:e5:17:4e:79:07:
09:65:88:99:83:8a:bf:fe:3b:0d:03:90:f9:07:76:f8:3b:3d:
96:86:e1:5b:11:60:33:ba:8e:82:43:5a:91:84:45:76:1e:96:
a5:43:e0:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oLpIYer0LjwAYgJdK1pWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYTVhMjIyYWNiOTlhYjIzOTg0MzllZGVkNzc3MGE2NWVl
NjZkZTYwHhcNMjUwNjI4MTMwMTE1WhcNMjUwNjI5MTMwMTE1WjAzMTEwLwYDVQQD
EygxOGVlY2Y3NDJhMDA4MjBiODY1ZDc4OWM3ZGNmYzgwMGNkNTA1MzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeXhujk0TedwDjk+jdiW+239Y1sZ
iUDrIhdGdvxkB6yGFnw0fHJjON5Tgkg6E3BjBX/D2u8ZZwOheUS7k5WxeVK8kq7A
j8LdZr/lm3QHkAgp9l0i1ThrSJU9PXp/MhQzQ0XpFL4RIoizKPWBrmOc7WwZHG47
4FSgd9ns0beKXlcx1Lk7R6M9TE2wfPjsePrr0E7UgNEeFV5aa2y5qiYaOZTwkVRt
Z9/PEqq2u2XjTdi6CZ2JJFWgC/tF4oqo8VbA2PV7I+b4GvydAwAIggQx6/iRm11i
QoAXlePSIyfOsTs2O/OlzEFTQCmh2sR5dSWfnUHA5f8CLgogvqyVFuPrLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjuz3QqAIILhl14nH3PyADNUFNOMB8GA1UdIwQY
MBaAFN2loiKsuZqyOYQ57e13cKZe5m3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQt
NzUzYWIxOTY4N2Q4LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQtNzUzYWIxOTY4N2Q4
LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKa7Oy8n
/10qEYTzuTAgQv9jAJZfsX/XpPbB+/JMiFWCLwrOCvUZqbjUP9nwPdFPO23M0tkA
SMCXAFDa0397+ClsmxDOjTseCpQXA/Zk+hsbeA+o5WTvrWfkLjsyIyo1gklONaXy
r+bdyhC8SEoHQyoNPFw2Nqk26xpRm0UpXq7Ybw4mOkj4lgQ96vwsism/nVCunqmX
T/GKPUkIaRcKgtVs5NI19zrBleX4gQsfb9jSFadVrBgAGukO1hLi+dI+fp0VIj1z
4K+tc4p35dTFMf5nAOUXTnkHCWWImYOKv/47DQOQ+Qd2+Ds9lobhWxFgM7qOgkNa
kYRFdh6WpUPg4A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:04 2025 by rpki-client