Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: KxxRT1HZcoP8RQChtQab417WGupMFnrCgYmYTC+5MNQ=
Subject key identifier: 9A:40:14:82:02:A2:75:B8:AB:22:0B:0F:3E:51:2B:54:8E:0D:AC:00
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 0197B5FBE5725DF90E7E1E0B746E8CB49212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 0F70
Signing time: Sat 28 Jun 2025 10:01:13 +0000
Manifest this update: Sat 28 Jun 2025 10:01:13 +0000
Manifest next update: Sun 29 Jun 2025 10:01:13 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: 6IfznaLZmaW3XXOpAIUIzf+iTCW+bAhnLql3Tv9vzUM=)
2: 6f05f7w22zRcUpz28tjM6XCdsYk.roa (hash: kl4KaLs8etslFAKNgVQw6su1C8PWL6O+HJhYp1T4Tak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:e5:72:5d:f9:0e:7e:1e:0b:74:6e:8c:b4:92:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Jun 28 10:01:13 2025 GMT
Not After : Jun 29 10:01:13 2025 GMT
Subject: CN=9a40148202a275b8ab220b0f3e512b548e0dac00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:40:3f:ad:c0:64:ea:8f:d7:d0:50:3b:35:
89:52:b4:f9:8d:da:b3:30:02:f9:12:28:6f:f7:37:
d0:b6:cd:75:57:80:60:b6:6c:a7:ae:bc:0d:db:47:
a3:14:f9:a4:bc:f1:f7:59:ba:0b:41:f3:5f:a8:4f:
17:58:c1:cf:d9:5a:08:d3:5e:18:85:ea:e7:75:53:
d3:2e:16:1c:d9:3f:82:00:74:1b:06:9b:93:dc:22:
fb:05:65:f8:ef:8a:53:33:78:b7:57:e0:18:f3:b2:
75:3f:a3:ec:bb:b2:66:1d:8e:52:05:ba:2a:fa:3a:
10:ef:af:9c:c9:85:50:a3:8b:59:09:02:6f:ec:2f:
0d:27:fb:b7:0f:a6:b3:e7:42:2d:68:62:71:bf:a1:
b2:86:d1:e5:b6:00:6f:5c:32:bd:60:a4:a1:43:f2:
b1:ea:48:28:86:44:04:c7:6b:85:dc:19:d9:7b:2d:
0c:e5:bb:4b:c6:4c:50:a6:4e:af:77:5a:55:0d:62:
f6:8d:66:43:ce:65:cb:29:42:87:55:14:77:e5:c1:
4e:48:49:06:32:5a:df:6a:0f:d6:8f:83:e0:c6:ee:
88:19:f8:4b:96:70:ed:27:18:c3:8b:ca:a0:0d:4d:
d6:29:69:5e:3b:6b:26:7a:bf:b5:1a:7a:ab:e7:59:
9f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:40:14:82:02:A2:75:B8:AB:22:0B:0F:3E:51:2B:54:8E:0D:AC:00
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:6c:4b:d5:1a:1b:1d:7b:b7:3d:98:67:9a:05:f2:68:b9:95:
aa:a8:ea:9d:58:2c:63:55:c6:23:d4:9c:55:0a:05:84:10:75:
1d:2c:43:0f:08:1a:4a:0e:57:e3:f1:54:1d:28:45:2a:68:fb:
d5:24:a9:33:d4:ed:84:dd:6f:95:3d:86:99:27:b9:47:3c:f1:
94:0a:09:b4:e3:99:1d:1e:36:bf:d7:c0:4e:53:ca:35:93:a6:
a3:34:91:be:89:29:66:fc:f6:32:c1:62:5e:c2:9d:64:2f:29:
d4:82:18:0a:e7:71:f6:50:57:c4:fb:bb:92:b7:16:2f:7e:cb:
22:44:20:f6:7b:4c:cf:f9:3a:85:54:bc:3f:9f:0d:f3:84:89:
c9:19:40:5f:af:0d:47:59:08:f7:d3:37:bb:f8:fb:5d:6b:73:
3b:c3:ff:79:b4:73:27:3e:51:2b:c7:1c:af:93:76:d0:2b:90:
63:a2:02:ac:53:16:fe:72:8c:09:ce:ba:b8:42:04:64:05:9e:
66:d0:1b:b0:64:54:b5:7c:c1:44:d5:bd:de:dd:a4:ce:f3:de:
17:17:32:25:e0:bd:a5:ae:5b:e3:66:46:15:0e:fc:ff:39:bc:
ab:15:2f:c0:9a:16:72:79:6f:84:dc:0a:4c:34:6f:21:f5:3c:
1d:39:e6:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1++VyXfkOfh4LdG6MtJISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjY2E1MjIxOTZmZDA5YmFlNzM5YjZiZDIzMjJlNWViOTBk
YTRmYjkwHhcNMjUwNjI4MTAwMTEzWhcNMjUwNjI5MTAwMTEzWjAzMTEwLwYDVQQD
Eyg5YTQwMTQ4MjAyYTI3NWI4YWIyMjBiMGYzZTUxMmI1NDhlMGRhYzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CZAP63AZOqP19BQOzWJUrT5jdqz
MAL5Eihv9zfQts11V4BgtmynrrwN20ejFPmkvPH3WboLQfNfqE8XWMHP2VoI014Y
herndVPTLhYc2T+CAHQbBpuT3CL7BWX474pTM3i3V+AY87J1P6Psu7JmHY5SBboq
+joQ76+cyYVQo4tZCQJv7C8NJ/u3D6az50ItaGJxv6GyhtHltgBvXDK9YKShQ/Kx
6kgohkQEx2uF3BnZey0M5btLxkxQpk6vd1pVDWL2jWZDzmXLKUKHVRR35cFOSEkG
Mlrfag/Wj4Pgxu6IGfhLlnDtJxjDi8qgDU3WKWleO2smer+1Gnqr51mfxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpAFIIConW4qyILDz5RK1SODawAMB8GA1UdIwQY
MBaAFNzKUiGW/Qm65zm2vSMi5euQ2k+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMt
M2IyNTBhZTE4OTM2LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMtM2IyNTBhZTE4OTM2
LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwGxL1Rob
HXu3PZhnmgXyaLmVqqjqnVgsY1XGI9ScVQoFhBB1HSxDDwgaSg5X4/FUHShFKmj7
1SSpM9TthN1vlT2GmSe5RzzxlAoJtOOZHR42v9fATlPKNZOmozSRvokpZvz2MsFi
XsKdZC8p1IIYCudx9lBXxPu7krcWL37LIkQg9ntMz/k6hVS8P58N84SJyRlAX68N
R1kI99M3u/j7XWtzO8P/ebRzJz5RK8ccr5N20CuQY6ICrFMW/nKMCc66uEIEZAWe
ZtAbsGRUtXzBRNW93t2kzvPeFxcyJeC9pa5b42ZGFQ78/zm8qxUvwJoWcnlvhNwK
TDRvIfU8HTnmMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:19 2025 by rpki-client