Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier: 2QWxTm6WFi78OD6kYeOpHOUpaf/KpoFQq/LQurgeR8I=
Subject key identifier: 3A:68:CB:87:65:0C:74:2C:3D:C2:26:C9:39:8D:89:73:4F:5B:18:E3
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 0197B7EA6AD688F9143D6768CF4184237ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number: 0BA1
Signing time: Sat 28 Jun 2025 19:01:22 +0000
Manifest this update: Sat 28 Jun 2025 19:01:22 +0000
Manifest next update: Sun 29 Jun 2025 19:01:22 +0000
Files and hashes: 1: G1ZoPreJjIkkyyNJWvhlfTtWo1U.roa (hash: ZGtSGL/7afo62ORK+9uxVq7WnlKM3t68x8dY3Lc6a40=)
2: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: MYFWxRW+pnmj4P4XoQnTRl2FHQGyVWAgCCWeQHCk99k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:6a:d6:88:f9:14:3d:67:68:cf:41:84:23:7a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Jun 28 19:01:22 2025 GMT
Not After : Jun 29 19:01:22 2025 GMT
Subject: CN=3a68cb87650c742c3dc226c9398d89734f5b18e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:24:74:77:ba:cb:c5:85:e2:04:26:c1:e6:
a3:ed:6f:6d:74:a0:5c:79:d5:d0:5a:f9:68:f6:3d:
52:36:9f:38:28:41:19:cf:05:66:cd:7a:96:c0:de:
e7:e2:0d:55:f8:f1:02:37:02:bb:80:b2:1d:84:b5:
1f:0f:e6:f4:40:d4:a4:a5:39:09:e7:b5:c6:94:a6:
cd:84:9f:4d:27:d6:55:65:26:5a:81:ae:75:fb:d0:
37:36:62:a0:c8:14:c4:cb:7f:0c:06:9f:3c:ab:2d:
58:bf:27:0c:c1:94:d0:69:2c:67:09:d0:53:38:c9:
a8:c2:ef:a9:29:b9:59:a9:e2:78:f1:b7:02:ba:34:
6c:68:76:05:4d:42:59:c1:cc:f1:cd:ea:00:22:95:
45:a0:50:95:40:c9:9d:db:8c:88:2b:76:99:87:78:
40:3d:ad:2b:79:71:02:72:0f:93:26:11:51:a1:9e:
75:5d:08:2a:fa:3f:f8:bb:33:12:f0:27:33:66:49:
e2:98:77:28:bf:cf:cc:9f:05:a8:a4:d1:7b:5e:dd:
26:dc:29:fd:d7:0c:90:39:ef:8d:b5:61:b7:70:94:
67:d8:4d:51:7c:00:a5:12:69:7f:99:13:01:5f:e5:
7c:6d:f1:d6:a4:57:6d:fd:e1:81:39:e6:7f:5c:13:
67:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:68:CB:87:65:0C:74:2C:3D:C2:26:C9:39:8D:89:73:4F:5B:18:E3
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b0:d1:a3:a5:b2:2e:34:c3:f2:17:7c:8e:39:4e:77:ef:11:
3d:ad:e2:42:b8:69:26:a5:e0:f0:6b:43:6a:14:8c:da:b0:b9:
43:04:e1:1d:9d:7c:3c:72:6f:97:5c:f7:4c:30:3c:f8:1f:53:
11:2d:4a:73:90:2a:48:2b:dc:92:2f:39:6f:e3:f5:5b:79:f5:
5e:33:11:a6:18:7e:ea:e0:15:d2:ad:3c:fe:a4:6f:e6:c4:9d:
cd:14:fe:57:ba:78:24:bd:97:a8:85:68:9d:98:1f:12:df:06:
cf:06:cd:2f:33:ae:04:8f:65:fc:11:54:45:52:6e:a6:27:1e:
cb:8d:b7:22:13:ba:58:d7:89:92:55:8b:b0:73:33:88:5b:63:
a4:a0:cb:16:3b:0a:11:55:88:65:8d:87:44:77:f6:62:c9:8d:
5f:d1:9e:37:cf:ea:15:31:a5:40:82:b3:a3:32:31:9f:fe:fe:
e0:3c:44:e5:db:55:af:1e:f9:67:df:9c:c6:ee:73:7c:16:df:
e5:7a:94:8b:f6:15:c8:91:e2:67:4d:ae:65:f8:a6:47:c4:e3:
2c:a3:33:0c:7b:18:cb:1b:af:7c:31:4e:a0:4f:35:d2:a0:83:
50:1e:f2:80:aa:09:8c:d0:de:0f:ca:66:19:67:2d:e9:9f:79:
fb:00:f0:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36mrWiPkUPWdoz0GEI3rbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZmZjYmVjODg4YzEwNDdmMjIxZDdjZjkzOTZiZjE0MTJh
YmFmOWIwHhcNMjUwNjI4MTkwMTIyWhcNMjUwNjI5MTkwMTIyWjAzMTEwLwYDVQQD
EygzYTY4Y2I4NzY1MGM3NDJjM2RjMjI2YzkzOThkODk3MzRmNWIxOGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3YkdHe6y8WF4gQmweaj7W9tdKBc
edXQWvlo9j1SNp84KEEZzwVmzXqWwN7n4g1V+PECNwK7gLIdhLUfD+b0QNSkpTkJ
57XGlKbNhJ9NJ9ZVZSZaga51+9A3NmKgyBTEy38MBp88qy1YvycMwZTQaSxnCdBT
OMmowu+pKblZqeJ48bcCujRsaHYFTUJZwczxzeoAIpVFoFCVQMmd24yIK3aZh3hA
Pa0reXECcg+TJhFRoZ51XQgq+j/4uzMS8CczZknimHcov8/MnwWopNF7Xt0m3Cn9
1wyQOe+NtWG3cJRn2E1RfAClEml/mRMBX+V8bfHWpFdt/eGBOeZ/XBNnSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpoy4dlDHQsPcImyTmNiXNPWxjjMB8GA1UdIwQY
MBaAFD//y+yIjBBH8iHXz5OWvxQSq6+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUF9fTDdJaU1FRWZ5SWRmUGs1YV9GQktycjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iYmI3YjYtM2VlNS00NmQ5LWIzN2It
NjE2NjdjNzY5MWIyLzEvUF9fTDdJaU1FRWZ5SWRmUGs1YV9GQktycjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9iYmI3YjYtM2VlNS00NmQ5LWIzN2ItNjE2NjdjNzY5MWIy
LzEvUF9fTDdJaU1FRWZ5SWRmUGs1YV9GQktycjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobDRo6Wy
LjTD8hd8jjlOd+8RPa3iQrhpJqXg8GtDahSM2rC5QwThHZ18PHJvl1z3TDA8+B9T
ES1Kc5AqSCvcki85b+P1W3n1XjMRphh+6uAV0q08/qRv5sSdzRT+V7p4JL2XqIVo
nZgfEt8GzwbNLzOuBI9l/BFURVJupicey423IhO6WNeJklWLsHMziFtjpKDLFjsK
EVWIZY2HRHf2YsmNX9GeN8/qFTGlQIKzozIxn/7+4DxE5dtVrx75Z9+cxu5zfBbf
5XqUi/YVyJHiZ02uZfimR8TjLKMzDHsYyxuvfDFOoE810qCDUB7ygKoJjNDeD8pm
GWct6Z95+wDwzA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:39:01 2025 by rpki-client