Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier: 9z8vDofhK4u1YfYnIiaO8t9kG1ODqvjMisDG0sd7AsM=
Subject key identifier: 48:F0:AE:B2:2D:5A:D1:E5:EC:09:2A:E3:EE:E4:25:27:22:2F:09:64
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 0197B77C8723BB2EFFC733399DD8E7625AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:20 +0000
Manifest this update: Sat 28 Jun 2025 17:01:20 +0000
Manifest next update: Sun 29 Jun 2025 17:01:20 +0000
Files and hashes: 1: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: ezULUJgm72chJF74X4xVAJGgkzVkSpUeDZ6rA9YaReM=)
2: I9GqI9GxRbg5gyNw2oYeQXtgJJg.roa (hash: IdZbo1C2DnUJiJSpOjjTPKnvp3frNBJygc4FMjTeWHU=)
3: OJHrSjDn0A0xOyeisC7fOP_zy4g.roa (hash: 4mrlovUy+cBI29r4SEJkRQxz3HoEwjM6nDvfGvlxWBU=)
4: ie70DJhDrGYxNNPSAG6BpAZrtxY.roa (hash: HiOIeBO8KrrORXl70BQK8AAzSZ8zCob2hQpjThQB7t8=)
5: tr4Wz-5rQhPo47mTFs_LgvHDl8s.roa (hash: PZGVkTuh77FvBlVCnDa38AVdteMzJ1COvOQXzBoIS0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:87:23:bb:2e:ff:c7:33:39:9d:d8:e7:62:5a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Jun 28 17:01:20 2025 GMT
Not After : Jun 29 17:01:20 2025 GMT
Subject: CN=48f0aeb22d5ad1e5ec092ae3eee42527222f0964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:68:3d:3b:60:a8:9b:93:04:3e:e0:8c:da:
94:be:86:7a:fa:0a:b7:ac:ac:22:ac:f7:80:49:d3:
46:6a:5f:ae:f3:14:31:56:88:e5:0e:74:9c:58:a9:
40:c1:cd:c6:50:0b:8d:26:aa:9b:89:3a:ff:22:a7:
4f:1f:03:75:85:92:30:4f:48:26:3e:25:a5:0b:64:
ed:0e:19:7f:88:23:8c:67:18:10:a3:05:e5:81:bf:
84:b4:3b:fd:9a:a1:78:06:26:fb:b1:01:f9:52:49:
48:a6:b5:e2:b1:f5:5d:9a:4f:91:8f:cb:da:17:ef:
6f:91:da:74:a5:c8:f2:66:2c:77:fa:a9:b5:a9:1d:
95:81:b7:83:7c:34:78:8d:93:7c:83:e9:ef:35:13:
86:bc:7f:5c:85:05:37:84:de:c2:08:69:d9:dc:c5:
e3:e3:12:78:81:35:96:b5:b6:42:f4:2c:de:f0:7b:
95:28:eb:ac:d3:2b:e0:96:b0:d2:5f:80:4a:db:28:
53:a8:4b:66:13:73:bc:91:d4:3c:c7:b4:19:99:6e:
b2:64:e9:fd:7a:04:d1:4a:b3:50:b4:85:f8:bc:8b:
26:76:61:bd:e1:9c:a7:1e:e7:41:e9:17:39:39:be:
4c:2f:42:0e:a9:28:00:13:94:c0:de:19:32:cd:08:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F0:AE:B2:2D:5A:D1:E5:EC:09:2A:E3:EE:E4:25:27:22:2F:09:64
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:58:64:36:4d:65:3e:ae:1e:c1:46:4c:0d:8a:e7:f9:46:e6:
d9:ce:c2:43:e7:87:0f:b5:aa:94:8c:81:57:dd:1d:cf:dc:6f:
b7:7c:34:88:0d:94:a5:a2:f7:68:6d:47:22:1a:d6:8e:bc:1a:
9e:24:4d:1b:bf:bb:bc:d7:f2:02:a2:54:42:be:02:07:c6:7c:
dd:c8:b6:a3:8e:b2:79:03:65:e2:27:78:29:5d:84:f7:e6:cf:
d4:70:9f:a9:c4:dd:c9:f3:c2:67:6f:30:2b:10:13:44:1a:2b:
3f:28:0f:19:2d:30:22:f5:de:b5:41:ae:46:a4:08:3d:c5:dc:
2d:60:cc:01:7d:1a:2d:60:12:04:97:5c:be:72:f3:9b:91:6b:
41:8f:d9:db:09:a4:71:b8:92:9f:8f:1f:bc:ad:fb:ed:5c:b7:
73:e2:5a:a7:7f:7e:94:75:d4:95:b6:75:12:38:d6:77:6b:21:
9c:10:42:42:c9:17:fd:c5:4f:76:32:49:11:c4:8b:a9:61:29:
e3:2a:52:f0:21:8b:24:ec:e3:07:f0:ca:00:d0:cb:f9:21:85:
8b:d0:cf:22:4c:5d:85:43:3e:ef:4e:14:9b:02:2f:55:6a:b2:
e1:70:e7:52:ca:aa:16:45:0f:ad:65:ec:35:e5:2f:5c:60:dc:
e3:48:ff:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fIcjuy7/xzM5ndjnYlq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMGI2NjNjNDVkN2JjMjcyNGQxNjg0ODUwODc1ODFlMTQ0
NDhmYjYwHhcNMjUwNjI4MTcwMTIwWhcNMjUwNjI5MTcwMTIwWjAzMTEwLwYDVQQD
Eyg0OGYwYWViMjJkNWFkMWU1ZWMwOTJhZTNlZWU0MjUyNzIyMmYwOTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUdoPTtgqJuTBD7gjNqUvoZ6+gq3
rKwirPeASdNGal+u8xQxVojlDnScWKlAwc3GUAuNJqqbiTr/IqdPHwN1hZIwT0gm
PiWlC2TtDhl/iCOMZxgQowXlgb+EtDv9mqF4Bib7sQH5UklIprXisfVdmk+Rj8va
F+9vkdp0pcjyZix3+qm1qR2VgbeDfDR4jZN8g+nvNROGvH9chQU3hN7CCGnZ3MXj
4xJ4gTWWtbZC9Cze8HuVKOus0yvglrDSX4BK2yhTqEtmE3O8kdQ8x7QZmW6yZOn9
egTRSrNQtIX4vIsmdmG94ZynHudB6Rc5Ob5ML0IOqSgAE5TA3hkyzQgGvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjwrrItWtHl7Akq4+7kJSciLwlkMB8GA1UdIwQY
MBaAFN0LZjxF17wnJNFoSFCHWB4URI+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQt
M2I5ZTNjOGEyZmNhLzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQtM2I5ZTNjOGEyZmNh
LzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFhkNk1l
Pq4ewUZMDYrn+Ubm2c7CQ+eHD7WqlIyBV90dz9xvt3w0iA2UpaL3aG1HIhrWjrwa
niRNG7+7vNfyAqJUQr4CB8Z83ci2o46yeQNl4id4KV2E9+bP1HCfqcTdyfPCZ28w
KxATRBorPygPGS0wIvXetUGuRqQIPcXcLWDMAX0aLWASBJdcvnLzm5FrQY/Z2wmk
cbiSn48fvK377Vy3c+Jap39+lHXUlbZ1EjjWd2shnBBCQskX/cVPdjJJEcSLqWEp
4ypS8CGLJOzjB/DKANDL+SGFi9DPIkxdhUM+704UmwIvVWqy4XDnUsqqFkUPrWXs
NeUvXGDc40j/yg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:36 2025 by rpki-client