Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
File: 3IScc2nn5SxwUdIdunKYMIvpxCg.mft (raw, json)
Hash identifier: nXcaMsfn9kEnBrsHpXVMUPfdVGyX1yAIg5fhIMPn91A=
Subject key identifier: 81:D0:B9:D3:D4:C9:AF:AE:AB:D8:B8:71:E4:7E:95:B2:27:63:C5:4D
Authority key identifier: DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
Certificate issuer: /CN=dc849c7369e7e52c7051d21dba7298308be9c428
Certificate serial: 0197B5FBF288BBA089E230F56B0A33EBDFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 10:01:17 +0000
Manifest this update: Sat 28 Jun 2025 10:01:17 +0000
Manifest next update: Sun 29 Jun 2025 10:01:17 +0000
Files and hashes: 1: 3IScc2nn5SxwUdIdunKYMIvpxCg.crl (hash: ptj+RB0SraAM5fuH3+XVzkARi8G6iQf8xKhb8SOPSmc=)
2: A1Kij3UmuqlYPUgtFwkRpc3mYFI.roa (hash: 7eehR/MKaZhrxZxZgGixZL1BWxFDBQrZZYdPEfeskDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:f2:88:bb:a0:89:e2:30:f5:6b:0a:33:eb:df:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc849c7369e7e52c7051d21dba7298308be9c428
Validity
Not Before: Jun 28 10:01:17 2025 GMT
Not After : Jun 29 10:01:17 2025 GMT
Subject: CN=81d0b9d3d4c9afaeabd8b871e47e95b22763c54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c4:19:73:66:5b:90:ce:1b:9c:7b:3a:73:46:
68:72:08:9d:ea:72:bb:04:2a:7f:13:06:77:0d:92:
b6:81:58:28:69:92:bc:ca:26:f4:98:e0:d0:f0:db:
80:2c:c2:de:b5:4f:6b:48:6c:84:5a:e4:16:e3:1e:
0a:82:c8:a5:0c:fd:29:d6:0f:2a:9e:1b:2f:5b:16:
57:fb:97:dc:38:8a:34:1a:6d:64:bc:e9:46:5b:98:
b5:63:3f:c6:54:1f:e2:fc:be:80:86:0e:dd:ac:cf:
48:c5:1a:d9:2e:03:89:29:d0:7a:95:d2:23:5b:fc:
0c:87:bc:d3:82:81:f6:7f:b2:c1:db:72:a8:e2:05:
9d:83:ae:fd:8d:23:b8:14:b5:6c:55:b8:1c:09:dd:
2b:5e:f6:1b:c9:45:6c:be:c2:a5:09:37:10:49:00:
02:a8:92:e1:d2:32:24:12:66:04:bf:90:96:c3:3e:
1f:8b:86:76:80:c0:7a:93:80:7c:ca:28:dd:97:ae:
a5:b6:69:e4:be:57:b6:02:ed:ed:4b:02:f9:45:24:
00:98:8c:31:f7:94:d1:28:ef:d1:ec:5d:8e:33:88:
1d:f4:a0:a1:84:ba:49:3e:f8:4c:d1:e0:bc:25:dd:
07:fc:15:ff:48:98:da:f0:22:78:b0:92:0d:9d:3f:
25:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D0:B9:D3:D4:C9:AF:AE:AB:D8:B8:71:E4:7E:95:B2:27:63:C5:4D
X509v3 Authority Key Identifier:
keyid:DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5f:05:f6:6f:22:b9:9b:76:cd:d2:e5:e9:65:07:2f:fa:97:
11:a7:62:87:99:da:24:bc:25:46:1d:d4:c6:2d:8b:3c:e2:45:
64:13:7b:74:f0:31:ba:0b:b4:8c:a0:89:b6:79:b7:b3:bf:13:
ed:66:f8:9a:fe:ff:b1:29:91:4c:37:04:04:27:76:d7:44:e6:
ae:89:5b:ef:b7:a9:e5:46:3e:dc:87:b3:92:90:e1:9a:27:38:
5b:7b:fa:c8:15:d6:f8:fe:c8:81:3a:43:ce:9a:65:f1:4a:a0:
98:9c:32:5d:a8:64:f8:96:e4:b8:40:28:d1:5d:a2:0b:52:26:
6d:80:65:06:59:66:83:c7:2d:c3:1a:be:66:f4:39:96:88:4a:
09:d0:7d:31:5c:c9:77:51:d6:e1:47:47:90:6e:1d:68:f4:c5:
6f:26:f2:81:a2:77:fe:63:05:22:b0:8d:6f:ea:f4:4b:c2:ae:
6a:c6:10:15:6c:f3:a7:92:45:92:3f:a2:9e:20:cb:81:95:ed:
f9:e5:ce:d0:f0:b6:d3:cf:c9:82:67:34:6d:58:1e:4f:f4:3b:
9b:d8:81:7b:44:6c:de:32:5b:f2:5e:f7:66:1d:60:55:9b:ec:
f0:82:fe:31:79:c4:ee:de:d2:b3:4c:fc:89:d8:38:5f:ad:e9:
9b:19:3d:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1+/KIu6CJ4jD1awoz69/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODQ5YzczNjllN2U1MmM3MDUxZDIxZGJhNzI5ODMwOGJl
OWM0MjgwHhcNMjUwNjI4MTAwMTE3WhcNMjUwNjI5MTAwMTE3WjAzMTEwLwYDVQQD
Eyg4MWQwYjlkM2Q0YzlhZmFlYWJkOGI4NzFlNDdlOTViMjI3NjNjNTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MQZc2ZbkM4bnHs6c0Zocgid6nK7
BCp/EwZ3DZK2gVgoaZK8yib0mODQ8NuALMLetU9rSGyEWuQW4x4KgsilDP0p1g8q
nhsvWxZX+5fcOIo0Gm1kvOlGW5i1Yz/GVB/i/L6Ahg7drM9IxRrZLgOJKdB6ldIj
W/wMh7zTgoH2f7LB23Ko4gWdg679jSO4FLVsVbgcCd0rXvYbyUVsvsKlCTcQSQAC
qJLh0jIkEmYEv5CWwz4fi4Z2gMB6k4B8yijdl66ltmnkvle2Au3tSwL5RSQAmIwx
95TRKO/R7F2OM4gd9KChhLpJPvhM0eC8Jd0H/BX/SJja8CJ4sJINnT8lTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHQudPUya+uq9i4ceR+lbInY8VNMB8GA1UdIwQY
MBaAFNyEnHNp5+UscFHSHbpymDCL6cQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYmU4Y2YtMDdlYy00N2NiLThmNjMt
ZDNhMDZkMWY1YjRiLzEvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xYmU4Y2YtMDdlYy00N2NiLThmNjMtZDNhMDZkMWY1YjRi
LzEvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALV8F9m8i
uZt2zdLl6WUHL/qXEadih5naJLwlRh3Uxi2LPOJFZBN7dPAxugu0jKCJtnm3s78T
7Wb4mv7/sSmRTDcEBCd210Tmrolb77ep5UY+3IezkpDhmic4W3v6yBXW+P7IgTpD
zppl8UqgmJwyXahk+JbkuEAo0V2iC1ImbYBlBllmg8ctwxq+ZvQ5lohKCdB9MVzJ
d1HW4UdHkG4daPTFbybygaJ3/mMFIrCNb+r0S8KuasYQFWzzp5JFkj+iniDLgZXt
+eXO0PC208/Jgmc0bVgeT/Q7m9iBe0Rs3jJb8l73Zh1gVZvs8IL+MXnE7t7Ss0z8
idg4X63pmxk9OQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:38 2025 by rpki-client