Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
File: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json)
Hash identifier: 6xEpryMhEas1WxbC6NhcZBRUNl2WR9Gqbk8ozz5AawA=
Subject key identifier: D2:21:1D:C3:17:85:27:07:60:22:FE:F5:D0:74:04:3B:85:F0:22:AC
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Certificate issuer: /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial: 0197CDCE8654D144DDDFB97C207FFAAC028F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
Manifest number: 1516
Signing time: Thu 03 Jul 2025 01:02:33 +0000
Manifest this update: Thu 03 Jul 2025 01:02:33 +0000
Manifest next update: Fri 04 Jul 2025 01:02:33 +0000
Files and hashes: 1: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: Pj8OO4d7NHySpNMaCTqHRBRyv4EwUFjsAHonpsyK9Qc=)
2: Ldu0EGXQ1MYyGdeyQmSIejuBpSw.roa (hash: zigF7LOpUtd1pS/tfQIWkRyp68k6cu70RaVSak3Qv0w=)
3: Y2gjl-Swzk92ryq3Z-Z6gp7HzLE.roa (hash: PMTJytzI+iwFKg204deNXF6qN+csOXo8Jl+I9xD+TfM=)
4: agxYPLnYdjCRAQfydoFhcZumCgg.roa (hash: NCy7EyPm/0lV8RywpILyDqtiIlQ48M258Jt/bjYI+0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:ce:86:54:d1:44:dd:df:b9:7c:20:7f:fa:ac:02:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Validity
Not Before: Jul 3 01:02:33 2025 GMT
Not After : Jul 4 01:02:33 2025 GMT
Subject: CN=d2211dc3178527076022fef5d074043b85f022ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:76:ba:41:87:59:6d:6d:9b:68:bd:a6:fc:58:
00:cd:b1:00:09:dc:45:a8:ea:da:1e:73:87:ec:6a:
ee:20:c5:23:3d:ca:f5:02:ef:01:26:3b:40:41:ee:
fa:3b:c2:a7:82:a7:ec:1b:51:1b:86:16:fc:6b:ec:
88:3e:77:18:f2:d4:de:b0:57:ed:2b:65:4a:a3:71:
d4:99:8d:61:60:aa:f4:e8:ba:39:67:49:af:8b:90:
2b:63:59:12:47:a2:df:5e:56:53:38:ba:12:22:a7:
9f:e2:2b:01:b5:55:15:12:ec:e3:2f:a3:3a:f1:b0:
ed:2d:b1:67:c1:39:5f:63:f1:fe:82:42:55:60:7e:
99:5c:e3:06:43:e1:e3:85:6b:b5:69:0b:12:7b:eb:
7e:d9:d4:4a:52:ac:62:5e:f5:74:ea:5f:31:74:b0:
c8:64:39:d0:ae:78:b9:9b:2b:22:78:4a:4e:7a:c2:
0e:f0:48:7f:75:9d:65:05:60:0e:a2:69:32:2a:45:
06:59:7f:06:24:f2:dc:33:25:1a:65:ea:18:10:07:
2b:60:99:10:e3:e2:cf:ed:b7:93:4a:5e:e6:f4:93:
12:d2:a0:36:41:bf:04:14:4e:31:04:46:dc:8b:dc:
7b:98:b1:b7:1d:21:48:3c:1c:0f:dc:52:f8:a7:7d:
8d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:21:1D:C3:17:85:27:07:60:22:FE:F5:D0:74:04:3B:85:F0:22:AC
X509v3 Authority Key Identifier:
keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:67:1f:32:3c:0a:86:c4:a3:d3:98:70:59:74:a0:10:08:f1:
ef:18:e8:45:66:39:0a:dc:5e:4e:26:31:64:9d:1f:8c:9f:df:
3d:e7:25:76:d4:ed:a2:c4:46:08:21:3f:76:2a:97:52:e0:9e:
be:12:4a:7a:71:b6:c1:4b:39:b8:b5:23:a1:79:57:ee:32:10:
18:5f:32:9b:86:45:e1:44:48:21:23:e8:05:8b:03:e4:d9:f4:
06:8b:e8:1d:6c:9e:b4:29:3b:2c:9d:02:f9:fd:bc:98:25:bd:
48:0f:eb:64:66:8d:be:f0:68:4a:91:f9:1b:3f:3f:9e:6c:e5:
93:a6:e9:ca:c5:1b:29:c6:11:56:da:2c:fa:b5:1d:1a:cc:cf:
6e:ad:5e:c0:da:be:71:30:c7:1f:8e:55:60:bb:d3:b0:e5:24:
3f:a6:ca:bb:bd:2f:a1:27:0f:6c:3e:01:86:ac:e6:7c:a8:3d:
21:7c:24:b4:ce:2b:cb:b8:87:8d:7e:a0:d2:8e:cb:e0:cd:1b:
fc:59:f5:7a:b1:f9:19:f9:cf:e8:d0:36:e9:fc:2f:37:36:f0:
44:68:ac:45:c2:02:ba:76:90:a3:76:42:22:4d:78:74:ed:13:
7d:d5:a0:c2:8e:df:27:a6:d1:08:bf:b2:68:80:75:7a:70:ae:
e5:c6:2a:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfNzoZU0UTd37l8IH/6rAKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNWY3MmYwZmFjZjUyNzA1NzI3YzAzOWJkYzFmYmI3Y2M5
N2Q0MjgwHhcNMjUwNzAzMDEwMjMzWhcNMjUwNzA0MDEwMjMzWjAzMTEwLwYDVQQD
EyhkMjIxMWRjMzE3ODUyNzA3NjAyMmZlZjVkMDc0MDQzYjg1ZjAyMmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ha6QYdZbW2baL2m/FgAzbEACdxF
qOraHnOH7GruIMUjPcr1Au8BJjtAQe76O8KngqfsG1Ebhhb8a+yIPncY8tTesFft
K2VKo3HUmY1hYKr06Lo5Z0mvi5ArY1kSR6LfXlZTOLoSIqef4isBtVUVEuzjL6M6
8bDtLbFnwTlfY/H+gkJVYH6ZXOMGQ+HjhWu1aQsSe+t+2dRKUqxiXvV06l8xdLDI
ZDnQrni5mysieEpOesIO8Eh/dZ1lBWAOomkyKkUGWX8GJPLcMyUaZeoYEAcrYJkQ
4+LP7beTSl7m9JMS0qA2Qb8EFE4xBEbci9x7mLG3HSFIPBwP3FL4p32NnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIhHcMXhScHYCL+9dB0BDuF8CKsMB8GA1UdIwQY
MBaAFN1fcvD6z1JwVyfAOb3B+7fMl9QoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yZjMzZWUtNTU5MC00YTIyLWI4ZTIt
Mjg4MDYxMjcwNWVlLzEvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yZjMzZWUtNTU5MC00YTIyLWI4ZTItMjg4MDYxMjcwNWVl
LzEvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1mcfMjwK
hsSj05hwWXSgEAjx7xjoRWY5CtxeTiYxZJ0fjJ/fPecldtTtosRGCCE/diqXUuCe
vhJKenG2wUs5uLUjoXlX7jIQGF8ym4ZF4URIISPoBYsD5Nn0BovoHWyetCk7LJ0C
+f28mCW9SA/rZGaNvvBoSpH5Gz8/nmzlk6bpysUbKcYRVtos+rUdGszPbq1ewNq+
cTDHH45VYLvTsOUkP6bKu70voScPbD4BhqzmfKg9IXwktM4ry7iHjX6g0o7L4M0b
/Fn1erH5GfnP6NA26fwvNzbwRGisRcICunaQo3ZCIk14dO0TfdWgwo7fJ6bRCL+y
aIB1enCu5cYqWA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:50:05 2025 by rpki-client