Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.mft (raw, json)
Hash identifier: H4PNrzON9g2tdzJCTdCREHvQpaVo2n7k/hY99kYpUEE=
Subject key identifier: 93:E2:9A:F4:A4:9F:7D:B0:58:DB:C3:50:A6:09:27:60:BD:EA:02:82
Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Certificate serial: 0197B6325CEA330F155DA8825953B8408F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
Manifest number: 08DB
Signing time: Sat 28 Jun 2025 11:00:43 +0000
Manifest this update: Sat 28 Jun 2025 11:00:43 +0000
Manifest next update: Sun 29 Jun 2025 11:00:43 +0000
Files and hashes: 1: 3R2uzTCut0ZSu92l2tlnbOSIqkk.crl (hash: tv71vAjOI9D4r/EJLFmiLaEGAcFi3orrmVa0/Ar4Kx4=)
2: 3jwAJkscmhb8NSw4un_w0ZUqE_E.roa (hash: /Q2oG/fmxx/4QlsXXEqOyxHV9Ye6s1RkScscquc109A=)
3: 4mOa1eiOJdcewQ4JsIW-qskCauo.roa (hash: iU5a4TzwFm2kJsvICm/D9T1ZRQoz++Cq67dw1/HeL2g=)
4: CXGUOccTDu6x1YyIQfa-qjSpPdk.roa (hash: r4qpBtId2VEmuyzWlIPXdikWdV98Yneiil1e7VOsia4=)
5: IlOsEMD7ILB9j5FhhZ10NN6XXx0.roa (hash: gwOuiCu86d+6YjbDxDzDd3u72bl4nQy8FzU+NPDlo3k=)
6: cMeqdhzIVxayTI5Te-oZwPQzjz0.roa (hash: opO/yGSPCMGlHiRXXAkyr0DveRWYRoFkmjqGZrYYDFc=)
7: dsfkSXYJLfZWJjDQMc0Y0owm7FA.roa (hash: W0p5k/KWht0yDd7EzO060gDAd+rVO0Q+Y0m/UDAfM10=)
8: z21uLBAl7J5qNeu7_wTnfr1gN3Q.roa (hash: hGK3SDsyu3nnm6fMnZyOrn3oCumiT/HHk1hSsPcxxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:5c:ea:33:0f:15:5d:a8:82:59:53:b8:40:8f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49
Validity
Not Before: Jun 28 11:00:43 2025 GMT
Not After : Jun 29 11:00:43 2025 GMT
Subject: CN=93e29af4a49f7db058dbc350a6092760bdea0282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:0a:a0:15:0d:98:28:d4:8b:00:b1:b9:80:
35:47:40:70:a1:40:8f:df:4d:19:51:11:81:5a:cd:
e1:dd:4b:bd:93:df:d8:a2:39:24:de:0d:8b:7f:29:
47:85:4e:89:c9:4f:26:37:14:e7:5e:19:37:4e:82:
57:35:26:8e:09:a9:91:dc:18:be:a3:90:e6:30:5a:
94:e4:ef:10:93:3c:98:da:09:49:0b:d1:47:70:0e:
70:b6:c5:9b:e0:fc:93:b8:91:f8:eb:24:d6:f1:16:
f0:15:8a:2d:9c:29:e6:1e:40:e0:82:3e:c1:13:95:
28:88:8f:57:07:a9:23:5e:dd:97:04:f6:5a:29:11:
96:44:c6:fb:96:41:d9:00:cc:2b:75:bf:f2:8d:32:
b7:90:9c:27:43:d1:04:0c:9e:4b:e2:0c:1a:2d:9c:
07:6b:b8:2a:a5:a5:15:32:12:d5:f9:77:1b:c0:bf:
24:dd:73:a5:53:4b:76:97:19:a7:57:40:60:75:87:
da:9f:0c:3e:bf:91:c8:64:12:c3:03:0f:b2:8a:b7:
ff:2e:38:2b:f6:f9:f5:76:12:a0:ca:e2:0b:8d:83:
a9:0b:8d:df:bf:3f:71:2c:4d:92:6f:1e:3f:5b:65:
ea:2a:da:fe:a8:77:61:9c:9c:e1:51:45:e5:bb:60:
fd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E2:9A:F4:A4:9F:7D:B0:58:DB:C3:50:A6:09:27:60:BD:EA:02:82
X509v3 Authority Key Identifier:
keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cb:3f:13:06:1a:57:b9:74:02:58:66:04:91:7d:e0:4f:9e:
7a:66:bf:6e:d5:63:43:b1:15:f0:66:09:49:d1:38:13:dd:e8:
77:6b:fe:96:2c:b2:ed:a4:0a:26:54:df:4c:cc:25:7e:67:08:
0d:76:39:54:8d:d9:70:c6:a2:ff:62:27:a4:35:3c:e7:b4:70:
ba:e1:e8:ab:e5:3f:9f:c6:e2:00:61:dc:65:67:4b:2d:71:c0:
13:d3:8d:52:b0:9b:71:b6:13:63:29:cc:32:8d:ed:13:45:bc:
58:e4:cf:7b:0c:e4:1a:8f:2c:4c:d2:1d:aa:be:67:30:24:48:
ea:45:03:f8:1a:4e:d1:c2:c0:e2:dd:1a:01:ab:8e:c5:cd:5f:
74:db:5d:ef:a3:77:d3:f5:ac:1f:7d:8b:15:9a:06:5e:ed:6a:
22:08:88:de:fd:95:81:31:e3:e8:e3:5c:c2:72:0d:bc:28:4d:
5a:0b:07:24:0e:d8:8b:b1:1e:db:da:a3:b0:b3:fa:ff:6e:7f:
32:6f:2a:22:14:d7:1e:3d:12:f0:46:db:51:97:10:3c:fa:52:
8b:5e:9e:08:54:c8:51:1e:44:5b:ef:87:93:6c:93:a3:9c:1e:
e1:b6:80:1d:32:ef:37:d5:56:b8:c3:72:32:7f:4a:c7:a5:0b:
be:cb:40:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MlzqMw8VXaiCWVO4QI9+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMWRhZWNkMzBhZWI3NDY1MmJiZGRhNWRhZDk2NzZjZTQ4
OGFhNDkwHhcNMjUwNjI4MTEwMDQzWhcNMjUwNjI5MTEwMDQzWjAzMTEwLwYDVQQD
Eyg5M2UyOWFmNGE0OWY3ZGIwNThkYmMzNTBhNjA5Mjc2MGJkZWEwMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQUKoBUNmCjUiwCxuYA1R0BwoUCP
300ZURGBWs3h3Uu9k9/Yojkk3g2LfylHhU6JyU8mNxTnXhk3ToJXNSaOCamR3Bi+
o5DmMFqU5O8QkzyY2glJC9FHcA5wtsWb4PyTuJH46yTW8RbwFYotnCnmHkDggj7B
E5UoiI9XB6kjXt2XBPZaKRGWRMb7lkHZAMwrdb/yjTK3kJwnQ9EEDJ5L4gwaLZwH
a7gqpaUVMhLV+XcbwL8k3XOlU0t2lxmnV0BgdYfanww+v5HIZBLDAw+yirf/Ljgr
9vn1dhKgyuILjYOpC43fvz9xLE2Sbx4/W2XqKtr+qHdhnJzhUUXlu2D96QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPimvSkn32wWNvDUKYJJ2C96gKCMB8GA1UdIwQY
MBaAFN0drs0wrrdGUrvdpdrZZ2zkiKpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct
MDYwYWMwODkwOTY2LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTctMDYwYWMwODkwOTY2
LzEvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8s/EwYa
V7l0AlhmBJF94E+eema/btVjQ7EV8GYJSdE4E93od2v+liyy7aQKJlTfTMwlfmcI
DXY5VI3ZcMai/2InpDU857RwuuHoq+U/n8biAGHcZWdLLXHAE9ONUrCbcbYTYynM
Mo3tE0W8WOTPewzkGo8sTNIdqr5nMCRI6kUD+BpO0cLA4t0aAauOxc1fdNtd76N3
0/WsH32LFZoGXu1qIgiI3v2VgTHj6ONcwnINvChNWgsHJA7Yi7Ee29qjsLP6/25/
Mm8qIhTXHj0S8EbbUZcQPPpSi16eCFTIUR5EW++Hk2yTo5we4baAHTLvN9VWuMNy
Mn9Kx6ULvstAmw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:26:37 2025 by rpki-client