Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
File: 3OSkxIQPyaX9IUphmqiHtbdiS_U.mft (raw, json)
Hash identifier: mqFDOvmVPQwmR4aHz1yvYofOspk3rVxWOMJ30KMdVWU=
Subject key identifier: 8B:F1:8F:8C:E6:65:1C:EC:62:D2:60:52:82:4A:4D:5E:0E:1E:7F:B9
Authority key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
Certificate issuer: /CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Certificate serial: 0197B5C528A001C7B121292F3AACE4E368B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 09:01:26 +0000
Manifest this update: Sat 28 Jun 2025 09:01:26 +0000
Manifest next update: Sun 29 Jun 2025 09:01:26 +0000
Files and hashes: 1: 3OSkxIQPyaX9IUphmqiHtbdiS_U.crl (hash: Wpo4BSRKt33nKljFaOne7DAg4IGCOUccN8pYeQH6EdU=)
2: SlznhF9EiZYGKKClhlcBqpQpcMg.roa (hash: Jy5c7P7JMODRFjsTTWh43LUlPZcqwSCq10CJL1zOqOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:28:a0:01:c7:b1:21:29:2f:3a:ac:e4:e3:68:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5
Validity
Not Before: Jun 28 09:01:26 2025 GMT
Not After : Jun 29 09:01:26 2025 GMT
Subject: CN=8bf18f8ce6651cec62d26052824a4d5e0e1e7fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:fb:f7:a0:bd:1b:de:76:f8:a4:88:18:fd:
bb:21:ee:c9:e5:31:40:a6:bd:cb:ff:8e:ed:c3:fd:
04:7b:b6:5b:2b:f2:2d:a0:d9:19:26:bc:a4:9e:38:
d9:ad:5d:be:b8:1a:96:70:43:c1:39:68:ff:0f:ef:
c8:4e:df:d3:25:cb:e0:4e:1a:67:4e:fb:2c:d9:e5:
a2:f8:24:82:75:f8:7b:cf:8e:0d:af:73:90:68:fc:
0e:06:b1:72:ee:92:9c:a6:9b:68:17:7f:fd:9a:b7:
15:aa:d1:97:bf:89:da:39:d9:f0:71:7e:05:f6:90:
40:70:88:ac:7a:0f:0d:fc:32:e9:29:64:4b:6f:df:
34:07:17:c2:fa:8f:5e:35:77:c6:44:9b:de:cd:93:
c1:f8:2d:1a:c0:3e:a6:c1:a1:d7:e6:39:e0:f4:3d:
43:48:0d:9a:32:ee:40:8f:ce:3d:09:9c:79:04:a2:
5f:d3:70:07:6d:56:26:9e:1d:a6:e0:06:36:0f:e5:
26:9a:d7:5b:1f:dc:c2:a1:84:43:ea:a9:84:a7:90:
81:b6:bd:18:c0:c8:a8:7a:17:04:a1:44:d8:cc:e4:
45:d4:63:a0:80:fe:1d:8d:0b:77:62:5e:b8:6b:5a:
f8:0e:c3:34:8a:e1:f9:28:0f:60:1f:65:f2:2b:4c:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F1:8F:8C:E6:65:1C:EC:62:D2:60:52:82:4A:4D:5E:0E:1E:7F:B9
X509v3 Authority Key Identifier:
keyid:DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fc:1b:50:62:88:7c:ee:50:d9:bd:57:44:9e:e8:20:09:99:
6e:6e:c6:18:08:20:cf:9b:6c:5a:41:c3:a2:0f:96:6b:b6:c3:
b5:94:f1:09:fb:ed:41:ab:9b:3b:b6:d7:5b:a6:cd:ba:41:db:
a5:f5:65:c7:68:46:78:81:9e:5d:dd:0e:e7:4b:1f:be:c0:95:
c1:2d:75:cc:49:e6:71:25:2e:d3:3d:5e:26:5f:3f:87:70:ac:
b3:39:f5:b8:db:6f:01:93:4d:a0:44:ec:d1:f8:f4:12:db:1c:
6b:ba:12:60:9b:a9:80:11:8a:fa:08:08:5e:dc:5a:c6:52:05:
5d:d0:d0:9f:b8:4d:60:9a:bc:27:11:af:6f:a6:0e:d6:ed:9b:
47:44:36:e8:d6:ca:06:e2:4c:3b:cc:ce:f7:a2:1a:da:94:09:
c8:6e:ac:71:ef:75:f2:84:1e:cb:5f:71:5a:38:0c:a0:91:6f:
95:2c:df:6f:b1:81:fe:11:9a:28:e4:f8:c3:48:35:ee:46:8e:
e7:4b:2d:3d:b2:62:a3:89:c1:4e:2e:b3:96:59:33:08:97:ff:
67:5d:5e:eb:a2:ab:44:6a:e8:93:3e:57:68:93:8d:97:d1:b9:
66:ee:f1:5c:45:4e:de:57:70:18:83:53:5f:b5:6c:0b:87:a7:
09:59:97:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xSigAcexISkvOqzk42i0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTRhNGM0ODQwZmM5YTVmZDIxNGE2MTlhYTg4N2I1Yjc2
MjRiZjUwHhcNMjUwNjI4MDkwMTI2WhcNMjUwNjI5MDkwMTI2WjAzMTEwLwYDVQQD
Eyg4YmYxOGY4Y2U2NjUxY2VjNjJkMjYwNTI4MjRhNGQ1ZTBlMWU3ZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygj796C9G952+KSIGP27Ie7J5TFA
pr3L/47tw/0Ee7ZbK/ItoNkZJryknjjZrV2+uBqWcEPBOWj/D+/ITt/TJcvgThpn
Tvss2eWi+CSCdfh7z44Nr3OQaPwOBrFy7pKcpptoF3/9mrcVqtGXv4naOdnwcX4F
9pBAcIiseg8N/DLpKWRLb980BxfC+o9eNXfGRJvezZPB+C0awD6mwaHX5jng9D1D
SA2aMu5Aj849CZx5BKJf03AHbVYmnh2m4AY2D+UmmtdbH9zCoYRD6qmEp5CBtr0Y
wMioehcEoUTYzORF1GOggP4djQt3Yl64a1r4DsM0iuH5KA9gH2XyK0xGbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvxj4zmZRzsYtJgUoJKTV4OHn+5MB8GA1UdIwQY
MBaAFNzkpMSED8ml/SFKYZqoh7W3Ykv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09Ta3hJUVB5YVg5SVVwaG1xaUh0YmRpU19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMTQwYTgtMDFjMC00ZTM2LWJkMDEt
MmI3YWU3MjIwMTFmLzEvM09Ta3hJUVB5YVg5SVVwaG1xaUh0YmRpU19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wMTQwYTgtMDFjMC00ZTM2LWJkMDEtMmI3YWU3MjIwMTFm
LzEvM09Ta3hJUVB5YVg5SVVwaG1xaUh0YmRpU19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPwbUGKI
fO5Q2b1XRJ7oIAmZbm7GGAggz5tsWkHDog+Wa7bDtZTxCfvtQaubO7bXW6bNukHb
pfVlx2hGeIGeXd0O50sfvsCVwS11zEnmcSUu0z1eJl8/h3Csszn1uNtvAZNNoETs
0fj0Etsca7oSYJupgBGK+ggIXtxaxlIFXdDQn7hNYJq8JxGvb6YO1u2bR0Q26NbK
BuJMO8zO96Ia2pQJyG6sce918oQey19xWjgMoJFvlSzfb7GB/hGaKOT4w0g17kaO
50stPbJio4nBTi6zllkzCJf/Z11e66KrRGrokz5XaJONl9G5Zu7xXEVO3ldwGINT
X7VsC4enCVmX3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:10 2025 by rpki-client