Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier: B4FZPdpTpILOgHkchZaMlD9Q22Y/tSu/nXxlAopzniw=
Subject key identifier: F7:95:5C:83:9B:DD:0A:EE:F3:8C:0B:D6:0D:B6:CA:E2:FD:9B:6F:89
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial: 0197B70EC708D5CB8D8F04C774EB056084BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number: 13B1
Signing time: Sat 28 Jun 2025 15:01:28 +0000
Manifest this update: Sat 28 Jun 2025 15:01:28 +0000
Manifest next update: Sun 29 Jun 2025 15:01:28 +0000
Files and hashes: 1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: EtHOprzmjAE1ckVpJWsrd4Mr/Cdv4AJ1yHGtQiV3+j8=)
2: B_7Zlkd4Da3E9wFCt54W5RXpv-Y.roa (hash: t+XndUbN6Hm/lPYW31tO+vpnF3Hi5LgCuvErDr9oYwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c7:08:d5:cb:8d:8f:04:c7:74:eb:05:60:84:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Validity
Not Before: Jun 28 15:01:28 2025 GMT
Not After : Jun 29 15:01:28 2025 GMT
Subject: CN=f7955c839bdd0aeef38c0bd60db6cae2fd9b6f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:22:c4:b7:88:8f:43:49:43:01:f1:9f:e8:
68:3e:5b:55:9b:fe:cc:1a:17:88:c8:e6:2c:ec:29:
67:ec:61:46:14:df:35:c1:3d:fb:b4:a0:e8:43:29:
8b:1b:4e:2a:59:54:ec:26:b4:8a:33:b9:eb:b8:f8:
29:75:5d:80:49:3b:e3:ff:ed:d0:5a:35:99:ef:b6:
c4:6c:82:30:0c:92:e9:ee:93:d6:3e:f0:0d:3f:2b:
03:d2:5f:e3:c8:ed:bc:93:e0:d1:0f:a0:86:64:45:
22:a4:62:54:92:2a:c5:bb:43:60:55:8c:e3:b8:c5:
df:4c:06:1e:3f:aa:4a:d7:fc:c2:3a:21:ac:c5:6f:
c1:4d:ea:b1:be:50:fe:fd:52:4a:a2:f3:da:db:72:
ef:71:18:46:cd:7b:35:e8:fe:a2:10:72:02:65:a3:
bf:7b:ed:db:c1:18:91:da:84:12:98:25:18:1c:07:
b2:c2:db:16:10:aa:17:ca:87:a8:3c:72:48:93:23:
8b:72:ff:9d:a0:73:32:d5:da:67:30:f6:c6:61:10:
7f:19:71:9b:2d:27:5f:98:04:93:9e:9e:55:96:e9:
85:62:43:11:b8:0b:a7:a2:c0:3c:1c:ed:99:dd:fd:
83:cf:79:7e:d1:9f:12:4e:f0:61:48:f7:28:8e:ed:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:95:5C:83:9B:DD:0A:EE:F3:8C:0B:D6:0D:B6:CA:E2:FD:9B:6F:89
X509v3 Authority Key Identifier:
keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:4c:32:36:54:6c:65:dc:8f:e5:21:ef:e2:9b:e6:c4:7f:6e:
34:68:1f:72:87:35:bc:7f:4e:a0:a6:86:52:53:88:62:32:b2:
af:b2:4c:09:ee:8c:c1:6d:d7:9e:f8:60:c9:e4:81:61:84:eb:
fa:87:21:a4:d2:0e:98:b1:0c:35:99:0f:3c:13:2f:94:7a:63:
67:d7:f4:10:35:d7:88:9f:59:3f:6a:38:3e:9d:98:6f:b2:d9:
c4:cb:d8:30:e0:d0:11:a4:c4:09:cc:fb:ab:ca:d1:d6:6f:91:
08:2a:96:4a:dc:50:14:0d:de:83:b9:e6:97:ff:28:7a:46:88:
ec:4b:e9:fb:45:5a:12:d5:f1:a7:c8:13:8a:23:b6:65:97:e0:
f0:38:3b:2d:36:76:ea:1a:52:20:9c:89:3f:eb:f4:0b:78:3a:
42:6f:25:e4:9b:91:fe:6d:8e:42:d7:9c:92:97:8f:27:04:b7:
bd:99:51:6c:d3:b0:57:6b:d8:c7:2b:b5:7c:50:5e:4c:cf:1b:
df:23:9b:e0:83:e4:20:45:e9:ed:35:6d:96:ed:51:08:64:22:
ba:57:e1:c3:09:a2:88:79:b6:86:a9:0e:7f:c6:44:10:2a:0c:
3d:3a:cb:42:cc:c8:09:1c:2e:f8:b7:f8:3d:90:63:56:05:f6:
37:5d:fb:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DscI1cuNjwTHdOsFYIS8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3N2EwZmI5OWU1MmFlNGZhMWQ2NmZhYWQ5M2Y0MmU2ZDA3
ODg2YTYwHhcNMjUwNjI4MTUwMTI4WhcNMjUwNjI5MTUwMTI4WjAzMTEwLwYDVQQD
EyhmNzk1NWM4MzliZGQwYWVlZjM4YzBiZDYwZGI2Y2FlMmZkOWI2Zjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur4ixLeIj0NJQwHxn+hoPltVm/7M
GheIyOYs7Cln7GFGFN81wT37tKDoQymLG04qWVTsJrSKM7nruPgpdV2ASTvj/+3Q
WjWZ77bEbIIwDJLp7pPWPvANPysD0l/jyO28k+DRD6CGZEUipGJUkirFu0NgVYzj
uMXfTAYeP6pK1/zCOiGsxW/BTeqxvlD+/VJKovPa23LvcRhGzXs16P6iEHICZaO/
e+3bwRiR2oQSmCUYHAeywtsWEKoXyoeoPHJIkyOLcv+doHMy1dpnMPbGYRB/GXGb
LSdfmASTnp5VlumFYkMRuAunosA8HO2Z3f2Dz3l+0Z8STvBhSPcoju2ocwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeVXIOb3Qru84wL1g22yuL9m2+JMB8GA1UdIwQY
MBaAFAd6D7meUq5PodZvqtk/QubQeIamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjNvUHVaNVNyay1oMW0tcTJUOUM1dEI0aHFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kM2U5YmQtNDQ2Yi00MTE2LTg0NTMt
ZDQ2N2NjNmU3ZDhmLzEvQjNvUHVaNVNyay1oMW0tcTJUOUM1dEI0aHFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kM2U5YmQtNDQ2Yi00MTE2LTg0NTMtZDQ2N2NjNmU3ZDhm
LzEvQjNvUHVaNVNyay1oMW0tcTJUOUM1dEI0aHFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyUwyNlRs
ZdyP5SHv4pvmxH9uNGgfcoc1vH9OoKaGUlOIYjKyr7JMCe6MwW3XnvhgyeSBYYTr
+ochpNIOmLEMNZkPPBMvlHpjZ9f0EDXXiJ9ZP2o4Pp2Yb7LZxMvYMODQEaTECcz7
q8rR1m+RCCqWStxQFA3eg7nml/8oekaI7Evp+0VaEtXxp8gTiiO2ZZfg8Dg7LTZ2
6hpSIJyJP+v0C3g6Qm8l5JuR/m2OQteckpePJwS3vZlRbNOwV2vYxyu1fFBeTM8b
3yOb4IPkIEXp7TVtlu1RCGQiulfhwwmiiHm2hqkOf8ZEECoMPTrLQszICRwu+Lf4
PZBjVgX2N1377A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:27 2025 by rpki-client