Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
File: n3Zvv-bZVxAAITgLsFVeCjum2OM.mft (raw, json)
Hash identifier: R0f1HT23vXRZjQIwc4ykNVemWsHjHVZD2pT8iRbq4C0=
Subject key identifier: F3:82:61:9F:48:2D:9B:1C:B4:03:65:31:E4:C2:16:27:9E:5F:6C:E2
Authority key identifier: 9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3
Certificate issuer: /CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3
Certificate serial: 0197C237ADCD82A0327D403ADBD20E1A550D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
Manifest number: 02C1
Signing time: Mon 30 Jun 2025 19:01:58 +0000
Manifest this update: Mon 30 Jun 2025 19:01:58 +0000
Manifest next update: Tue 01 Jul 2025 19:01:58 +0000
Files and hashes: 1: ONK87mida4LXX87gailCfoI1b8Y.roa (hash: QBCu5PF0VO/SVm73/KPj9NbrgIJuILrNgThOrk+l2bw=)
2: n3Zvv-bZVxAAITgLsFVeCjum2OM.crl (hash: Z922q4GY6gS2/A5RDPDd6PKhizxOnhRRtFBLXzV76aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 19:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:ad:cd:82:a0:32:7d:40:3a:db:d2:0e:1a:55:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f766fbfe6d957100021380bb0555e0a3ba6d8e3
Validity
Not Before: Jun 30 19:01:58 2025 GMT
Not After : Jul 1 19:01:58 2025 GMT
Subject: CN=f382619f482d9b1cb4036531e4c216279e5f6ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:b4:26:1f:f2:96:6d:31:90:c4:6f:fa:46:
95:97:b0:c2:35:eb:b8:57:43:a8:e7:5b:5d:d0:f0:
33:e5:b4:88:97:1f:e5:58:c7:62:1b:36:c8:6e:71:
4f:93:04:ce:05:ff:18:65:77:c5:75:0c:d2:b4:11:
44:34:e1:24:a6:40:1b:f0:55:76:76:90:35:3c:88:
a3:23:fc:a1:49:68:66:f8:c1:a0:12:c2:09:d8:e9:
4d:20:48:17:97:ae:3e:3d:45:12:2a:39:35:1c:a2:
a6:f8:dc:f1:78:0c:64:e9:04:45:94:73:ed:77:5b:
e3:87:1e:5e:7b:b3:a7:73:d0:6f:7d:4b:a6:06:c2:
73:55:c2:98:21:18:02:80:3d:0b:8c:6f:65:0e:78:
5b:5c:0a:20:7a:b5:0f:7f:42:63:59:36:30:4e:41:
b8:aa:53:16:8e:76:fe:eb:1e:43:0a:b9:a8:eb:f3:
dc:d7:f0:6d:27:61:5e:cc:d7:41:9d:10:5e:99:90:
e9:6d:06:88:23:9d:7e:05:3a:d2:35:4c:dd:ef:46:
a3:46:59:55:7f:1c:07:6f:8c:22:80:9c:f0:6a:7f:
4b:04:3a:51:8d:f4:d1:88:14:81:76:71:8b:55:94:
83:8e:1c:ea:b1:2a:3f:06:55:91:ba:83:e9:23:34:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:82:61:9F:48:2D:9B:1C:B4:03:65:31:E4:C2:16:27:9E:5F:6C:E2
X509v3 Authority Key Identifier:
keyid:9F:76:6F:BF:E6:D9:57:10:00:21:38:0B:B0:55:5E:0A:3B:A6:D8:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Zvv-bZVxAAITgLsFVeCjum2OM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/eaf286-ae94-4c46-a0a7-4dfd24607dbb/1/n3Zvv-bZVxAAITgLsFVeCjum2OM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:81:7b:d5:00:d2:3d:e7:09:45:4e:46:99:0c:81:c4:ce:12:
66:d6:48:72:55:33:0c:5b:97:7e:56:0b:d8:60:10:26:f5:66:
9e:3e:3d:04:fd:77:56:58:d4:5a:8a:48:58:58:63:54:5b:2d:
50:df:20:28:27:fb:42:1b:5c:fd:09:43:04:d4:7f:60:23:d0:
c7:4f:36:a0:55:46:92:63:4f:a4:c9:98:c6:60:8c:a9:2f:38:
a8:52:f9:e0:76:f2:ad:d2:9c:40:a0:42:5c:9b:a3:0a:a8:82:
03:91:ae:ea:30:b7:61:ce:46:e0:73:eb:88:e6:20:4e:63:8c:
31:09:01:47:75:e7:f9:85:5c:13:2b:f1:b7:04:bc:bd:a7:20:
6b:a7:23:fb:73:ba:a5:10:1d:99:b7:d5:d8:54:6d:37:58:8b:
ed:82:be:6b:b7:5b:7b:a2:81:e4:8c:17:19:3b:2d:82:fe:19:
79:45:d4:1c:34:22:5e:d0:17:a2:6c:7c:ed:fb:2f:44:03:67:
d2:7d:92:30:1e:b8:ee:2e:c8:ef:e3:15:8e:7d:5b:fc:e1:ca:
d9:54:81:51:0c:84:96:64:27:61:15:3d:60:53:98:7c:a8:25:
1a:dd:5d:70:f4:bb:54:0b:6f:34:e1:15:1d:99:18:2a:9d:41:
47:82:73:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfCN63NgqAyfUA629IOGlUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNzY2ZmJmZTZkOTU3MTAwMDIxMzgwYmIwNTU1ZTBhM2Jh
NmQ4ZTMwHhcNMjUwNjMwMTkwMTU4WhcNMjUwNzAxMTkwMTU4WjAzMTEwLwYDVQQD
EyhmMzgyNjE5ZjQ4MmQ5YjFjYjQwMzY1MzFlNGMyMTYyNzllNWY2Y2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOC0Jh/ylm0xkMRv+kaVl7DCNeu4
V0Oo51td0PAz5bSIlx/lWMdiGzbIbnFPkwTOBf8YZXfFdQzStBFENOEkpkAb8FV2
dpA1PIijI/yhSWhm+MGgEsIJ2OlNIEgXl64+PUUSKjk1HKKm+NzxeAxk6QRFlHPt
d1vjhx5ee7Onc9BvfUumBsJzVcKYIRgCgD0LjG9lDnhbXAogerUPf0JjWTYwTkG4
qlMWjnb+6x5DCrmo6/Pc1/BtJ2FezNdBnRBemZDpbQaII51+BTrSNUzd70ajRllV
fxwHb4wigJzwan9LBDpRjfTRiBSBdnGLVZSDjhzqsSo/BlWRuoPpIzRegQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOCYZ9ILZsctANlMeTCFieeX2ziMB8GA1UdIwQY
MBaAFJ92b7/m2VcQACE4C7BVXgo7ptjjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjNadnYtYlpWeEFBSVRnTHNGVmVDanVtMk9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYWYyODYtYWU5NC00YzQ2LWEwYTct
NGRmZDI0NjA3ZGJiLzEvbjNadnYtYlpWeEFBSVRnTHNGVmVDanVtMk9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lYWYyODYtYWU5NC00YzQ2LWEwYTctNGRmZDI0NjA3ZGJi
LzEvbjNadnYtYlpWeEFBSVRnTHNGVmVDanVtMk9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIF71QDS
PecJRU5GmQyBxM4SZtZIclUzDFuXflYL2GAQJvVmnj49BP13VljUWopIWFhjVFst
UN8gKCf7Qhtc/QlDBNR/YCPQx082oFVGkmNPpMmYxmCMqS84qFL54HbyrdKcQKBC
XJujCqiCA5Gu6jC3Yc5G4HPriOYgTmOMMQkBR3Xn+YVcEyvxtwS8vacga6cj+3O6
pRAdmbfV2FRtN1iL7YK+a7dbe6KB5IwXGTstgv4ZeUXUHDQiXtAXomx87fsvRANn
0n2SMB647i7I7+MVjn1b/OHK2VSBUQyElmQnYRU9YFOYfKglGt1dcPS7VAtvNOEV
HZkYKp1BR4Jzug==
-----END CERTIFICATE-----
Generated at Tue Jul 1 03:50:51 2025 by rpki-client