Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier: E2AzhmsOkxVKTZDzKUzMqKx2r24zz55xIC6HyWjmjpQ=
Subject key identifier: F1:08:53:70:2B:48:31:0B:30:8E:AA:C4:18:86:5D:E3:D3:EA:A9:16
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 0197C726594E8A95771D1BB5E5FFCDF18768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 18:01:08 +0000
Manifest this update: Tue 01 Jul 2025 18:01:08 +0000
Manifest next update: Wed 02 Jul 2025 18:01:08 +0000
Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: sQfl5O8Iq3gz177uJNS8K9OLPUKUV/ij00yssx/bfW0=)
2: Q6UDfcr6-wjzrSR02hz91bMMgCQ.roa (hash: Ri+ho1nwscaoaR+lGA/lmNvU5bMAzGg4wnbtbjS6IAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:59:4e:8a:95:77:1d:1b:b5:e5:ff:cd:f1:87:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Jul 1 18:01:08 2025 GMT
Not After : Jul 2 18:01:08 2025 GMT
Subject: CN=f10853702b48310b308eaac418865de3d3eaa916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:77:18:1e:a3:a0:98:c9:dc:a1:1b:6b:e8:42:
97:25:d0:9f:48:6f:d7:78:52:15:73:5d:0d:18:f2:
54:52:ef:27:ed:00:33:ec:ff:60:fd:be:2d:29:82:
8c:b1:dc:1d:a4:86:3c:c2:c2:55:a4:a0:88:fa:ec:
0f:d4:42:d6:39:61:79:32:8e:94:95:ed:65:cd:d7:
6c:26:a1:e1:b7:06:ba:a2:d8:09:35:c3:54:58:7f:
97:d5:ec:f0:95:3f:83:6d:f4:b3:87:cd:d8:7d:be:
29:89:d9:26:c0:6f:5c:4f:b4:4b:5e:e8:c4:93:6e:
18:0a:83:57:e0:43:c6:02:2e:b2:0b:c2:cf:d6:25:
db:30:e1:50:eb:08:38:36:1b:36:70:21:2a:a3:c4:
bb:37:5c:db:36:5f:dc:d8:e7:bc:6b:9a:c7:4f:ab:
bb:09:45:64:d9:bc:b1:c2:52:07:eb:53:9e:c2:68:
e6:b8:0f:f8:b6:74:28:67:36:99:13:48:c1:17:2d:
1a:5e:d8:cb:13:cf:15:83:d8:65:cd:8e:de:ac:a7:
6c:67:19:e1:79:e2:92:2d:7e:b6:f3:48:12:0d:cd:
d7:42:6b:a5:a0:99:95:0c:40:f9:bc:83:3b:b2:d4:
5f:1c:75:b7:e6:3d:59:29:3f:fd:72:8d:f0:c9:24:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:08:53:70:2B:48:31:0B:30:8E:AA:C4:18:86:5D:E3:D3:EA:A9:16
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e6:b7:28:e7:3b:17:7a:92:78:db:71:06:e8:1c:c9:74:6e:
96:c8:cc:57:27:f0:68:be:4d:1d:4d:30:3c:1d:9d:89:31:18:
81:50:da:0c:fd:ad:39:af:66:91:2b:e3:fd:c2:ef:69:a2:52:
08:ec:c5:aa:ae:4f:50:ff:73:bc:02:fd:e2:cf:e1:c5:c4:d7:
f5:8f:7a:8b:39:47:f0:10:9d:13:ff:c0:ab:8a:1f:61:e8:50:
15:5f:4d:f1:dd:52:c3:ae:b4:3e:ee:d4:27:09:a2:bd:fe:28:
8b:3b:0f:21:ae:7a:53:2d:b6:d7:b4:d7:da:52:23:ec:cc:d4:
42:21:4f:fa:fd:5d:8d:28:16:f8:c9:00:fe:20:fa:e3:57:37:
a5:f3:ed:33:1c:9c:99:cf:11:45:b3:b7:79:d6:4f:d7:0b:ed:
f5:05:b5:3b:c5:62:43:71:ad:7e:41:15:07:e1:3c:94:56:1b:
9c:38:d9:a0:4e:27:b5:9d:98:53:09:78:98:67:d1:a0:09:14:
30:f9:d5:1d:46:6b:9a:52:d3:9f:ce:ff:ee:7d:78:63:79:4a:
50:a2:8a:68:db:da:01:2b:b4:08:63:81:d2:5e:30:d5:a7:28:
01:a0:6a:d2:09:50:b3:7b:98:19:c5:a0:ac:6e:ee:31:16:fa:
83:56:fd:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfHJllOipV3HRu15f/N8YdoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOGU2MGJiMTExMDg3ZDA4MDNmYzNmY2M0YWYzMjdhYTg1
YzBiODEwHhcNMjUwNzAxMTgwMTA4WhcNMjUwNzAyMTgwMTA4WjAzMTEwLwYDVQQD
EyhmMTA4NTM3MDJiNDgzMTBiMzA4ZWFhYzQxODg2NWRlM2QzZWFhOTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HcYHqOgmMncoRtr6EKXJdCfSG/X
eFIVc10NGPJUUu8n7QAz7P9g/b4tKYKMsdwdpIY8wsJVpKCI+uwP1ELWOWF5Mo6U
le1lzddsJqHhtwa6otgJNcNUWH+X1ezwlT+DbfSzh83Yfb4pidkmwG9cT7RLXujE
k24YCoNX4EPGAi6yC8LP1iXbMOFQ6wg4Nhs2cCEqo8S7N1zbNl/c2Oe8a5rHT6u7
CUVk2byxwlIH61OewmjmuA/4tnQoZzaZE0jBFy0aXtjLE88Vg9hlzY7erKdsZxnh
eeKSLX6280gSDc3XQmuloJmVDED5vIM7stRfHHW35j1ZKT/9co3wySRIaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEIU3ArSDELMI6qxBiGXePT6qkWMB8GA1UdIwQY
MBaAFN6OYLsREIfQgD/D/MSvMnqoXAuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYt
YTZmNTM0YzMwN2YxLzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYtYTZmNTM0YzMwN2Yx
LzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiea3KOc7
F3qSeNtxBugcyXRulsjMVyfwaL5NHU0wPB2diTEYgVDaDP2tOa9mkSvj/cLvaaJS
COzFqq5PUP9zvAL94s/hxcTX9Y96izlH8BCdE//Aq4ofYehQFV9N8d1Sw660Pu7U
Jwmivf4oizsPIa56Uy2217TX2lIj7MzUQiFP+v1djSgW+MkA/iD641c3pfPtMxyc
mc8RRbO3edZP1wvt9QW1O8ViQ3GtfkEVB+E8lFYbnDjZoE4ntZ2YUwl4mGfRoAkU
MPnVHUZrmlLTn87/7n14Y3lKUKKKaNvaASu0CGOB0l4w1acoAaBq0glQs3uYGcWg
rG7uMRb6g1b9sw==
-----END CERTIFICATE-----
Generated at Wed Jul 2 01:18:32 2025 by rpki-client