Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: YSKSjun5JX8iuzPUG59dpVuh/5PVp89Ko9E0P44Zdls=
Subject key identifier: D4:C6:9C:7A:6C:14:D7:0B:89:55:6F:FF:7C:F4:19:49:C2:1C:2B:CE
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 0197B6D7870B94016AC3C04BECDA7942F5E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: C9
Signing time: Sat 28 Jun 2025 14:01:07 +0000
Manifest this update: Sat 28 Jun 2025 14:01:07 +0000
Manifest next update: Sun 29 Jun 2025 14:01:07 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: WfpP+rUK/UD0DjR0IjZnNMtBKAyjlSK8eeg2FruA+q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:87:0b:94:01:6a:c3:c0:4b:ec:da:79:42:f5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Jun 28 14:01:07 2025 GMT
Not After : Jun 29 14:01:07 2025 GMT
Subject: CN=d4c69c7a6c14d70b89556fff7cf41949c21c2bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:23:26:70:a7:da:a8:29:39:1a:92:17:26:
8e:09:c3:2e:96:99:60:d2:76:fa:d8:e8:4e:56:5f:
e5:ea:8b:d5:75:a5:b6:6d:f0:ad:9e:cd:c7:cf:b5:
62:85:fa:08:c2:36:ee:59:6c:fa:37:cb:6b:cc:b7:
ef:4a:6d:33:b4:8f:81:d3:c4:cf:d7:dc:cc:04:21:
a9:6a:fb:07:6b:71:82:b1:9e:6a:82:1b:fb:88:1b:
11:43:06:66:7b:31:fc:b4:89:14:86:b9:02:8f:72:
88:65:e7:e7:5f:af:39:04:55:98:3a:a4:f8:d0:65:
9b:54:50:bf:32:03:45:0e:f5:c4:14:79:3d:44:47:
94:cd:61:29:d6:54:8d:d0:92:a1:d7:83:84:bd:0b:
d9:3e:91:ca:d9:9c:d9:e8:71:6b:64:d4:a3:05:19:
84:15:bb:31:5b:18:23:71:7a:fb:38:e9:09:d5:b1:
4c:5d:97:a0:81:1d:41:b8:60:55:eb:3b:7a:b4:9a:
d7:20:b4:b4:6c:6f:75:fd:cb:b6:50:db:f0:15:d2:
0a:ee:44:f8:2f:61:02:0f:4c:da:13:e2:be:f3:98:
d2:bc:50:1d:ad:b1:22:d6:ab:cd:3b:e8:d9:c5:64:
28:78:13:f6:9f:20:7a:c0:fa:f8:60:e2:0a:32:4e:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C6:9C:7A:6C:14:D7:0B:89:55:6F:FF:7C:F4:19:49:C2:1C:2B:CE
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:16:23:9f:03:38:cc:f2:ab:1b:82:5c:ec:b4:b3:5b:f2:86:
28:ad:19:bb:b4:63:79:a5:97:fe:c1:7b:87:b1:b4:6a:0e:6c:
be:29:81:e4:b7:b5:fe:91:f6:0a:bb:74:ca:0c:a6:f4:d2:6d:
26:eb:21:60:98:9e:d3:0b:8e:80:a5:71:ed:3d:fc:e1:c8:bc:
5f:cb:99:59:d6:78:01:0c:46:79:74:ea:f2:14:cf:5d:d4:c0:
d1:88:ac:5e:11:55:e9:a3:85:6c:f9:d9:f7:59:c3:68:5d:67:
37:0b:50:0e:f5:a6:3d:ab:b9:dd:18:ca:32:d6:79:70:19:c0:
40:75:70:b0:c9:d0:4d:d1:11:14:6b:8f:92:64:6a:81:e4:86:
8d:3b:66:4a:83:20:02:4c:65:15:9f:f3:d4:01:3a:57:86:5c:
2f:3e:24:fc:32:02:7e:19:78:e7:73:f6:09:0c:55:55:90:5d:
ed:9f:fe:fb:5f:46:11:28:f6:77:1e:8f:cc:6c:cf:0f:e7:17:
6d:2e:50:b2:04:00:e5:03:26:09:9d:d1:f3:df:d4:b4:10:05:
09:be:93:ef:32:8b:34:ef:ec:f0:76:d9:f5:70:9e:42:24:ab:
95:13:05:a4:73:41:57:f0:1c:56:74:2f:e6:91:60:41:f7:6a:
da:3d:30:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe214cLlAFqw8BL7Np5QvXpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZmM2Y2RmZTE5NmQ1YjM5ZDJlYTYwZTkwYzk1ZGI3MDQ0
NWQ5YjkwHhcNMjUwNjI4MTQwMTA3WhcNMjUwNjI5MTQwMTA3WjAzMTEwLwYDVQQD
EyhkNGM2OWM3YTZjMTRkNzBiODk1NTZmZmY3Y2Y0MTk0OWMyMWMyYmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3UjJnCn2qgpORqSFyaOCcMulplg
0nb62OhOVl/l6ovVdaW2bfCtns3Hz7VihfoIwjbuWWz6N8trzLfvSm0ztI+B08TP
19zMBCGpavsHa3GCsZ5qghv7iBsRQwZmezH8tIkUhrkCj3KIZefnX685BFWYOqT4
0GWbVFC/MgNFDvXEFHk9REeUzWEp1lSN0JKh14OEvQvZPpHK2ZzZ6HFrZNSjBRmE
FbsxWxgjcXr7OOkJ1bFMXZeggR1BuGBV6zt6tJrXILS0bG91/cu2UNvwFdIK7kT4
L2ECD0zaE+K+85jSvFAdrbEi1qvNO+jZxWQoeBP2nyB6wPr4YOIKMk5GowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTGnHpsFNcLiVVv/3z0GUnCHCvOMB8GA1UdIwQY
MBaAFD/8bN/hltWznS6mDpDJXbcERdm5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMt
MTU1YjM5ZTA3NmMyLzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMtMTU1YjM5ZTA3NmMy
LzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBYjnwM4
zPKrG4Jc7LSzW/KGKK0Zu7RjeaWX/sF7h7G0ag5svimB5Le1/pH2Crt0ygym9NJt
JushYJie0wuOgKVx7T384ci8X8uZWdZ4AQxGeXTq8hTPXdTA0YisXhFV6aOFbPnZ
91nDaF1nNwtQDvWmPau53RjKMtZ5cBnAQHVwsMnQTdERFGuPkmRqgeSGjTtmSoMg
AkxlFZ/z1AE6V4ZcLz4k/DICfhl453P2CQxVVZBd7Z/++19GESj2dx6PzGzPD+cX
bS5QsgQA5QMmCZ3R89/UtBAFCb6T7zKLNO/s8HbZ9XCeQiSrlRMFpHNBV/AcVnQv
5pFgQfdq2j0wwA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:41 2025 by rpki-client