Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File: A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier: 6VVBciqpEQLCR/r4eVTXMgjPgni/UAUipvfy81CfIwE=
Subject key identifier: CA:61:1F:00:19:C7:49:0F:30:14:61:94:A2:59:71:D4:40:1B:24:44
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer: /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial: 0197B70E604BDB494594899AE79410C33DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number: 12DF
Signing time: Sat 28 Jun 2025 15:01:01 +0000
Manifest this update: Sat 28 Jun 2025 15:01:01 +0000
Manifest next update: Sun 29 Jun 2025 15:01:01 +0000
Files and hashes: 1: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: VW0/clubDXjRgYIZay3ySaqtpJYQ2ZMgDpqKUCu5lCg=)
2: AB4qyh-GFm_4fCIscWpIBFj0Kek.roa (hash: eMCLNriDfdANy3mBQaEbKePj36AsyrGRMWbPR231aA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:60:4b:db:49:45:94:89:9a:e7:94:10:c3:3d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Validity
Not Before: Jun 28 15:01:01 2025 GMT
Not After : Jun 29 15:01:01 2025 GMT
Subject: CN=ca611f0019c7490f30146194a25971d4401b2444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:08:73:c9:a0:98:0b:16:86:77:6a:94:07:4f:
64:52:5a:d9:cc:4a:f8:20:6b:df:6d:1f:eb:12:3a:
c3:cc:cb:fa:9f:b2:cc:c8:08:0a:87:25:a4:71:cf:
11:3f:42:5f:48:15:09:cd:a0:80:0c:bb:fb:d8:0f:
24:00:d7:06:ce:0f:54:2d:6e:74:cb:a7:b7:50:40:
28:61:3e:aa:97:c7:17:53:3b:ad:a6:5a:32:41:1f:
e7:2b:c8:ff:95:59:8f:a4:03:84:e3:9d:85:0f:52:
8f:57:09:07:37:1c:03:48:39:50:0b:4c:89:5d:ad:
5c:98:e0:0b:29:08:f5:28:8c:03:b9:c0:92:07:03:
90:56:42:1a:ff:bc:ae:5e:fd:39:79:ab:39:f5:85:
f2:2b:67:71:d4:65:e3:5b:f0:c6:f4:a0:06:d4:91:
6f:03:f3:69:ac:b1:31:ec:37:0a:ef:4c:33:e7:8e:
76:e7:31:65:b9:03:79:b6:cc:21:25:51:c5:a5:b6:
d0:00:4c:fb:be:3c:64:dc:8e:2a:2c:06:5d:dd:87:
c6:9b:0b:82:9c:86:6d:e4:4c:47:8f:19:13:54:6a:
1d:de:63:1c:cf:d0:36:2d:a6:1d:81:50:38:35:09:
8b:96:1a:95:b0:18:ab:46:99:b9:0b:21:e2:73:69:
f5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:61:1F:00:19:C7:49:0F:30:14:61:94:A2:59:71:D4:40:1B:24:44
X509v3 Authority Key Identifier:
keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d6:04:98:fa:61:55:fa:12:eb:0d:02:5c:f9:ea:6e:0c:6f:
7c:4a:f9:88:64:73:29:4e:36:6a:95:53:b2:77:31:a7:cc:14:
4e:b5:a0:08:e8:0f:0d:e8:6f:c5:74:5b:02:f0:e4:c6:06:4a:
21:8e:7f:33:2c:7a:24:dd:b4:e0:63:12:4d:a9:17:e0:a4:d8:
77:b8:d5:6b:4b:1f:4a:6f:b9:ce:9c:19:27:7e:4d:8c:d2:f1:
e1:8d:b2:65:67:55:f2:50:82:b9:6a:f3:f8:fb:23:6e:d0:59:
88:5a:97:0d:53:d8:4a:3f:8f:b3:f3:b9:6a:09:90:14:06:b1:
aa:3c:b9:8a:6e:29:b0:e9:8e:db:a7:fd:25:de:6e:db:c2:d2:
00:45:77:99:c0:8a:b6:b8:70:7f:f2:c0:dc:de:76:2c:6d:c8:
f9:6f:08:5e:08:99:0a:63:8c:23:27:e5:82:99:8c:d9:51:cb:
4d:a8:6d:94:e8:f5:ed:00:c5:5c:73:1a:12:de:82:a6:1d:ad:
2f:aa:96:87:59:d6:95:1d:63:ee:0b:3c:22:5a:7b:97:4b:c6:
d0:2e:07:ee:0c:05:fc:8a:86:84:f0:bb:fc:65:39:de:18:39:
8e:70:ab:ec:e0:6e:ad:c7:d8:44:59:95:ae:9b:ae:94:1f:ae:
27:07:61:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DmBL20lFlIma55QQwz3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzN2IzZGY2ZDc4Mzk5ZjAzMTgyODU1NmZjZDkwZWJmZGY0
ZDBkMmQwHhcNMjUwNjI4MTUwMTAxWhcNMjUwNjI5MTUwMTAxWjAzMTEwLwYDVQQD
EyhjYTYxMWYwMDE5Yzc0OTBmMzAxNDYxOTRhMjU5NzFkNDQwMWIyNDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2whzyaCYCxaGd2qUB09kUlrZzEr4
IGvfbR/rEjrDzMv6n7LMyAgKhyWkcc8RP0JfSBUJzaCADLv72A8kANcGzg9ULW50
y6e3UEAoYT6ql8cXUzutployQR/nK8j/lVmPpAOE452FD1KPVwkHNxwDSDlQC0yJ
Xa1cmOALKQj1KIwDucCSBwOQVkIa/7yuXv05eas59YXyK2dx1GXjW/DG9KAG1JFv
A/NprLEx7DcK70wz54525zFluQN5tswhJVHFpbbQAEz7vjxk3I4qLAZd3YfGmwuC
nIZt5ExHjxkTVGod3mMcz9A2LaYdgVA4NQmLlhqVsBirRpm5CyHic2n1TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMphHwAZx0kPMBRhlKJZcdRAGyREMB8GA1UdIwQY
MBaAFAN7PfbXg5nwMYKFVvzZDr/fTQ0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lMjJlZjgtNTBiNy00MDQ2LTkyMDgt
YTQ3NWFlYmIwOGQ1LzEvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9lMjJlZjgtNTBiNy00MDQ2LTkyMDgtYTQ3NWFlYmIwOGQ1
LzEvQTNzOTl0ZURtZkF4Z29WV19Oa092OTlORFMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdYEmPph
VfoS6w0CXPnqbgxvfEr5iGRzKU42apVTsncxp8wUTrWgCOgPDehvxXRbAvDkxgZK
IY5/Myx6JN204GMSTakX4KTYd7jVa0sfSm+5zpwZJ35NjNLx4Y2yZWdV8lCCuWrz
+PsjbtBZiFqXDVPYSj+Ps/O5agmQFAaxqjy5im4psOmO26f9Jd5u28LSAEV3mcCK
trhwf/LA3N52LG3I+W8IXgiZCmOMIyflgpmM2VHLTahtlOj17QDFXHMaEt6Cph2t
L6qWh1nWlR1j7gs8Ilp7l0vG0C4H7gwF/IqGhPC7/GU53hg5jnCr7OBurcfYRFmV
rpuulB+uJwdh4Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:24 2025 by rpki-client