Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.mft
File: Us3j-fOkO7GGEIo8M9n2NVeh14w.mft (raw, json)
Hash identifier: bP/vCNzosYBhJzDJeNmEuKR8ANgtQkmnRAtaILyTgKw=
Subject key identifier: 9A:99:A1:B8:DF:1F:61:85:93:89:C5:BA:4E:DA:36:B4:30:FF:19:3F
Authority key identifier: 52:CD:E3:F9:F3:A4:3B:B1:86:10:8A:3C:33:D9:F6:35:57:A1:D7:8C
Certificate issuer: /CN=52cde3f9f3a43bb186108a3c33d9f63557a1d78c
Certificate serial: 01976D068EA4AB4C8DBC5053E2D6492D97B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us3j-fOkO7GGEIo8M9n2NVeh14w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.mft
Manifest number: 43
Signing time: Sat 14 Jun 2025 06:00:35 +0000
Manifest this update: Sat 14 Jun 2025 06:00:35 +0000
Manifest next update: Sun 15 Jun 2025 06:00:35 +0000
Files and hashes: 1: Us3j-fOkO7GGEIo8M9n2NVeh14w.crl (hash: MpRQZRnECqj9Sw4OJL+CbkpszyH8blX/0ZRECDjuuKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us3j-fOkO7GGEIo8M9n2NVeh14w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:8e:a4:ab:4c:8d:bc:50:53:e2:d6:49:2d:97:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cde3f9f3a43bb186108a3c33d9f63557a1d78c
Validity
Not Before: Jun 14 06:00:35 2025 GMT
Not After : Jun 15 06:00:35 2025 GMT
Subject: CN=9a99a1b8df1f61859389c5ba4eda36b430ff193f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:c6:58:bb:dd:52:20:af:7b:fd:16:c1:fd:
aa:a4:69:6a:92:fb:5b:43:4b:b3:95:cd:b8:9a:cc:
c9:a3:f0:1d:0b:f2:9c:a1:01:e6:7a:4d:a0:d8:af:
f9:9b:63:84:78:f7:f3:c1:67:b3:c4:da:75:b6:11:
3d:0b:e9:78:ae:a1:b1:08:4c:aa:fd:16:55:1d:62:
cd:c6:22:70:18:c8:50:76:71:eb:03:d1:9c:78:2c:
c8:50:36:d6:25:c7:b7:f0:29:54:ba:11:f7:02:b0:
35:36:1f:d5:d5:e0:ea:0e:f2:ba:bc:4f:b9:e5:a3:
88:28:d7:1b:fc:79:e0:22:28:6e:b9:e2:2f:7b:cb:
55:d9:8c:2a:4a:1f:a0:f1:72:bf:9a:df:50:ea:54:
51:01:09:82:87:33:f4:b3:4a:d5:fa:8a:84:d9:85:
6c:ad:c0:5c:1e:6a:3a:21:33:8a:13:7a:87:f0:e0:
04:4b:8a:11:53:40:fb:b4:c2:ec:dd:d4:16:65:b5:
6f:63:cf:9b:d9:ef:1b:95:d0:30:79:77:48:3c:01:
a9:48:6e:ed:ab:3e:f2:69:17:1e:72:65:bf:ff:6a:
fb:c6:aa:c9:cd:9c:b1:89:f5:f8:6f:85:3f:3d:c8:
94:15:1d:bf:8e:1c:dd:5a:2a:fb:d9:c7:9c:12:32:
f5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:99:A1:B8:DF:1F:61:85:93:89:C5:BA:4E:DA:36:B4:30:FF:19:3F
X509v3 Authority Key Identifier:
keyid:52:CD:E3:F9:F3:A4:3B:B1:86:10:8A:3C:33:D9:F6:35:57:A1:D7:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us3j-fOkO7GGEIo8M9n2NVeh14w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:77:b8:e2:7f:da:ee:4d:47:07:44:cf:35:c9:28:75:04:54:
d2:c3:e3:78:4a:42:51:9e:37:e0:a6:54:55:d5:22:e5:4d:41:
ff:2c:82:3d:d9:fe:ef:be:72:a9:96:6f:0f:ab:12:55:a4:ff:
77:86:fa:6c:14:07:87:b3:05:34:5a:f6:b8:e9:cc:04:d5:d3:
45:1e:84:87:3d:ee:43:bc:bb:e8:66:73:69:98:35:ff:54:cb:
f8:0c:76:33:bb:21:45:b1:25:ac:19:68:4a:88:8d:4b:8b:f2:
01:3e:9c:af:a3:f6:fd:f4:7f:bb:c3:47:da:96:b5:6c:bd:4a:
ea:de:48:a4:31:b1:e8:72:e4:c8:a3:8c:11:ff:e1:f6:ba:2b:
1a:dd:3c:8a:fa:f3:e3:91:8b:3d:87:6b:73:29:71:a2:3b:6b:
25:29:11:ed:0b:b0:66:43:d3:4d:b7:e9:b4:91:13:c6:e4:fc:
03:93:91:52:e5:80:f0:46:ca:4a:e4:65:7b:1b:78:7a:69:e6:
32:cd:bd:0d:46:a4:38:0b:bb:00:11:33:6d:4a:94:f6:84:f8:
1c:df:96:01:10:c0:5d:e9:07:48:9a:d0:55:2d:6c:df:9b:92:
c8:11:9d:66:78:66:f2:2d:ff:21:20:4b:fb:f4:94:22:02:31:
84:6e:07:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBo6kq0yNvFBT4tZJLZe5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2RlM2Y5ZjNhNDNiYjE4NjEwOGEzYzMzZDlmNjM1NTdh
MWQ3OGMwHhcNMjUwNjE0MDYwMDM1WhcNMjUwNjE1MDYwMDM1WjAzMTEwLwYDVQQD
Eyg5YTk5YTFiOGRmMWY2MTg1OTM4OWM1YmE0ZWRhMzZiNDMwZmYxOTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x3GWLvdUiCve/0Wwf2qpGlqkvtb
Q0uzlc24mszJo/AdC/KcoQHmek2g2K/5m2OEePfzwWezxNp1thE9C+l4rqGxCEyq
/RZVHWLNxiJwGMhQdnHrA9GceCzIUDbWJce38ClUuhH3ArA1Nh/V1eDqDvK6vE+5
5aOIKNcb/HngIihuueIve8tV2YwqSh+g8XK/mt9Q6lRRAQmChzP0s0rV+oqE2YVs
rcBcHmo6ITOKE3qH8OAES4oRU0D7tMLs3dQWZbVvY8+b2e8bldAweXdIPAGpSG7t
qz7yaRcecmW//2r7xqrJzZyxifX4b4U/PciUFR2/jhzdWir72cecEjL1swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqZobjfH2GFk4nFuk7aNrQw/xk/MB8GA1UdIwQY
MBaAFFLN4/nzpDuxhhCKPDPZ9jVXodeMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMzai1mT2tPN0dHRUlvOE05bjJOVmVoMTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy82ZGZmZDgtZTQzMy00NDFiLWJiMzct
NjA0NmMwMDQ5NmJjLzEvVXMzai1mT2tPN0dHRUlvOE05bjJOVmVoMTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy82ZGZmZDgtZTQzMy00NDFiLWJiMzctNjA0NmMwMDQ5NmJj
LzEvVXMzai1mT2tPN0dHRUlvOE05bjJOVmVoMTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACne44n/a
7k1HB0TPNckodQRU0sPjeEpCUZ434KZUVdUi5U1B/yyCPdn+775yqZZvD6sSVaT/
d4b6bBQHh7MFNFr2uOnMBNXTRR6Ehz3uQ7y76GZzaZg1/1TL+Ax2M7shRbElrBlo
SoiNS4vyAT6cr6P2/fR/u8NH2pa1bL1K6t5IpDGx6HLkyKOMEf/h9rorGt08ivrz
45GLPYdrcylxojtrJSkR7QuwZkPTTbfptJETxuT8A5ORUuWA8EbKSuRlext4emnm
Ms29DUakOAu7ABEzbUqU9oT4HN+WARDAXekHSJrQVS1s35uSyBGdZnhm8i3/ISBL
+/SUIgIxhG4H1g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:11:03 2025 by rpki-client