Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
File: f3YJUscz9vLuklTtzRTg2qeLOIw.mft (raw, json)
Hash identifier: Cchrf9JRDY13HFuj6LcNDVrAMAQ0i7VfVcitfD+vNW8=
Subject key identifier: 69:8A:32:8A:78:FB:BE:E6:85:68:DD:BC:05:1F:38:C1:C5:39:42:87
Authority key identifier: 7F:76:09:52:C7:33:F6:F2:EE:92:54:ED:CD:14:E0:DA:A7:8B:38:8C
Certificate issuer: /CN=7f760952c733f6f2ee9254edcd14e0daa78b388c
Certificate serial: 0197715185E88F93AD35A2B84EA33A5FDD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
Manifest number: 0375
Signing time: Sun 15 Jun 2025 02:00:57 +0000
Manifest this update: Sun 15 Jun 2025 02:00:57 +0000
Manifest next update: Mon 16 Jun 2025 02:00:57 +0000
Files and hashes: 1: ZCBQTSRDp2Vji2C9hSrbiPFq7OY.roa (hash: PB9NVbc1SKDdgUUB+S0NaDZM0GQCTky3OkA9OktttX0=)
2: f3YJUscz9vLuklTtzRTg2qeLOIw.crl (hash: lH/K3L4vBRby6t5cI8l8Y4QOm3YnjqfCcznPkPTdgqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:85:e8:8f:93:ad:35:a2:b8:4e:a3:3a:5f:dd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f760952c733f6f2ee9254edcd14e0daa78b388c
Validity
Not Before: Jun 15 02:00:57 2025 GMT
Not After : Jun 16 02:00:57 2025 GMT
Subject: CN=698a328a78fbbee68568ddbc051f38c1c5394287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:72:1a:04:42:d0:59:b8:73:bb:09:b8:60:
3b:90:a6:eb:a5:ec:a7:8e:e3:19:ce:a1:92:5b:da:
e2:cf:04:a0:35:cf:db:74:aa:b4:fd:1b:4f:6a:7e:
f7:3d:28:1a:11:68:35:b9:1f:d4:a3:dd:8c:7c:46:
71:b9:30:c1:40:a3:28:05:68:91:10:41:b1:43:cb:
08:ff:c1:61:11:90:39:5f:80:5f:34:02:ba:07:6a:
c3:30:de:76:77:a6:66:ec:29:ee:ab:89:56:99:d2:
58:86:55:35:68:02:46:45:c6:a6:11:86:4a:cc:d2:
16:c9:24:82:b6:93:e6:2c:58:06:28:1a:a1:9c:f2:
90:f7:38:5c:e3:54:95:98:05:8e:5f:66:eb:9d:a4:
19:27:ee:e8:39:86:77:ac:3d:fd:dd:9d:15:c1:fa:
c7:bd:04:37:26:63:10:f4:0a:86:55:98:b4:0e:5c:
24:34:a2:88:80:53:0d:94:58:2f:21:74:57:65:ed:
1b:1a:3c:ce:8c:ce:5f:3e:a6:e5:b0:9a:5b:f7:f5:
86:72:ed:81:59:5e:9d:b6:08:05:ef:ee:fb:87:c7:
3e:2e:66:4f:e0:66:27:ea:9e:7c:5c:65:d9:de:5e:
1c:86:4f:73:19:85:51:d1:55:04:60:01:99:41:bd:
8a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8A:32:8A:78:FB:BE:E6:85:68:DD:BC:05:1F:38:C1:C5:39:42:87
X509v3 Authority Key Identifier:
keyid:7F:76:09:52:C7:33:F6:F2:EE:92:54:ED:CD:14:E0:DA:A7:8B:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3YJUscz9vLuklTtzRTg2qeLOIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b64a59-9fed-41da-b835-9ae8809c8515/1/f3YJUscz9vLuklTtzRTg2qeLOIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f8:49:a2:ce:37:7b:dc:7e:f3:63:ab:5f:3e:b0:e2:e8:70:
3d:b6:5f:ba:63:86:1f:98:58:17:99:db:40:fa:21:57:d6:fe:
88:e6:58:14:c6:eb:e1:4a:4b:69:4a:4c:d7:85:30:3c:84:cf:
77:c2:7d:09:35:e8:41:91:6a:2b:a5:59:c7:ca:9d:07:49:9b:
e9:fa:2b:77:b7:86:28:93:61:dd:c2:2c:f0:da:55:38:01:76:
98:b7:a8:43:6d:78:7c:70:1c:03:40:52:44:e4:a7:20:f2:52:
73:23:74:ed:16:4e:f1:79:a7:2b:72:63:0d:4e:f5:ab:1c:36:
ac:f4:11:e7:e2:61:cd:99:5b:c6:b4:66:83:ca:50:22:c2:65:
ff:da:24:4a:59:b0:10:29:af:b8:44:0f:4d:7e:07:55:0c:3b:
96:fd:0a:cb:e0:41:01:57:d8:48:be:bd:0a:23:03:3d:89:b1:
c4:22:72:f9:97:15:49:7a:27:14:7e:4c:4b:e2:53:e1:e0:67:
00:e9:9d:d3:05:67:55:0f:20:f8:a4:29:04:bd:a0:56:aa:8d:
86:92:56:ff:ec:02:4f:b6:b1:a3:44:a7:52:3a:ff:b8:15:c4:
ab:64:fb:29:68:bb:72:11:85:01:0f:66:93:92:8b:fc:69:f8:
4b:3b:f2:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxUYXoj5OtNaK4TqM6X91rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNzYwOTUyYzczM2Y2ZjJlZTkyNTRlZGNkMTRlMGRhYTc4
YjM4OGMwHhcNMjUwNjE1MDIwMDU3WhcNMjUwNjE2MDIwMDU3WjAzMTEwLwYDVQQD
Eyg2OThhMzI4YTc4ZmJiZWU2ODU2OGRkYmMwNTFmMzhjMWM1Mzk0Mjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOdyGgRC0Fm4c7sJuGA7kKbrpeyn
juMZzqGSW9rizwSgNc/bdKq0/RtPan73PSgaEWg1uR/Uo92MfEZxuTDBQKMoBWiR
EEGxQ8sI/8FhEZA5X4BfNAK6B2rDMN52d6Zm7Cnuq4lWmdJYhlU1aAJGRcamEYZK
zNIWySSCtpPmLFgGKBqhnPKQ9zhc41SVmAWOX2brnaQZJ+7oOYZ3rD393Z0VwfrH
vQQ3JmMQ9AqGVZi0DlwkNKKIgFMNlFgvIXRXZe0bGjzOjM5fPqblsJpb9/WGcu2B
WV6dtggF7+77h8c+LmZP4GYn6p58XGXZ3l4chk9zGYVR0VUEYAGZQb2K8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmKMop4+77mhWjdvAUfOMHFOUKHMB8GA1UdIwQY
MBaAFH92CVLHM/by7pJU7c0U4NqniziMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjNZSlVzY3o5dkx1a2xUdHpSVGcycWVMT0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNjRhNTktOWZlZC00MWRhLWI4MzUt
OWFlODgwOWM4NTE1LzEvZjNZSlVzY3o5dkx1a2xUdHpSVGcycWVMT0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iNjRhNTktOWZlZC00MWRhLWI4MzUtOWFlODgwOWM4NTE1
LzEvZjNZSlVzY3o5dkx1a2xUdHpSVGcycWVMT0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/hJos43
e9x+82OrXz6w4uhwPbZfumOGH5hYF5nbQPohV9b+iOZYFMbr4UpLaUpM14UwPITP
d8J9CTXoQZFqK6VZx8qdB0mb6ford7eGKJNh3cIs8NpVOAF2mLeoQ214fHAcA0BS
ROSnIPJScyN07RZO8XmnK3JjDU71qxw2rPQR5+JhzZlbxrRmg8pQIsJl/9okSlmw
ECmvuEQPTX4HVQw7lv0Ky+BBAVfYSL69CiMDPYmxxCJy+ZcVSXonFH5MS+JT4eBn
AOmd0wVnVQ8g+KQpBL2gVqqNhpJW/+wCT7axo0SnUjr/uBXEq2T7KWi7chGFAQ9m
k5KL/Gn4SzvyXw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:11:56 2025 by rpki-client