Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File: i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier: jiMvfdLsf9TxsvhqB7KBXb9waDeSoxlvQntEEd5nBTE=
Subject key identifier: B3:A2:9D:52:34:5A:13:78:46:22:B8:83:7C:E9:E6:B8:FB:81:01:96
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer: /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial: 01976CCFEAA570E3AD4C73BEAB917312552F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number: 0452
Signing time: Sat 14 Jun 2025 05:00:54 +0000
Manifest this update: Sat 14 Jun 2025 05:00:54 +0000
Manifest next update: Sun 15 Jun 2025 05:00:54 +0000
Files and hashes: 1: L3ocwI9skWdmpza9Qr_soDnI5iA.roa (hash: 9lUp3ywFYQ08BYq4aJkqYCgUsr8TmtCB3L7KRcDWSOM=)
2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: Yf6nsIIrSrjGPaaSIEs3WMwJRfDLZWD2/5OfQcnH8bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:ea:a5:70:e3:ad:4c:73:be:ab:91:73:12:55:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Validity
Not Before: Jun 14 05:00:54 2025 GMT
Not After : Jun 15 05:00:54 2025 GMT
Subject: CN=b3a29d52345a13784622b8837ce9e6b8fb810196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fe:82:f2:fc:75:06:1e:02:30:78:4c:93:c6:
23:51:81:10:74:89:9f:cb:bf:55:da:a8:a6:d6:a7:
d0:b8:0c:fc:48:e8:72:f6:fd:81:8f:39:c3:98:07:
53:79:64:b1:fe:3a:1e:a1:d3:32:07:06:47:b3:1e:
33:a0:45:ec:7f:9d:40:ae:39:4e:51:60:96:9f:dc:
29:38:76:dd:5e:3b:e6:ef:c0:ff:cc:f1:a7:c4:f2:
f3:8f:f5:aa:3a:91:5d:90:26:d4:35:30:d8:34:b2:
b6:80:6b:90:82:a2:13:3b:11:41:89:11:3e:82:9b:
6d:08:6c:89:54:ae:48:4e:75:12:e9:57:be:67:e8:
0c:cb:7f:29:53:b5:bf:15:c9:88:f3:6e:82:15:0c:
22:5b:fc:70:c0:92:1f:8f:34:c7:e0:7f:75:88:00:
22:ca:04:78:2f:6d:17:03:8e:e0:b0:03:11:b5:c1:
90:c8:a7:0a:73:da:b7:a0:57:11:05:5b:62:d3:df:
6e:c4:09:ce:d8:34:73:e8:3b:ec:b7:4e:17:4d:a5:
42:0b:f3:cb:02:5f:a2:ef:f8:c6:ef:76:bd:ab:c9:
1a:b1:30:de:b5:04:ab:5a:b6:c7:1d:69:5a:a7:6f:
73:ac:e3:94:c8:cd:60:97:ed:d4:f4:94:cb:2d:3c:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A2:9D:52:34:5A:13:78:46:22:B8:83:7C:E9:E6:B8:FB:81:01:96
X509v3 Authority Key Identifier:
keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:17:af:fb:b3:45:9c:92:49:a3:10:ef:3e:b1:ac:6c:19:15:
13:a2:17:cf:93:76:fe:fe:dd:56:35:2d:7f:b7:96:4d:28:53:
ba:2a:9c:86:e6:a7:15:35:45:3d:9d:44:af:f1:15:73:74:76:
c6:d2:16:ec:0f:bf:50:85:4e:35:d2:ec:59:9f:3c:9f:43:cd:
8d:07:84:fe:3f:d9:dc:0e:b1:40:24:f1:9e:2b:df:3d:2f:70:
6d:7e:29:a2:cf:1c:98:6d:eb:be:97:07:b8:96:f7:09:31:1b:
89:e9:f0:ac:59:33:8d:d0:ef:0e:ca:d2:37:c1:29:88:25:c6:
cc:55:08:ab:7d:ed:5d:ff:09:87:08:8a:f9:97:18:37:71:ff:
dd:e4:e0:40:68:c1:a1:0e:41:a2:56:c7:4b:ab:1c:75:b0:b7:
dc:bf:c6:fc:97:87:89:c3:eb:59:1e:5e:58:44:1b:be:c1:cf:
35:c7:41:5a:0a:b5:80:ef:62:f4:58:2a:45:12:55:3a:fd:76:
2e:80:1e:8c:2a:4c:0c:c1:b1:41:d4:51:21:f1:6a:9d:d0:4f:
34:5d:fc:88:db:2d:84:51:02:2e:b6:d0:3f:1a:e6:05:27:e7:
8c:28:f6:27:8a:0c:c9:6b:49:3a:da:e9:88:14:e4:27:d7:b8:
16:6e:af:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz+qlcOOtTHO+q5FzElUvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNzNmODM3MzVjOGFiMTBhMGE4ZDQ0ZTE3MDEyOGYwMjM4
NDZlNzkwHhcNMjUwNjE0MDUwMDU0WhcNMjUwNjE1MDUwMDU0WjAzMTEwLwYDVQQD
EyhiM2EyOWQ1MjM0NWExMzc4NDYyMmI4ODM3Y2U5ZTZiOGZiODEwMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v6C8vx1Bh4CMHhMk8YjUYEQdImf
y79V2qim1qfQuAz8SOhy9v2BjznDmAdTeWSx/joeodMyBwZHsx4zoEXsf51ArjlO
UWCWn9wpOHbdXjvm78D/zPGnxPLzj/WqOpFdkCbUNTDYNLK2gGuQgqITOxFBiRE+
gpttCGyJVK5ITnUS6Ve+Z+gMy38pU7W/FcmI826CFQwiW/xwwJIfjzTH4H91iAAi
ygR4L20XA47gsAMRtcGQyKcKc9q3oFcRBVti099uxAnO2DRz6Dvst04XTaVCC/PL
Al+i7/jG73a9q8kasTDetQSrWrbHHWlap29zrOOUyM1gl+3U9JTLLTzIoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOinVI0WhN4RiK4g3zp5rj7gQGWMB8GA1UdIwQY
MBaAFItz+Dc1yKsQoKjUThcBKPAjhG55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNzZhOTUtZjdhZS00NGI5LTlkOGQt
NjVkZDdmNTJlNDZjLzEvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNzZhOTUtZjdhZS00NGI5LTlkOGQtNjVkZDdmNTJlNDZj
LzEvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBev+7NF
nJJJoxDvPrGsbBkVE6IXz5N2/v7dVjUtf7eWTShTuiqchuanFTVFPZ1Er/EVc3R2
xtIW7A+/UIVONdLsWZ88n0PNjQeE/j/Z3A6xQCTxnivfPS9wbX4pos8cmG3rvpcH
uJb3CTEbienwrFkzjdDvDsrSN8EpiCXGzFUIq33tXf8JhwiK+ZcYN3H/3eTgQGjB
oQ5BolbHS6scdbC33L/G/JeHicPrWR5eWEQbvsHPNcdBWgq1gO9i9FgqRRJVOv12
LoAejCpMDMGxQdRRIfFqndBPNF38iNsthFECLrbQPxrmBSfnjCj2J4oMyWtJOtrp
iBTkJ9e4Fm6vdQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:52:56 2025 by rpki-client