Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: pOKB/SGpL3FJYdT33t1zTQini6b6718mVJPoY2QhmwQ=
Subject key identifier: 24:58:0D:19:D4:CD:AF:D1:00:22:04:E8:8F:15:5F:7D:9E:83:B3:17
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 0197684E033AEEF67828300AE274020F56A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 08:00:32 +0000
Manifest this update: Fri 13 Jun 2025 08:00:32 +0000
Manifest next update: Sat 14 Jun 2025 08:00:32 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: N921kFrfYLm4qP68mtxlSg1rE11+2NTXq8mA5/3kHs4=)
2: sHHovkPcLVWIMQ_tboQIdcTBHy0.roa (hash: fYwK2GNfLuzV598M+4d1qnmBbMriSVB83QSoeu+hALg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:03:3a:ee:f6:78:28:30:0a:e2:74:02:0f:56:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Jun 13 08:00:32 2025 GMT
Not After : Jun 14 08:00:32 2025 GMT
Subject: CN=24580d19d4cdafd1002204e88f155f7d9e83b317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:15:a8:5e:af:a6:4b:59:a1:fb:df:84:fa:
c9:aa:b0:56:4c:b9:97:f0:b5:33:e5:4e:b9:c9:de:
be:4e:f2:89:1b:e9:14:6f:1d:96:4d:af:2e:a2:b4:
6f:4f:38:e3:e8:9f:a5:be:9c:6b:d6:4a:fa:3b:db:
be:3a:c4:a7:f8:8d:9f:cf:32:39:1d:27:7c:8d:d1:
6d:34:39:e8:c4:f1:3c:01:84:7f:5f:f5:ed:d5:16:
f0:35:2e:76:ad:6c:7e:c0:38:91:6c:39:60:9b:f4:
73:bc:4a:4a:d7:19:92:1b:c3:31:02:e1:fd:d4:05:
be:6c:c9:b1:5b:72:b6:e1:6e:61:e7:67:7e:78:08:
45:27:e6:fe:38:9e:ca:44:82:90:16:58:c2:14:0b:
34:93:6d:f1:50:6e:42:a8:a0:41:b5:37:00:69:2b:
13:c6:c8:18:f9:7a:7e:20:34:b5:cf:7d:34:4c:0e:
89:2a:59:03:f1:13:20:89:a4:16:59:07:72:e9:a8:
a0:7d:d4:33:40:92:02:91:4f:b8:91:87:66:bb:b3:
ca:6a:5b:ed:7c:34:40:60:56:7c:1b:de:91:43:5b:
a5:95:6f:0d:4d:66:f3:ac:89:55:f5:a8:c3:0a:1f:
b6:ed:21:91:30:f3:f9:fe:31:4a:54:02:e1:18:13:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:58:0D:19:D4:CD:AF:D1:00:22:04:E8:8F:15:5F:7D:9E:83:B3:17
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:54:67:a5:c2:36:30:ec:fb:09:b2:bf:f4:9b:35:a9:9d:8e:
b2:65:31:ae:5e:94:31:e5:ad:77:1a:ce:1b:72:b8:f8:27:68:
43:24:de:ac:66:4b:67:e2:46:4c:e3:63:68:1d:e8:d0:a8:eb:
ba:c0:c8:4d:ee:6b:e9:96:a2:50:6b:73:db:c2:c2:7d:b0:79:
b2:31:fe:fa:fa:be:94:26:67:76:e7:bf:06:87:0f:25:64:6a:
ce:4c:a2:ab:44:18:eb:7c:d5:9f:2c:c4:9d:e3:88:1a:3d:45:
c6:64:f8:6d:df:fa:aa:45:ac:2f:b6:06:3c:ea:62:17:b4:0f:
e8:9a:04:86:dd:30:8b:8b:4e:39:3f:63:ae:a0:4a:95:bf:eb:
cf:5e:18:85:9c:85:e7:20:8c:99:7e:a9:35:9f:b8:48:35:39:
37:81:3d:0e:91:47:20:52:6a:6e:a7:7c:f4:d0:93:7d:b6:99:
55:6a:d3:e0:21:30:2a:51:cf:65:87:37:69:e0:8e:4d:5e:d5:
97:85:7e:6f:cf:ba:85:a2:31:44:cb:93:ab:a4:be:ba:36:4d:
83:8a:67:fd:e4:ca:6a:a3:eb:76:75:dd:c2:60:e1:68:43:fa:
f6:45:87:33:5c:4d:a9:a7:1c:29:fe:51:44:0d:58:34:de:66:
ed:c8:5b:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTgM67vZ4KDAK4nQCD1apMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMDg1YjBkMWJiZjllNzgxYjE1NGIwNmY3YjkxNDExMjlk
Yjc3NWYwHhcNMjUwNjEzMDgwMDMyWhcNMjUwNjE0MDgwMDMyWjAzMTEwLwYDVQQD
EygyNDU4MGQxOWQ0Y2RhZmQxMDAyMjA0ZTg4ZjE1NWY3ZDllODNiMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXAVqF6vpktZofvfhPrJqrBWTLmX
8LUz5U65yd6+TvKJG+kUbx2WTa8uorRvTzjj6J+lvpxr1kr6O9u+OsSn+I2fzzI5
HSd8jdFtNDnoxPE8AYR/X/Xt1RbwNS52rWx+wDiRbDlgm/RzvEpK1xmSG8MxAuH9
1AW+bMmxW3K24W5h52d+eAhFJ+b+OJ7KRIKQFljCFAs0k23xUG5CqKBBtTcAaSsT
xsgY+Xp+IDS1z300TA6JKlkD8RMgiaQWWQdy6aigfdQzQJICkU+4kYdmu7PKalvt
fDRAYFZ8G96RQ1ullW8NTWbzrIlV9ajDCh+27SGRMPP5/jFKVALhGBNzHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRYDRnUza/RACIE6I8VX32eg7MXMB8GA1UdIwQY
MBaAFN4IWw0bv554GxVLBve5FBEp23dfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZjAzYTMtMzFhMS00ZGExLWI4ZTkt
N2EwYjNkNWQ5MTU2LzEvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mZjAzYTMtMzFhMS00ZGExLWI4ZTktN2EwYjNkNWQ5MTU2
LzEvM2doYkRSdV9ubmdiRlVzRzk3a1VFU25iZDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFRnpcI2
MOz7CbK/9Js1qZ2OsmUxrl6UMeWtdxrOG3K4+CdoQyTerGZLZ+JGTONjaB3o0Kjr
usDITe5r6ZaiUGtz28LCfbB5sjH++vq+lCZndue/BocPJWRqzkyiq0QY63zVnyzE
neOIGj1FxmT4bd/6qkWsL7YGPOpiF7QP6JoEht0wi4tOOT9jrqBKlb/rz14YhZyF
5yCMmX6pNZ+4SDU5N4E9DpFHIFJqbqd89NCTfbaZVWrT4CEwKlHPZYc3aeCOTV7V
l4V+b8+6haIxRMuTq6S+ujZNg4pn/eTKaqPrdnXdwmDhaEP69kWHM1xNqaccKf5R
RA1YNN5m7chbiA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:51 2025 by rpki-client