Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: BQKHQfosH9j0pd5JsEBryFCYi24WL483KhePdMqcGhY=
Subject key identifier: 85:44:B5:D8:66:8C:21:3F:E9:BC:23:43:4F:D8:E0:44:F0:84:8C:FE
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 01977B307F6DADC41B9F54305816C2843457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 15A1
Signing time: Tue 17 Jun 2025 00:01:05 +0000
Manifest this update: Tue 17 Jun 2025 00:01:05 +0000
Manifest next update: Wed 18 Jun 2025 00:01:05 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: MUyQCKrJwSFPz6yNABliKos8zAQDdPUz/bjUjmwb2pU=)
2: XeTdM9cnm-nj4Gui4gyEqLrQLaw.roa (hash: byMWJNOsSPMVajbPUM5liOZkm9+BQbQeZEZJwK73A2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:7f:6d:ad:c4:1b:9f:54:30:58:16:c2:84:34:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Jun 17 00:01:05 2025 GMT
Not After : Jun 18 00:01:05 2025 GMT
Subject: CN=8544b5d8668c213fe9bc23434fd8e044f0848cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:8c:f7:af:18:d0:91:75:59:34:aa:9f:b2:
a2:fc:f1:e5:e1:5f:18:6b:be:b3:05:94:aa:fa:5e:
69:80:29:c6:9c:6e:cc:1b:af:64:23:66:87:d5:82:
a6:d6:6d:87:cb:6a:cc:00:f9:4a:af:45:09:3e:54:
be:b6:fb:63:c9:09:91:5e:8c:29:d7:1e:81:03:dc:
dd:c6:4d:95:08:7b:30:5c:f0:f9:41:bd:2c:ab:da:
da:aa:4b:e0:e5:83:e3:94:41:34:63:45:99:19:d1:
48:c9:19:77:d3:e7:0c:3c:15:e3:0a:f8:1b:ae:49:
a4:13:55:9b:e0:42:67:50:29:d2:0f:05:dd:06:2c:
ec:56:f6:19:07:5a:23:22:6b:bd:b1:67:08:e6:4d:
f4:ba:bc:d8:b4:89:ca:a5:79:d5:06:2c:fa:32:16:
31:bf:7b:ab:68:85:4e:4d:7e:a1:75:8a:30:59:79:
bf:86:17:2b:ff:6d:e7:1e:78:1f:f2:96:cb:8d:1a:
31:72:61:53:8c:fe:cc:a3:a8:20:90:07:6e:90:a4:
98:84:e6:3c:eb:3d:a1:e2:08:7f:bb:ee:d9:93:91:
05:95:25:99:0c:f3:54:5a:2b:7e:53:38:63:11:ba:
1f:c5:af:fc:40:78:70:51:17:c2:37:aa:64:29:d0:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:44:B5:D8:66:8C:21:3F:E9:BC:23:43:4F:D8:E0:44:F0:84:8C:FE
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ca:e4:0c:ec:3d:e4:f6:6f:1e:ec:9d:7b:1d:5e:63:4b:56:
35:9a:ae:0e:28:61:53:04:8b:a2:60:65:33:5d:95:fc:82:ef:
2a:44:57:28:43:45:59:6b:8a:ca:9a:24:14:72:95:7b:fb:93:
f1:2b:48:f3:06:2e:d7:fb:b9:a9:68:a7:cd:6e:e6:75:79:4c:
3d:75:9c:ea:e3:e3:5b:35:80:53:87:9b:f2:99:bd:24:be:e4:
7e:a6:98:19:fe:33:47:e0:84:72:e0:f1:05:f8:f5:8f:48:a0:
59:4e:3e:72:a5:ba:15:a4:9f:ba:70:86:e3:59:0b:9d:71:df:
fd:bd:16:2e:7e:ce:cd:39:11:c0:cc:76:65:54:5e:63:ef:e4:
6e:a8:73:8e:bf:8e:45:1e:bc:5f:dc:a8:01:6c:59:95:53:59:
58:4b:6d:6c:22:5c:6a:8d:7e:9f:8f:40:6d:46:6e:3b:a2:bf:
20:68:f9:69:f4:0d:26:9a:b7:fe:30:b8:51:5b:1f:64:d6:eb:
d9:df:e4:3b:46:d4:3f:85:92:bd:75:2e:fb:d3:52:d6:80:ad:
0e:91:e1:8c:6b:53:ac:d9:e9:1d:5e:ff:e8:7f:e2:b2:ef:c3:
cf:36:d3:ee:18:a0:bd:a6:c0:6e:7c:65:36:57:16:c6:90:ff:
bb:a5:99:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd7MH9trcQbn1QwWBbChDRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTQ2YjFmY2Q5MmI0N2Y0ZjU1ZmFkMDM4Yzk1ODEzNDBh
OWQzNzAwHhcNMjUwNjE3MDAwMTA1WhcNMjUwNjE4MDAwMTA1WjAzMTEwLwYDVQQD
Eyg4NTQ0YjVkODY2OGMyMTNmZTliYzIzNDM0ZmQ4ZTA0NGYwODQ4Y2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpGM968Y0JF1WTSqn7Ki/PHl4V8Y
a76zBZSq+l5pgCnGnG7MG69kI2aH1YKm1m2Hy2rMAPlKr0UJPlS+tvtjyQmRXowp
1x6BA9zdxk2VCHswXPD5Qb0sq9raqkvg5YPjlEE0Y0WZGdFIyRl30+cMPBXjCvgb
rkmkE1Wb4EJnUCnSDwXdBizsVvYZB1ojImu9sWcI5k30urzYtInKpXnVBiz6MhYx
v3uraIVOTX6hdYowWXm/hhcr/23nHngf8pbLjRoxcmFTjP7Mo6ggkAdukKSYhOY8
6z2h4gh/u+7Zk5EFlSWZDPNUWit+UzhjEbofxa/8QHhwURfCN6pkKdAmMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVEtdhmjCE/6bwjQ0/Y4ETwhIz+MB8GA1UdIwQY
MBaAFNykax/NkrR/T1X60DjJWBNAqdNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmIt
YzZkMmI4ZDFmNTY2LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmItYzZkMmI4ZDFmNTY2
LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsrkDOw9
5PZvHuydex1eY0tWNZquDihhUwSLomBlM12V/ILvKkRXKENFWWuKypokFHKVe/uT
8StI8wYu1/u5qWinzW7mdXlMPXWc6uPjWzWAU4eb8pm9JL7kfqaYGf4zR+CEcuDx
Bfj1j0igWU4+cqW6FaSfunCG41kLnXHf/b0WLn7OzTkRwMx2ZVReY+/kbqhzjr+O
RR68X9yoAWxZlVNZWEttbCJcao1+n49AbUZuO6K/IGj5afQNJpq3/jC4UVsfZNbr
2d/kO0bUP4WSvXUu+9NS1oCtDpHhjGtTrNnpHV7/6H/isu/DzzbT7higvabAbnxl
NlcWxpD/u6WZ1g==
-----END CERTIFICATE-----
Generated at Tue Jun 17 02:42:11 2025 by rpki-client