Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
File: 0s3V8WKiZ4AAA88wwY6c684nTsU.mft (raw, json)
Hash identifier: kgNBudAWk7VowcCLbsNAb0qL0szk6+XI32ca4EHYoxs=
Subject key identifier: 00:35:79:82:89:11:7B:2C:37:61:B2:BA:5A:D2:69:DE:1B:89:F2:EE
Authority key identifier: D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
Certificate issuer: /CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Certificate serial: 01976F62AB99C7B13955E8B1D69053B755E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
Manifest number: 0823
Signing time: Sat 14 Jun 2025 17:00:26 +0000
Manifest this update: Sat 14 Jun 2025 17:00:26 +0000
Manifest next update: Sun 15 Jun 2025 17:00:26 +0000
Files and hashes: 1: 0s3V8WKiZ4AAA88wwY6c684nTsU.crl (hash: 13GMCk/IW5FJjY2LJcEaxSU1FfUO9jsN3DFzQhdu0y0=)
2: 4d-M2xoibAEms_RDQ9mCEYeUNpg.roa (hash: wVeVUALjyzMUssmf4Hte549aQq7kwv7Or9f/6VG17Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:ab:99:c7:b1:39:55:e8:b1:d6:90:53:b7:55:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2cdd5f162a267800003cf30c18e9cebce274ec5
Validity
Not Before: Jun 14 17:00:26 2025 GMT
Not After : Jun 15 17:00:26 2025 GMT
Subject: CN=0035798289117b2c3761b2ba5ad269de1b89f2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:ca:37:87:68:c7:b3:cb:be:f9:03:19:c2:
b2:e6:37:58:3d:02:fe:96:13:78:b2:a3:49:2a:9c:
77:c0:c4:e5:4e:a6:aa:64:31:f5:13:67:41:48:79:
46:df:b8:cb:ce:1b:0c:a4:0f:f3:ea:4b:38:36:1e:
81:73:a2:f4:66:68:06:70:63:6c:2d:ba:0c:1d:0e:
46:b0:23:67:eb:40:a4:86:6d:e2:47:cb:50:4e:d4:
e8:90:fd:63:35:fb:56:e0:57:ac:f1:8f:59:d0:ed:
4a:da:13:fe:cd:f4:a7:12:cf:92:24:b6:35:53:10:
63:87:04:97:d3:bb:05:55:71:20:0a:e3:9d:f1:88:
70:fe:73:3d:e9:7c:b4:d1:cd:7e:b7:41:2e:e2:ed:
da:f8:a6:b7:89:f2:2b:fd:ba:72:67:bf:bf:3e:4e:
29:02:19:50:b4:d9:f2:8e:96:f2:6b:4d:46:8c:dd:
6e:e7:59:7a:45:9e:f6:81:2f:45:b1:8b:12:34:cd:
71:5b:7a:de:47:d9:60:28:f7:64:65:75:60:54:f0:
e6:1f:77:27:dd:3a:08:54:7c:b4:91:da:c4:52:fc:
e1:9e:3f:9c:a6:d1:5e:b3:ad:39:6d:e1:2a:c3:f5:
32:32:39:ec:1c:73:99:1e:1f:95:95:bc:fb:c4:b8:
9e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:35:79:82:89:11:7B:2C:37:61:B2:BA:5A:D2:69:DE:1B:89:F2:EE
X509v3 Authority Key Identifier:
keyid:D2:CD:D5:F1:62:A2:67:80:00:03:CF:30:C1:8E:9C:EB:CE:27:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0s3V8WKiZ4AAA88wwY6c684nTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/deaad8-3113-4512-a9ce-358243c551a2/1/0s3V8WKiZ4AAA88wwY6c684nTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e2:c9:4f:b0:50:9b:bd:7b:6b:50:53:4b:40:dd:f5:bc:de:
a1:4a:60:9e:36:40:58:69:d6:86:a2:6d:98:51:c6:01:0b:8f:
a6:9b:05:69:b1:e5:c4:29:61:f3:f3:20:ba:cd:da:28:3b:10:
58:2d:84:80:a1:34:68:38:61:9b:bc:ab:6e:96:a5:d9:c1:7e:
51:15:3b:84:90:db:24:df:20:cc:48:62:e1:dd:d5:f1:80:26:
db:0d:b8:f4:c7:78:bc:3e:ee:93:af:68:59:5e:b5:32:d3:72:
f0:01:ea:f1:c9:29:b4:f5:04:f5:21:73:bd:40:ac:2d:6e:86:
bc:27:78:ae:c1:61:a6:2e:b0:56:39:a3:b6:e7:45:04:ba:bf:
a5:a4:ea:c5:5e:03:61:c2:86:e7:2a:cf:56:d9:a5:fa:4d:7f:
bf:83:06:b6:f4:f8:8a:0c:1e:c6:fa:65:1e:f8:13:5e:cb:62:
75:08:f5:c8:1e:80:c4:3e:b2:8e:73:c5:df:db:40:a8:31:29:
e7:56:75:de:a5:f4:e2:ba:5a:df:07:44:90:64:c2:d6:58:6c:
9d:e7:e2:4a:c6:c0:97:cb:9d:ef:79:11:0d:e6:cf:2f:04:ca:
df:53:38:36:83:0b:f2:70:f3:10:55:ee:fd:d9:f6:7c:ca:78:
86:96:99:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYquZx7E5Veix1pBTt1XpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyY2RkNWYxNjJhMjY3ODAwMDAzY2YzMGMxOGU5Y2ViY2Uy
NzRlYzUwHhcNMjUwNjE0MTcwMDI2WhcNMjUwNjE1MTcwMDI2WjAzMTEwLwYDVQQD
EygwMDM1Nzk4Mjg5MTE3YjJjMzc2MWIyYmE1YWQyNjlkZTFiODlmMmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojvKN4dox7PLvvkDGcKy5jdYPQL+
lhN4sqNJKpx3wMTlTqaqZDH1E2dBSHlG37jLzhsMpA/z6ks4Nh6Bc6L0ZmgGcGNs
LboMHQ5GsCNn60Ckhm3iR8tQTtTokP1jNftW4Fes8Y9Z0O1K2hP+zfSnEs+SJLY1
UxBjhwSX07sFVXEgCuOd8Yhw/nM96Xy00c1+t0Eu4u3a+Ka3ifIr/bpyZ7+/Pk4p
AhlQtNnyjpbya01GjN1u51l6RZ72gS9FsYsSNM1xW3reR9lgKPdkZXVgVPDmH3cn
3ToIVHy0kdrEUvzhnj+cptFes605beEqw/UyMjnsHHOZHh+Vlbz7xLie4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAA1eYKJEXssN2GyulrSad4bifLuMB8GA1UdIwQY
MBaAFNLN1fFiomeAAAPPMMGOnOvOJ07FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHMzVjhXS2laNEFBQTg4d3dZNmM2ODRuVHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZWFhZDgtMzExMy00NTEyLWE5Y2Ut
MzU4MjQzYzU1MWEyLzEvMHMzVjhXS2laNEFBQTg4d3dZNmM2ODRuVHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9kZWFhZDgtMzExMy00NTEyLWE5Y2UtMzU4MjQzYzU1MWEy
LzEvMHMzVjhXS2laNEFBQTg4d3dZNmM2ODRuVHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuLJT7BQ
m717a1BTS0Dd9bzeoUpgnjZAWGnWhqJtmFHGAQuPppsFabHlxClh8/Mgus3aKDsQ
WC2EgKE0aDhhm7yrbpal2cF+URU7hJDbJN8gzEhi4d3V8YAm2w249Md4vD7uk69o
WV61MtNy8AHq8ckptPUE9SFzvUCsLW6GvCd4rsFhpi6wVjmjtudFBLq/paTqxV4D
YcKG5yrPVtml+k1/v4MGtvT4igwexvplHvgTXstidQj1yB6AxD6yjnPF39tAqDEp
51Z13qX04rpa3wdEkGTC1lhsnefiSsbAl8ud73kRDebPLwTK31M4NoML8nDzEFXu
/dn2fMp4hpaZuw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:16:27 2025 by rpki-client