Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
File: fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json)
Hash identifier: mQggkc/npPgbf9NxEOyqSod6lRmmx2nrH0SrGJ81m3Q=
Subject key identifier: 3A:CE:B5:F3:DB:C0:8B:31:DE:79:49:73:42:96:DB:39:E2:0C:5E:54
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 01976CCF6A99B3C89561F1EFB3C8128E9C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
Manifest number: 126F
Signing time: Sat 14 Jun 2025 05:00:21 +0000
Manifest this update: Sat 14 Jun 2025 05:00:21 +0000
Manifest next update: Sun 15 Jun 2025 05:00:21 +0000
Files and hashes: 1: WWnUjL9xa5N7RsAiSnLThhNhQII.roa (hash: A7PEzwDFjxl/k3orxXArS56nuTh+qfj6pNUO4Y3XuLQ=)
2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: fl9ZcmJBPlSI6EsboTTvuwpvdpvu7gmDnY6uJbRo6CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:6a:99:b3:c8:95:61:f1:ef:b3:c8:12:8e:9c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: Jun 14 05:00:21 2025 GMT
Not After : Jun 15 05:00:21 2025 GMT
Subject: CN=3aceb5f3dbc08b31de7949734296db39e20c5e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:b6:cb:a6:f6:20:ee:99:fe:2d:13:48:4f:
3c:2c:45:bc:ec:c9:ba:20:2a:51:e9:81:82:4c:18:
83:88:6e:28:01:43:00:ff:a8:06:86:e8:8e:94:6c:
d5:7d:dc:0d:0b:3d:27:83:38:46:8b:43:05:79:19:
87:20:93:8b:88:05:76:c2:58:e8:da:54:11:a4:c8:
35:8b:34:9b:0c:1d:27:98:8e:c9:ec:c3:b4:d6:9f:
6e:14:48:14:1d:a1:15:62:85:67:9b:31:16:95:52:
23:47:e1:6f:19:98:29:8b:20:da:29:dc:93:b3:d0:
65:c8:ea:b1:99:a7:32:1a:09:85:54:30:7a:4d:68:
a6:f8:6d:d9:bd:ab:d6:63:95:6f:d0:06:20:7b:7a:
3f:07:d4:65:5c:2a:65:79:98:7b:19:d9:36:8e:3d:
78:7f:23:2b:95:a5:c3:d4:b8:be:de:2a:ff:bf:1d:
53:ab:fa:60:90:49:b5:7a:94:56:3f:38:95:37:64:
41:6a:0f:64:3a:43:53:b9:a3:7f:56:5c:56:55:59:
16:3d:da:a5:13:45:33:2f:44:d2:ab:16:2b:0f:5e:
84:3f:66:f1:76:41:ab:a8:34:74:d9:47:64:d2:43:
8f:15:b5:32:61:eb:d9:a3:2c:8a:2d:70:b4:a4:d4:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CE:B5:F3:DB:C0:8B:31:DE:79:49:73:42:96:DB:39:E2:0C:5E:54
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:af:1b:38:a4:af:d4:bf:10:b3:f4:c5:01:b2:fe:10:7e:f0:
b0:70:2c:b4:8a:7d:73:03:b6:26:d9:21:eb:7a:94:c0:18:36:
d8:78:2c:4c:f7:4f:e4:c9:f0:ef:ee:3f:14:85:32:24:fb:a5:
2f:02:14:3b:a4:2e:9a:28:ae:1e:2e:c1:5b:50:5e:ca:ed:49:
c9:d7:fd:c0:13:c4:1c:ff:97:95:d5:fc:04:b2:04:d2:f0:56:
0f:f1:26:3d:c0:e9:da:d0:ee:f2:58:0e:57:ab:74:9c:6b:ea:
27:8c:db:78:6a:4b:d6:2d:07:bf:04:50:ae:2e:01:e0:4e:cf:
a9:8c:d1:63:71:dc:44:54:b9:8d:41:97:32:24:a8:29:0a:6b:
27:c3:d0:25:c1:d6:f4:a3:f9:cf:1d:58:01:b6:8c:c9:6d:78:
ef:5e:4d:5b:78:e2:79:f2:a0:64:2c:c2:ef:55:b8:06:3e:43:
88:b0:4f:de:dd:1d:a9:ff:17:d6:61:eb:80:76:09:c7:62:7b:
42:69:d3:6d:1a:af:88:06:1d:10:3d:26:ea:02:75:c5:59:61:
de:73:08:1b:e1:cb:98:12:46:67:4d:25:68:e4:15:12:62:48:
4a:e7:52:e1:9f:ad:09:b5:2f:8b:20:21:c4:e9:41:62:82:d4:
92:29:ff:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz2qZs8iVYfHvs8gSjpx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNmRjNzM5NTgxNWFmMDQ1MDQ4ZjRjZTM5MTBkMDQwMDhm
ZjNhN2MwHhcNMjUwNjE0MDUwMDIxWhcNMjUwNjE1MDUwMDIxWjAzMTEwLwYDVQQD
EygzYWNlYjVmM2RiYzA4YjMxZGU3OTQ5NzM0Mjk2ZGIzOWUyMGM1ZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpK2y6b2IO6Z/i0TSE88LEW87Mm6
ICpR6YGCTBiDiG4oAUMA/6gGhuiOlGzVfdwNCz0ngzhGi0MFeRmHIJOLiAV2wljo
2lQRpMg1izSbDB0nmI7J7MO01p9uFEgUHaEVYoVnmzEWlVIjR+FvGZgpiyDaKdyT
s9BlyOqxmacyGgmFVDB6TWim+G3ZvavWY5Vv0AYge3o/B9RlXCpleZh7Gdk2jj14
fyMrlaXD1Li+3ir/vx1Tq/pgkEm1epRWPziVN2RBag9kOkNTuaN/VlxWVVkWPdql
E0UzL0TSqxYrD16EP2bxdkGrqDR02Udk0kOPFbUyYevZoyyKLXC0pNRWEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrOtfPbwIsx3nlJc0KW2zniDF5UMB8GA1UdIwQY
MBaAFHxtxzlYFa8EUEj0zjkQ0EAI/zp8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkczSE9WZ1Zyd1JRU1BUT09SRFFRQWpfT253LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NDY4N2YtZWZhNS00NjIwLTg2MTkt
MzE1NWJhOGNiNzRmLzEvZkczSE9WZ1Zyd1JRU1BUT09SRFFRQWpfT253Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81NDY4N2YtZWZhNS00NjIwLTg2MTktMzE1NWJhOGNiNzRm
LzEvZkczSE9WZ1Zyd1JRU1BUT09SRFFRQWpfT253LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOK8bOKSv
1L8Qs/TFAbL+EH7wsHAstIp9cwO2Jtkh63qUwBg22HgsTPdP5Mnw7+4/FIUyJPul
LwIUO6QumiiuHi7BW1Beyu1Jydf9wBPEHP+XldX8BLIE0vBWD/EmPcDp2tDu8lgO
V6t0nGvqJ4zbeGpL1i0HvwRQri4B4E7PqYzRY3HcRFS5jUGXMiSoKQprJ8PQJcHW
9KP5zx1YAbaMyW14715NW3jiefKgZCzC71W4Bj5DiLBP3t0dqf8X1mHrgHYJx2J7
QmnTbRqviAYdED0m6gJ1xVlh3nMIG+HLmBJGZ00laOQVEmJISudS4Z+tCbUviyAh
xOlBYoLUkin/Xw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:17 2025 by rpki-client