Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
File: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft (raw, json)
Hash identifier: junxnDUEZG/30NDFef6drUa+aimEFaRdwaOwRgSl1Wc=
Subject key identifier: F2:0D:28:85:8F:43:D2:F4:76:66:6A:F0:B9:4D:C9:76:46:3E:1A:EA
Authority key identifier: DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
Certificate issuer: /CN=dead4c89f7aed8681d0202d22479d86e1462f889
Certificate serial: 01976FD1270EF93BB8CABFF0AE5C3BF5397E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 19:01:07 +0000
Manifest this update: Sat 14 Jun 2025 19:01:07 +0000
Manifest next update: Sun 15 Jun 2025 19:01:07 +0000
Files and hashes: 1: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl (hash: GZAAR2rWRBrwQpN/UGp1DYZMD4b5qCMVJoyI0TjCm1Q=)
2: hs44kTsCSKJHF4M4m6a7yybk2BU.roa (hash: sJmLUUiHtQ2muOzZ9TuqLt9boiXoy5M0LFt8+5jZEwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:27:0e:f9:3b:b8:ca:bf:f0:ae:5c:3b:f5:39:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dead4c89f7aed8681d0202d22479d86e1462f889
Validity
Not Before: Jun 14 19:01:07 2025 GMT
Not After : Jun 15 19:01:07 2025 GMT
Subject: CN=f20d28858f43d2f476666af0b94dc976463e1aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:fe:91:0d:dd:fa:9e:ed:73:1f:8c:ee:c5:
9e:87:5a:8d:8f:e6:5c:fb:83:e5:f5:70:6e:ad:3e:
ef:0e:bb:9d:f7:de:a5:ab:e6:cd:7d:c0:44:2f:33:
8e:95:da:9c:04:2a:59:4a:e4:ae:8b:dd:db:7c:1b:
f8:61:d4:6d:b6:7c:c6:1d:c9:e7:06:de:9c:cb:4d:
46:6f:a2:0c:76:e2:93:7d:fd:3f:4a:73:3a:3d:94:
6f:f2:42:aa:24:81:ea:23:bd:3a:6c:84:f9:30:43:
c1:df:db:66:4d:d2:18:14:06:c2:73:31:09:05:9f:
53:26:54:be:d5:5a:82:74:97:8b:20:e2:70:e1:f3:
1d:81:45:c9:4c:5a:a9:28:c5:48:9e:05:f3:bb:e0:
d6:bc:2a:33:80:5a:48:5c:c7:36:dd:26:e9:90:47:
08:09:17:79:1f:5f:1c:8f:82:65:ed:ab:91:48:b0:
a8:99:0b:c8:7b:50:ae:30:51:b2:ae:48:39:6a:40:
c2:10:42:43:54:28:9b:a0:68:65:6b:7c:6b:ff:df:
cc:83:b4:79:3b:15:4a:32:fd:fc:22:1b:12:4b:5c:
11:4f:d6:c7:dd:9a:e2:ce:31:45:f0:c5:f0:d3:05:
1a:9a:7b:e7:5f:46:a3:79:1b:90:91:0e:8e:5a:f7:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0D:28:85:8F:43:D2:F4:76:66:6A:F0:B9:4D:C9:76:46:3E:1A:EA
X509v3 Authority Key Identifier:
keyid:DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e5:7b:79:80:f5:f8:32:b7:6b:fb:9f:62:b5:a1:f0:42:16:
27:7e:b5:ae:70:30:aa:cd:74:e2:e5:96:c8:14:b7:a5:be:99:
6e:71:3d:84:c3:ce:db:78:f5:a0:d6:57:13:ab:35:7e:91:a2:
e0:39:dc:7d:6e:7d:a4:cc:97:a7:12:61:bf:c4:68:f1:1b:21:
25:14:82:29:1d:d0:67:d5:64:fa:3e:02:d5:d8:e5:a7:22:a2:
5d:63:0a:9f:cc:54:74:03:99:50:25:47:13:8d:74:e6:c0:46:
2c:6e:e4:f8:04:3a:04:54:be:d7:f0:be:e2:d3:a6:43:c7:26:
be:24:c3:6b:5b:0a:8a:37:a7:b2:70:57:2b:5e:c4:9c:f4:87:
b8:82:da:74:0a:31:51:f7:12:78:ab:d2:da:a9:30:ea:25:52:
a0:7c:55:86:b8:c6:39:09:cd:37:5c:20:09:99:28:d9:d1:52:
bc:af:38:5c:80:ac:37:26:2b:d6:ec:59:1d:39:21:78:7c:3d:
40:2a:1e:b2:49:80:8d:97:f5:fa:8c:80:a8:1b:2a:65:9a:8e:
93:66:63:2d:17:c4:21:94:83:2a:fb:59:af:f3:17:f5:d7:99:
c3:9d:04:93:9e:0b:62:28:09:d3:9e:e6:86:8a:ca:95:7d:37:
5d:d6:13:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0ScO+Tu4yr/wrlw79Tl+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYWQ0Yzg5ZjdhZWQ4NjgxZDAyMDJkMjI0NzlkODZlMTQ2
MmY4ODkwHhcNMjUwNjE0MTkwMTA3WhcNMjUwNjE1MTkwMTA3WjAzMTEwLwYDVQQD
EyhmMjBkMjg4NThmNDNkMmY0NzY2NjZhZjBiOTRkYzk3NjQ2M2UxYWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xP+kQ3d+p7tcx+M7sWeh1qNj+Zc
+4Pl9XBurT7vDrud996lq+bNfcBELzOOldqcBCpZSuSui93bfBv4YdRttnzGHcnn
Bt6cy01Gb6IMduKTff0/SnM6PZRv8kKqJIHqI706bIT5MEPB39tmTdIYFAbCczEJ
BZ9TJlS+1VqCdJeLIOJw4fMdgUXJTFqpKMVIngXzu+DWvCozgFpIXMc23SbpkEcI
CRd5H18cj4Jl7auRSLComQvIe1CuMFGyrkg5akDCEEJDVCiboGhla3xr/9/Mg7R5
OxVKMv38IhsSS1wRT9bH3ZrizjFF8MXw0wUamnvnX0ajeRuQkQ6OWvc1SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPINKIWPQ9L0dmZq8LlNyXZGPhrqMB8GA1UdIwQY
MBaAFN6tTIn3rthoHQIC0iR52G4UYviJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jZWE2NWYtZWNhMS00ZjgwLTg3NGUt
NWJjZmNlNWNhMmM3LzEvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jZWE2NWYtZWNhMS00ZjgwLTg3NGUtNWJjZmNlNWNhMmM3
LzEvM3ExTWlmZXUyR2dkQWdMU0pIblliaFJpLUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+V7eYD1
+DK3a/ufYrWh8EIWJ361rnAwqs104uWWyBS3pb6ZbnE9hMPO23j1oNZXE6s1fpGi
4DncfW59pMyXpxJhv8Ro8RshJRSCKR3QZ9Vk+j4C1djlpyKiXWMKn8xUdAOZUCVH
E4105sBGLG7k+AQ6BFS+1/C+4tOmQ8cmviTDa1sKijensnBXK17EnPSHuILadAox
UfcSeKvS2qkw6iVSoHxVhrjGOQnNN1wgCZko2dFSvK84XICsNyYr1uxZHTkheHw9
QCoeskmAjZf1+oyAqBsqZZqOk2ZjLRfEIZSDKvtZr/MX9deZw50Ek54LYigJ057m
horKlX03XdYTNw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:09 2025 by rpki-client