Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
File: 3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json)
Hash identifier: UKkXC3kQdCQgrXd+sy7GVH+C3eE7O0LbiNL2WERpkuc=
Subject key identifier: 99:5B:90:2F:34:B7:94:B4:D6:1A:9F:95:D1:4D:63:E2:07:D1:D7:00
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 01976C61D07FF0A21E6131AA16CF1DDE7017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
Manifest number: 15A9
Signing time: Sat 14 Jun 2025 03:00:39 +0000
Manifest this update: Sat 14 Jun 2025 03:00:39 +0000
Manifest next update: Sun 15 Jun 2025 03:00:39 +0000
Files and hashes: 1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: TsDLi0ZD4NufOCAhsowJDRugEKvJk5Fnl9kl2Vg+cBo=)
2: 7Dxx4GUfZshom9FbPHAxp-Z60ho.roa (hash: LXHxUD8d853bp48Kp4bHizsdXxzmRHG+cP9w4z3LY9k=)
3: B_dytxxDPRteZVWj_5GTAT9t8BE.roa (hash: T860Q+FQFzVWcjsZOe8dk9hmlbNKGPeSX6qfmd4Fuhk=)
4: dbK-R91ZSUb0vmB9yu9XwDJ_RDw.roa (hash: YNxHBvfEGT+DFTrI9P9oVpm7y0mnqXQpEkbudzfn+nA=)
5: m3WW-meE1vfIwSrMaxHTYI5Nlk0.roa (hash: aOHIBtHSW3A5XSJ7tUzd+YLEbCI85PGx7m5TzFvcEu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:d0:7f:f0:a2:1e:61:31:aa:16:cf:1d:de:70:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Jun 14 03:00:39 2025 GMT
Not After : Jun 15 03:00:39 2025 GMT
Subject: CN=995b902f34b794b4d61a9f95d14d63e207d1d700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:0b:93:7a:05:48:68:7b:fe:e7:8e:2d:3e:
af:83:5b:7f:5a:dd:26:e5:fc:fa:64:bb:bc:2d:46:
c7:c7:6a:19:2c:bc:3c:c3:b9:83:da:d8:4b:d5:95:
68:89:09:9b:1b:e3:80:5f:78:6a:f3:9e:ce:07:05:
3c:62:4a:c9:e6:fe:f6:86:ef:e9:36:8b:ee:44:c3:
4c:4b:5d:62:6f:ac:1e:27:d1:2b:cd:7f:d6:f0:b2:
11:d9:da:db:db:1b:3a:4b:f4:d4:41:5e:71:46:fa:
71:90:9e:d4:fc:2a:f2:c1:65:d1:35:23:50:93:29:
f6:e1:29:68:f9:de:be:64:06:ff:49:72:af:49:1b:
49:48:c8:02:c0:66:dd:a9:51:64:95:3e:2b:88:0c:
d3:24:c9:34:7d:82:09:98:7b:c1:f8:00:65:5f:99:
6c:a8:dc:f7:d9:a5:e1:cb:b0:c6:16:55:53:69:5d:
0d:3b:ce:4d:e6:c2:20:5d:07:9f:3c:e8:ea:93:b6:
30:db:8d:a5:8c:b3:62:e7:e6:68:1c:fd:9a:90:bc:
05:6f:e9:5f:1d:30:35:3e:57:00:0c:83:52:0a:77:
38:cd:75:e6:48:48:c1:6a:5e:00:39:56:e4:b5:36:
8f:74:a6:b8:f1:6a:5a:dd:ca:83:50:4d:87:d5:10:
db:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5B:90:2F:34:B7:94:B4:D6:1A:9F:95:D1:4D:63:E2:07:D1:D7:00
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:58:f3:ae:77:46:34:ba:c9:e1:56:01:f4:b7:38:c3:b1:d2:
6c:ed:32:58:b9:ab:c3:ef:ec:fc:8f:72:2d:0f:40:27:36:fa:
0b:ef:91:ef:e6:24:05:c4:93:67:2b:5c:3d:be:01:91:48:36:
08:99:ec:ea:fc:55:f5:d7:9b:df:d7:54:a3:fd:6a:ea:59:58:
1d:df:e6:a1:42:e2:7c:d4:2a:18:49:42:13:ff:0f:ed:9c:79:
f1:39:99:a8:bc:e1:15:ed:43:fa:25:c9:7d:63:cc:87:2a:8f:
1b:6c:d1:67:36:50:db:27:f7:10:7b:82:26:69:bd:e3:22:0e:
93:6d:58:ab:f9:b3:3a:0a:05:d3:53:3e:e8:bb:e4:0f:fc:b3:
23:a3:64:9e:aa:48:b0:5d:cc:ed:91:00:d0:ef:58:bf:ba:15:
2b:14:63:d0:59:62:2e:fb:13:ae:58:93:fb:37:ad:d3:4d:88:
37:dc:86:57:9e:d6:f7:91:dc:20:48:9c:f2:29:85:11:a3:9f:
a6:5c:4f:c1:13:c9:4c:d8:a4:de:d9:8a:09:09:c6:b9:f1:19:
f4:07:aa:9b:b3:89:7a:55:96:0a:a3:83:6c:28:00:d4:48:e3:
94:3a:26:c2:e9:7f:09:02:0c:f8:a5:10:6b:45:58:73:8d:b5:
90:1a:ed:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYdB/8KIeYTGqFs8d3nAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOTdjN2NhMDViY2MzZDZhMmFkMWJhMjM1YmVkOGZlYWI2
OTQ1NTAwHhcNMjUwNjE0MDMwMDM5WhcNMjUwNjE1MDMwMDM5WjAzMTEwLwYDVQQD
Eyg5OTViOTAyZjM0Yjc5NGI0ZDYxYTlmOTVkMTRkNjNlMjA3ZDFkNzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBQLk3oFSGh7/ueOLT6vg1t/Wt0m
5fz6ZLu8LUbHx2oZLLw8w7mD2thL1ZVoiQmbG+OAX3hq857OBwU8YkrJ5v72hu/p
NovuRMNMS11ib6weJ9ErzX/W8LIR2drb2xs6S/TUQV5xRvpxkJ7U/CrywWXRNSNQ
kyn24Slo+d6+ZAb/SXKvSRtJSMgCwGbdqVFklT4riAzTJMk0fYIJmHvB+ABlX5ls
qNz32aXhy7DGFlVTaV0NO85N5sIgXQefPOjqk7Yw242ljLNi5+ZoHP2akLwFb+lf
HTA1PlcADINSCnc4zXXmSEjBal4AOVbktTaPdKa48Wpa3cqDUE2H1RDbcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlbkC80t5S01hqfldFNY+IH0dcAMB8GA1UdIwQY
MBaAFN2Xx8oFvMPWoq0bojW+2P6raUVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEt
NGQ0YjE2MTQ0ZDY4LzEvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEtNGQ0YjE2MTQ0ZDY4
LzEvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFjzrndG
NLrJ4VYB9Lc4w7HSbO0yWLmrw+/s/I9yLQ9AJzb6C++R7+YkBcSTZytcPb4BkUg2
CJns6vxV9deb39dUo/1q6llYHd/moULifNQqGElCE/8P7Zx58TmZqLzhFe1D+iXJ
fWPMhyqPG2zRZzZQ2yf3EHuCJmm94yIOk21Yq/mzOgoF01M+6LvkD/yzI6NknqpI
sF3M7ZEA0O9Yv7oVKxRj0FliLvsTrliT+zet002IN9yGV57W95HcIEic8imFEaOf
plxPwRPJTNik3tmKCQnGufEZ9Aeqm7OJelWWCqODbCgA1EjjlDomwul/CQIM+KUQ
a0VYc421kBrtXQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:48 2025 by rpki-client