Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
File: PD9FAh1us0CkKy5d0fv3IaGmbWE.mft (raw, json)
Hash identifier: cvbUq3DkHdMtvcYJIp158R5Bx7xTejFRyjVsenAI7L0=
Subject key identifier: BD:29:4B:D1:73:EB:2F:33:5B:E8:45:00:19:8C:D0:FE:F8:95:96:23
Authority key identifier: 3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
Certificate issuer: /CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Certificate serial: 01976F632542EE7B6822CF9B76D838F22EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
Manifest number: 0C77
Signing time: Sat 14 Jun 2025 17:00:57 +0000
Manifest this update: Sat 14 Jun 2025 17:00:57 +0000
Manifest next update: Sun 15 Jun 2025 17:00:57 +0000
Files and hashes: 1: PD9FAh1us0CkKy5d0fv3IaGmbWE.crl (hash: y1YOJjeQpz18e2/M9jd8FU7LmRYEDcYhJbor3APYnJY=)
2: x9hUxJfn47T_kDyiFQOIzJ-cz6A.roa (hash: xdaaD+GtntD/xfR79byZL40UTK4Nd3mN7SfVEUnzNx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:25:42:ee:7b:68:22:cf:9b:76:d8:38:f2:2e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c3f45021d6eb340a42b2e5dd1fbf721a1a66d61
Validity
Not Before: Jun 14 17:00:57 2025 GMT
Not After : Jun 15 17:00:57 2025 GMT
Subject: CN=bd294bd173eb2f335be84500198cd0fef8959623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:65:a6:e8:07:f9:d7:c2:23:4f:49:1e:bc:
7b:10:e8:37:b6:09:63:95:b6:1e:85:f0:3b:28:9d:
7e:04:70:17:ce:f7:a2:cf:ad:64:14:6f:d8:8a:18:
0f:9b:fb:fb:11:e6:25:05:f6:e9:01:e5:74:95:02:
6c:97:60:58:db:d4:c7:f6:d5:5c:2d:1c:d0:0d:8b:
e3:fa:54:00:45:4e:3b:1f:12:31:78:98:3d:b3:a4:
bc:7a:61:f0:19:4b:21:80:7d:68:9c:8a:df:f0:ba:
c0:ec:61:9c:6d:62:4e:96:e0:36:f0:3a:01:21:3d:
06:3b:c5:5d:6a:a4:0e:60:01:24:5e:e8:6a:ff:3a:
91:f8:78:aa:18:86:5a:39:1a:72:54:e0:c3:c0:f2:
16:44:49:24:ad:8e:b4:c0:bc:cc:a6:69:c4:d8:64:
89:26:4a:ff:05:1f:04:9f:8a:d8:01:b5:71:ef:fe:
31:17:82:d6:fc:32:ba:93:36:6b:19:f7:ee:2f:5a:
15:d9:88:f9:86:ad:0e:d9:4b:51:44:b4:7b:95:6b:
f9:45:1d:cd:27:9e:74:cd:12:08:23:b4:81:0f:35:
10:cf:6d:62:b1:f1:23:af:e4:88:b1:f6:2e:e7:6b:
ff:91:d7:36:bd:31:ce:4d:8f:5b:71:ab:a8:85:11:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:29:4B:D1:73:EB:2F:33:5B:E8:45:00:19:8C:D0:FE:F8:95:96:23
X509v3 Authority Key Identifier:
keyid:3C:3F:45:02:1D:6E:B3:40:A4:2B:2E:5D:D1:FB:F7:21:A1:A6:6D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PD9FAh1us0CkKy5d0fv3IaGmbWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/05257e-1e67-4158-8adb-47d6e4bae2cf/1/PD9FAh1us0CkKy5d0fv3IaGmbWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3f:09:09:d7:b0:df:0c:de:ec:33:ab:e3:6d:cd:8c:5d:1b:
b0:97:49:45:e8:c0:fc:b9:19:c0:51:bc:07:e2:df:58:e9:39:
d3:33:b1:1a:a0:3a:34:b5:b5:4c:6d:cf:45:7f:60:e0:54:0d:
00:e3:73:fc:cd:7b:41:c1:99:8a:da:ce:29:38:bc:95:4d:b2:
0e:27:5c:b5:82:c5:1a:ee:12:04:54:69:1d:5b:3e:80:11:01:
91:39:9f:8b:35:98:5d:08:2f:c4:f9:48:a7:8b:56:f8:e9:32:
f5:ec:87:5a:9c:49:43:a3:de:03:4a:31:1e:15:5a:19:12:bd:
4e:39:79:3e:a9:96:ad:80:39:65:a3:ff:69:ed:4b:0a:a7:ab:
c0:20:13:c0:7f:55:f6:4c:f1:11:5d:04:85:b7:58:a1:2c:8a:
ff:64:30:7f:79:f1:80:54:1e:e3:33:6e:d7:10:98:c2:51:c1:
cc:85:6e:e9:cb:65:af:87:20:19:9e:b9:f9:36:2f:db:e7:77:
20:4d:d8:ad:72:5d:57:e6:ca:65:e3:00:e8:d1:d1:c0:fc:f8:
21:c5:ba:4c:31:77:74:ca:42:81:bb:f7:b5:a2:5d:0f:e5:ed:
c0:42:1b:30:e6:c3:82:ff:20:f5:10:56:0c:84:d8:2e:0c:f7:
a3:33:c2:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYyVC7ntoIs+bdtg48i7cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjM2Y0NTAyMWQ2ZWIzNDBhNDJiMmU1ZGQxZmJmNzIxYTFh
NjZkNjEwHhcNMjUwNjE0MTcwMDU3WhcNMjUwNjE1MTcwMDU3WjAzMTEwLwYDVQQD
EyhiZDI5NGJkMTczZWIyZjMzNWJlODQ1MDAxOThjZDBmZWY4OTU5NjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgllpugH+dfCI09JHrx7EOg3tglj
lbYehfA7KJ1+BHAXzveiz61kFG/YihgPm/v7EeYlBfbpAeV0lQJsl2BY29TH9tVc
LRzQDYvj+lQARU47HxIxeJg9s6S8emHwGUshgH1onIrf8LrA7GGcbWJOluA28DoB
IT0GO8VdaqQOYAEkXuhq/zqR+HiqGIZaORpyVODDwPIWREkkrY60wLzMpmnE2GSJ
Jkr/BR8En4rYAbVx7/4xF4LW/DK6kzZrGffuL1oV2Yj5hq0O2UtRRLR7lWv5RR3N
J550zRIII7SBDzUQz21isfEjr+SIsfYu52v/kdc2vTHOTY9bcauohREj+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0pS9Fz6y8zW+hFABmM0P74lZYjMB8GA1UdIwQY
MBaAFDw/RQIdbrNApCsuXdH79yGhpm1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wNTI1N2UtMWU2Ny00MTU4LThhZGIt
NDdkNmU0YmFlMmNmLzEvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wNTI1N2UtMWU2Ny00MTU4LThhZGItNDdkNmU0YmFlMmNm
LzEvUEQ5RkFoMXVzMENrS3k1ZDBmdjNJYUdtYldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWD8JCdew
3wze7DOr423NjF0bsJdJRejA/LkZwFG8B+LfWOk50zOxGqA6NLW1TG3PRX9g4FQN
AONz/M17QcGZitrOKTi8lU2yDidctYLFGu4SBFRpHVs+gBEBkTmfizWYXQgvxPlI
p4tW+Oky9eyHWpxJQ6PeA0oxHhVaGRK9Tjl5PqmWrYA5ZaP/ae1LCqerwCATwH9V
9kzxEV0EhbdYoSyK/2Qwf3nxgFQe4zNu1xCYwlHBzIVu6ctlr4cgGZ65+TYv2+d3
IE3YrXJdV+bKZeMA6NHRwPz4IcW6TDF3dMpCgbv3taJdD+XtwEIbMObDgv8g9RBW
DITYLgz3ozPClw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:24:31 2025 by rpki-client