Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: ghX4qeZ1Y+JJpOAZDneYr79ooKHvmaS+1ZaBdQK/tiM=
Subject key identifier: 8B:4F:E8:F8:9B:AA:57:00:B2:2D:36:9C:E0:3C:CD:C1:DC:53:F5:8B
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 0197699766039344E3A0039FC026D6148F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: A1
Signing time: Fri 13 Jun 2025 14:00:19 +0000
Manifest this update: Fri 13 Jun 2025 14:00:19 +0000
Manifest next update: Sat 14 Jun 2025 14:00:19 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: IG3aP5BA5rpBN6iJDZmWFt+TyjAIa8UJmOV4LchhsRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:66:03:93:44:e3:a0:03:9f:c0:26:d6:14:8f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Jun 13 14:00:19 2025 GMT
Not After : Jun 14 14:00:19 2025 GMT
Subject: CN=8b4fe8f89baa5700b22d369ce03ccdc1dc53f58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:e9:12:2f:9c:95:53:06:fe:9f:6b:8a:8d:
85:70:bb:9b:cd:54:85:ee:0f:80:1e:63:9c:26:1e:
af:a3:4d:43:78:60:b4:c8:f7:2b:11:8f:6e:30:6a:
8c:ea:9a:53:8b:ff:e2:51:60:53:ec:a5:71:88:e8:
81:3d:c1:03:7d:f7:81:cd:83:6b:89:7b:0e:81:d9:
cf:00:b1:75:d3:ed:0a:20:35:e9:2a:41:ca:cf:da:
46:74:91:03:80:33:ca:ad:5e:69:41:b0:58:a3:30:
72:55:8b:d4:2e:69:99:3d:98:fd:32:bf:d9:1b:08:
74:63:71:12:4e:6d:8c:68:97:e1:a0:51:c4:61:1a:
14:1f:85:b3:84:49:f4:c5:2e:0e:11:04:4f:10:18:
45:c4:32:69:20:e5:1c:10:66:26:d9:ef:46:de:97:
4c:40:31:69:05:cd:bf:da:56:65:c5:8f:1a:9d:b9:
cc:ff:f2:fd:67:cf:33:4a:04:70:93:26:85:34:c2:
a6:be:f6:5c:e0:51:2d:5f:a3:3d:35:c2:86:7d:41:
7f:a6:ea:de:7e:32:88:a0:13:d7:dd:a6:79:5e:03:
bd:03:ad:d8:f3:26:55:fa:64:89:21:fd:2f:25:9a:
6b:7b:c7:88:04:32:28:67:eb:98:88:a7:98:b2:3b:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4F:E8:F8:9B:AA:57:00:B2:2D:36:9C:E0:3C:CD:C1:DC:53:F5:8B
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:01:54:6f:39:47:b9:cd:2d:df:9d:23:87:17:12:66:b8:45:
77:6c:66:ae:f9:49:ae:8b:14:f4:1c:a6:0c:ca:f2:b8:0b:0e:
de:67:e8:3d:18:86:5a:93:c8:90:2b:96:de:f2:2f:e7:19:c2:
35:75:82:d5:59:c8:42:8c:ed:58:a0:dc:8f:d9:f2:fb:6c:8c:
f0:32:93:87:c7:50:c1:f7:8f:0c:a4:ee:53:a8:85:29:77:de:
86:31:e5:0d:33:be:44:f2:c9:58:69:ef:09:4b:b2:b4:5d:6f:
03:cc:15:6f:a0:0f:e5:9e:c8:82:c1:ca:cf:6c:86:e1:ea:28:
37:46:00:1a:a7:a6:f7:3b:b6:64:df:0b:35:03:bd:d5:2f:1c:
d0:4f:48:3c:9a:8c:31:05:81:36:6e:86:09:64:32:3e:67:d6:
72:76:05:a9:fc:11:fb:e2:10:93:b8:fe:a1:c4:00:3f:0e:d5:
a3:d9:a3:8f:6c:d3:de:be:27:da:51:3d:e0:25:00:29:e2:a2:
e9:7a:02:bc:1c:b5:78:37:52:be:ac:88:6f:bd:a0:7c:23:c9:
71:63:b3:f7:df:74:1b:b6:9f:65:b9:21:86:0b:73:3c:a6:4a:
49:a5:cf:07:e2:2f:85:40:36:ac:06:cf:5d:ff:f1:2c:da:e5:
ef:88:68:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl2YDk0TjoAOfwCbWFI93MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZmM2Y2RmZTE5NmQ1YjM5ZDJlYTYwZTkwYzk1ZGI3MDQ0
NWQ5YjkwHhcNMjUwNjEzMTQwMDE5WhcNMjUwNjE0MTQwMDE5WjAzMTEwLwYDVQQD
Eyg4YjRmZThmODliYWE1NzAwYjIyZDM2OWNlMDNjY2RjMWRjNTNmNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoADpEi+clVMG/p9rio2FcLubzVSF
7g+AHmOcJh6vo01DeGC0yPcrEY9uMGqM6ppTi//iUWBT7KVxiOiBPcEDffeBzYNr
iXsOgdnPALF10+0KIDXpKkHKz9pGdJEDgDPKrV5pQbBYozByVYvULmmZPZj9Mr/Z
Gwh0Y3ESTm2MaJfhoFHEYRoUH4WzhEn0xS4OEQRPEBhFxDJpIOUcEGYm2e9G3pdM
QDFpBc2/2lZlxY8anbnM//L9Z88zSgRwkyaFNMKmvvZc4FEtX6M9NcKGfUF/pure
fjKIoBPX3aZ5XgO9A63Y8yZV+mSJIf0vJZpre8eIBDIoZ+uYiKeYsjsoHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItP6PibqlcAsi02nOA8zcHcU/WLMB8GA1UdIwQY
MBaAFD/8bN/hltWznS6mDpDJXbcERdm5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMt
MTU1YjM5ZTA3NmMyLzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMtMTU1YjM5ZTA3NmMy
LzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAFUbzlH
uc0t350jhxcSZrhFd2xmrvlJrosU9BymDMryuAsO3mfoPRiGWpPIkCuW3vIv5xnC
NXWC1VnIQoztWKDcj9ny+2yM8DKTh8dQwfePDKTuU6iFKXfehjHlDTO+RPLJWGnv
CUuytF1vA8wVb6AP5Z7IgsHKz2yG4eooN0YAGqem9zu2ZN8LNQO91S8c0E9IPJqM
MQWBNm6GCWQyPmfWcnYFqfwR++IQk7j+ocQAPw7Vo9mjj2zT3r4n2lE94CUAKeKi
6XoCvBy1eDdSvqyIb72gfCPJcWOz9990G7afZbkhhgtzPKZKSaXPB+IvhUA2rAbP
Xf/xLNrl74homg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:34 2025 by rpki-client