Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
File: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft (raw, json)
Hash identifier: +00U1u5G4Buu7dCz0iq5AIzsPemMOsIyrh24rDcU0Zc=
Subject key identifier: D4:47:4B:B8:33:59:EC:62:2D:85:56:3D:6E:F7:2C:FE:BE:85:03:98
Authority key identifier: A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
Certificate issuer: /CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Certificate serial: 01976DE2BE455535AB335138AA1AC58D3227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
Manifest number: 0C47
Signing time: Sat 14 Jun 2025 10:01:05 +0000
Manifest this update: Sat 14 Jun 2025 10:01:05 +0000
Manifest next update: Sun 15 Jun 2025 10:01:05 +0000
Files and hashes: 1: Z94Es0pJzdNNFG_pvtxbCrg0w94.roa (hash: uXR+OJPAQJAMUd3RxLmxlHyff75ZTmhyAoVDvTJyktM=)
2: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl (hash: ExC1EzNrn7r7dsMxCFIraUC12KDVxfG2XLrRX/Koxvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:be:45:55:35:ab:33:51:38:aa:1a:c5:8d:32:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Validity
Not Before: Jun 14 10:01:05 2025 GMT
Not After : Jun 15 10:01:05 2025 GMT
Subject: CN=d4474bb83359ec622d85563d6ef72cfebe850398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:79:bc:83:6c:ee:de:da:60:fd:91:63:d8:77:
42:34:f7:0b:24:b2:bc:00:11:4e:9d:32:1e:54:07:
c3:e5:39:54:06:ae:b5:ba:fc:f9:41:73:3f:d1:cb:
1f:9b:b5:36:5d:92:cb:6e:c0:64:0c:af:f1:a4:3b:
58:7b:50:3d:4b:ee:30:e2:d3:e9:9b:f5:94:8d:51:
c9:3a:8a:71:bb:ab:dd:82:44:d8:5e:58:40:19:4a:
ac:3a:7d:86:99:08:53:b0:7f:79:e1:b6:f9:56:dc:
c9:54:13:05:5f:9a:ac:4e:5f:56:c0:14:32:c3:f8:
74:87:44:eb:35:3d:9f:b2:50:4e:4d:cf:84:c6:78:
50:a2:bc:e9:ee:b4:6f:af:ea:2d:dc:ba:68:69:34:
f6:40:e0:ea:4b:90:09:7b:58:ba:54:b7:e8:bf:5c:
09:58:13:bf:2e:ac:12:ec:ae:e4:5f:51:33:ca:ed:
e0:1d:76:a6:0d:3f:02:5e:4b:ee:8b:be:9c:2a:17:
ab:93:6c:f9:dd:96:23:a0:a7:38:69:5b:09:5d:7e:
1a:97:4d:e6:50:3b:b1:84:28:74:59:fb:29:8a:0d:
40:16:4d:bb:9d:51:ce:d8:1c:c8:1d:b7:69:36:4a:
68:24:68:59:8b:66:6d:a8:3c:14:08:dd:d9:c2:1a:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:47:4B:B8:33:59:EC:62:2D:85:56:3D:6E:F7:2C:FE:BE:85:03:98
X509v3 Authority Key Identifier:
keyid:A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:59:82:a1:a6:29:56:bd:70:6c:b3:a5:5f:db:65:d1:1b:f0:
73:24:0e:f8:e5:2a:7f:25:e6:15:66:ef:15:4c:1a:05:a3:90:
f9:54:77:01:13:4d:1c:a7:6d:a5:c9:a6:d0:ce:5e:54:7f:78:
28:40:62:be:3b:fe:e8:44:c4:49:a3:9b:2b:cb:1a:16:78:86:
57:ed:eb:49:14:6d:86:65:05:15:be:54:24:85:36:a9:f2:8a:
95:85:8e:bc:49:d2:85:15:a0:b2:b0:46:7e:8f:b6:79:c3:b9:
68:4a:ef:f6:64:85:85:fa:68:7e:2c:89:99:00:5d:71:1f:24:
1c:13:4c:22:72:11:be:4a:e8:77:fb:57:7e:75:d7:91:08:da:
cc:8c:8b:d3:70:0e:16:77:fa:06:ce:fd:1e:3a:d5:9c:76:8f:
ce:90:c5:1c:26:bd:1b:80:d2:11:30:c9:d1:54:47:13:44:b8:
17:aa:75:ab:89:d9:7a:bb:0b:68:a0:52:92:29:06:e3:60:5d:
d1:68:16:be:71:d4:fe:3d:d4:36:a6:6e:a8:e1:c2:4d:45:e2:
b1:8a:64:75:13:ff:db:59:2d:90:35:b5:15:32:c6:dc:14:56:
dc:6b:99:fa:53:7e:d8:7d:d8:45:b1:08:58:0d:63:ac:6a:3c:
69:18:a6:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdt4r5FVTWrM1E4qhrFjTInMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NzMyNWU0OTVjYjAxNTAyMDNiNzlmMjQ2ZjRjZDRjMGZl
YzI0ZmYwHhcNMjUwNjE0MTAwMTA1WhcNMjUwNjE1MTAwMTA1WjAzMTEwLwYDVQQD
EyhkNDQ3NGJiODMzNTllYzYyMmQ4NTU2M2Q2ZWY3MmNmZWJlODUwMzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Hm8g2zu3tpg/ZFj2HdCNPcLJLK8
ABFOnTIeVAfD5TlUBq61uvz5QXM/0csfm7U2XZLLbsBkDK/xpDtYe1A9S+4w4tPp
m/WUjVHJOopxu6vdgkTYXlhAGUqsOn2GmQhTsH954bb5VtzJVBMFX5qsTl9WwBQy
w/h0h0TrNT2fslBOTc+ExnhQorzp7rRvr+ot3LpoaTT2QODqS5AJe1i6VLfov1wJ
WBO/LqwS7K7kX1Ezyu3gHXamDT8CXkvui76cKherk2z53ZYjoKc4aVsJXX4al03m
UDuxhCh0Wfspig1AFk27nVHO2BzIHbdpNkpoJGhZi2ZtqDwUCN3ZwhrvWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRHS7gzWexiLYVWPW73LP6+hQOYMB8GA1UdIwQY
MBaAFKdzJeSVywFQIDt58kb0zUwP7CT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iZjg0MTEtNjk2MC00Y2VmLTkxZjkt
MTNiNmE2ZDcxYTQxLzEvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9iZjg0MTEtNjk2MC00Y2VmLTkxZjktMTNiNmE2ZDcxYTQx
LzEvcDNNbDVKWExBVkFnTzNueVJ2VE5UQV9zSlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArVmCoaYp
Vr1wbLOlX9tl0RvwcyQO+OUqfyXmFWbvFUwaBaOQ+VR3ARNNHKdtpcmm0M5eVH94
KEBivjv+6ETESaObK8saFniGV+3rSRRthmUFFb5UJIU2qfKKlYWOvEnShRWgsrBG
fo+2ecO5aErv9mSFhfpofiyJmQBdcR8kHBNMInIRvkrod/tXfnXXkQjazIyL03AO
Fnf6Bs79HjrVnHaPzpDFHCa9G4DSETDJ0VRHE0S4F6p1q4nZersLaKBSkikG42Bd
0WgWvnHU/j3UNqZuqOHCTUXisYpkdRP/21ktkDW1FTLG3BRW3GuZ+lN+2H3YRbEI
WA1jrGo8aRimpQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:17:57 2025 by rpki-client