Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: Tjxt2HcQNXOgNvRpcPh5P9Ds8b0gAoXzYeP698KEsIE=
Subject key identifier: 91:B1:51:89:C5:72:77:EE:CB:79:48:CA:DF:D6:03:17:46:70:3B:7B
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 01976F632B7C22DD2FFA869DF4123A05CB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 17:00:59 +0000
Manifest this update: Sat 14 Jun 2025 17:00:59 +0000
Manifest next update: Sun 15 Jun 2025 17:00:59 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: BjI71a75JUhyCBTL9XYqAFegAaxhcUpoYxgBYaxcOvk=)
2: aUaxmc4yn8DWQgssucohLW2GTOs.roa (hash: SOdn4BM+lJeHsX2EdSBfNJjI/S1sYp7gdR+GcCunEpg=)
3: v8c3Ww_Eihi-LvyDOVvXBJwo9F8.roa (hash: 0sTmm1OvDNHW8cfRGw9gOppSFK5VfYqSrXVw8T0yJBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:2b:7c:22:dd:2f:fa:86:9d:f4:12:3a:05:cb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Jun 14 17:00:59 2025 GMT
Not After : Jun 15 17:00:59 2025 GMT
Subject: CN=91b15189c57277eecb7948cadfd6031746703b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:e8:5b:2d:e8:83:f0:b9:fb:8e:27:bd:e4:
a3:39:26:ff:fd:49:2e:1b:ba:3a:ed:46:e7:21:a3:
b9:ac:75:60:fa:f5:ae:af:50:25:a6:08:c4:19:1a:
4d:8b:cb:c5:03:0f:01:6e:c1:2d:83:42:67:35:33:
b9:03:c8:07:bc:9a:e0:ee:cf:ee:49:e1:06:21:8b:
7d:1d:2c:a8:22:0e:f6:45:cf:71:b9:54:a5:b3:cb:
c9:00:8e:09:14:22:d8:47:07:a2:77:bc:d3:b9:98:
79:36:79:b5:2c:4a:37:36:6f:21:a8:84:c7:d8:3c:
9b:d5:95:0f:89:c6:d9:99:41:5b:ae:99:a8:b5:86:
0e:89:93:b2:51:2c:12:94:0c:86:13:a6:fc:1d:10:
25:47:0e:2e:f5:89:58:c5:ae:a9:f8:fc:59:01:d8:
c2:8b:ef:3b:97:a3:81:90:62:66:bb:97:84:ec:0e:
b7:57:c5:cc:cb:30:d3:a2:ed:12:58:7a:f6:4f:4b:
81:e2:41:e1:72:43:1a:32:28:ce:cb:75:ad:2d:74:
30:ae:09:72:e1:5f:c4:a1:87:8e:00:5d:28:e3:cf:
90:49:da:b3:aa:9b:54:87:f0:eb:cd:53:ba:14:36:
17:64:c7:6f:d4:f1:94:76:70:3e:5f:be:a0:6d:c8:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B1:51:89:C5:72:77:EE:CB:79:48:CA:DF:D6:03:17:46:70:3B:7B
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1e:a5:7e:fb:e9:21:29:f6:ae:1a:c7:22:4b:13:0a:98:1c:
41:9c:13:4c:fd:73:51:e3:fd:52:ff:b5:2a:4f:c2:2a:5e:e2:
8f:38:b9:4e:4a:82:6d:12:35:15:0f:1b:db:89:bb:ac:ef:5c:
14:fa:fd:67:10:63:3e:ad:90:fa:ed:9d:7b:b5:32:35:7a:d5:
aa:81:67:57:64:d6:7c:50:39:b8:fd:c1:39:79:16:37:f6:61:
39:1c:00:12:31:5d:41:26:dc:dd:2a:c8:6b:28:f8:07:5a:00:
aa:83:2b:96:89:ed:a3:4d:9e:b4:06:c2:06:13:e1:22:13:9d:
68:5d:32:92:40:cb:0e:de:68:96:f1:2d:72:6d:35:44:70:89:
1a:ce:8d:d6:a4:fb:37:97:d2:9e:98:e0:0b:e0:01:7e:94:24:
e1:92:07:00:d0:85:ae:81:14:a0:e0:06:ba:38:fd:f5:c7:c7:
66:59:ab:6e:97:fd:6c:6f:9b:eb:ee:c9:51:bf:d2:35:6b:5f:
65:4a:55:34:ac:7e:8d:01:d2:e1:f6:d2:0e:dd:fe:57:bb:4e:
0d:43:ab:62:3d:e8:71:a3:bd:b7:aa:bf:31:14:6f:77:d7:4d:
83:84:3e:7e:73:07:54:38:42:4f:e8:e7:ad:a0:1b:09:77:38:
4e:28:f0:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYyt8It0v+oad9BI6BctrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTFkYTMyNzYyYTZmOWMxMjZkNjNiYTcwNWQ2MmMwNTBi
ODQ4NGUwHhcNMjUwNjE0MTcwMDU5WhcNMjUwNjE1MTcwMDU5WjAzMTEwLwYDVQQD
Eyg5MWIxNTE4OWM1NzI3N2VlY2I3OTQ4Y2FkZmQ2MDMxNzQ2NzAzYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNToWy3og/C5+44nveSjOSb//Uku
G7o67UbnIaO5rHVg+vWur1AlpgjEGRpNi8vFAw8BbsEtg0JnNTO5A8gHvJrg7s/u
SeEGIYt9HSyoIg72Rc9xuVSls8vJAI4JFCLYRweid7zTuZh5Nnm1LEo3Nm8hqITH
2Dyb1ZUPicbZmUFbrpmotYYOiZOyUSwSlAyGE6b8HRAlRw4u9YlYxa6p+PxZAdjC
i+87l6OBkGJmu5eE7A63V8XMyzDTou0SWHr2T0uB4kHhckMaMijOy3WtLXQwrgly
4V/EoYeOAF0o48+QSdqzqptUh/DrzVO6FDYXZMdv1PGUdnA+X76gbciEiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGxUYnFcnfuy3lIyt/WAxdGcDt7MB8GA1UdIwQY
MBaAFN5R2jJ2Km+cEm1junBdYsBQuEhOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzBkYjQtNjJlYS00OWRiLTgzMTkt
Y2RmYTYwMTIyNjkwLzEvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mNzBkYjQtNjJlYS00OWRiLTgzMTktY2RmYTYwMTIyNjkw
LzEvM2xIYU1uWXFiNXdTYldPNmNGMWl3RkM0U0U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcx6lfvvp
ISn2rhrHIksTCpgcQZwTTP1zUeP9Uv+1Kk/CKl7ijzi5TkqCbRI1FQ8b24m7rO9c
FPr9ZxBjPq2Q+u2de7UyNXrVqoFnV2TWfFA5uP3BOXkWN/ZhORwAEjFdQSbc3SrI
ayj4B1oAqoMrlonto02etAbCBhPhIhOdaF0ykkDLDt5olvEtcm01RHCJGs6N1qT7
N5fSnpjgC+ABfpQk4ZIHANCFroEUoOAGujj99cfHZlmrbpf9bG+b6+7JUb/SNWtf
ZUpVNKx+jQHS4fbSDt3+V7tODUOrYj3ocaO9t6q/MRRvd9dNg4Q+fnMHVDhCT+jn
raAbCXc4Tijwjw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:28 2025 by rpki-client