Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
File: 3keU2fyrI-wF3d1QSKP8cgQAKio.mft (raw, json)
Hash identifier: sTeP01irOtzGXomGHzPfCLlOYr7UC1cE78GWlWitRiA=
Subject key identifier: 81:91:B1:F0:9F:E5:8D:8B:7B:B1:F3:F0:78:54:B9:37:EB:0C:21:6C
Authority key identifier: DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
Certificate issuer: /CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Certificate serial: 01976CCFF469A39B0A763957BB4315E38E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
Manifest number: 0EBE
Signing time: Sat 14 Jun 2025 05:00:56 +0000
Manifest this update: Sat 14 Jun 2025 05:00:56 +0000
Manifest next update: Sun 15 Jun 2025 05:00:56 +0000
Files and hashes: 1: 3keU2fyrI-wF3d1QSKP8cgQAKio.crl (hash: fZX36WeWBGyZh82TKHLCmKInaGbql0d6YCJDlsxovR0=)
2: ZK9gU4FBN8KUQTPHGhgGaXPIWjk.roa (hash: YFHfAWvmuV1pyKRAlUfEUWxi+ZLKrTZD/d9TC0Av1JQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:f4:69:a3:9b:0a:76:39:57:bb:43:15:e3:8e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Validity
Not Before: Jun 14 05:00:56 2025 GMT
Not After : Jun 15 05:00:56 2025 GMT
Subject: CN=8191b1f09fe58d8b7bb1f3f07854b937eb0c216c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:ba:b5:e6:cf:67:97:55:5e:5d:01:34:2d:
ce:ac:65:63:2f:8d:79:2a:3f:78:11:8a:db:87:c2:
c4:ba:17:c7:ef:b4:7e:36:b4:1b:f4:98:26:df:b2:
96:be:88:25:3f:e1:14:71:15:74:ee:93:a9:fb:fa:
73:86:44:40:04:c6:70:53:47:8e:f3:bb:c4:28:63:
a1:ed:a4:75:43:64:94:bb:55:e0:34:1a:65:53:76:
27:06:9f:be:f1:c5:6a:cf:36:94:34:44:1f:9f:f1:
1c:71:e2:e0:5e:8c:d5:0a:ba:04:0d:6c:28:2b:f1:
dd:ed:e3:c0:9f:6a:48:f5:dd:6d:a1:8e:d0:b6:87:
8c:9b:32:3f:1a:7c:e9:bc:4b:e3:83:47:ca:9a:e2:
48:62:a9:d5:fb:e2:2e:7e:98:2b:18:d2:c6:66:f1:
e2:21:a5:af:cd:93:50:14:e6:3b:9a:19:2d:f3:6e:
62:96:c7:e2:0c:48:23:a6:fa:33:29:9f:e7:e7:8b:
3a:b1:c1:98:d3:82:70:b6:a3:17:84:d9:2f:b8:79:
8b:f9:4e:8f:2b:f1:fa:4d:6b:16:8f:39:21:c3:48:
f1:d2:02:79:34:13:87:2b:01:ce:f3:14:e4:40:e1:
5f:1d:3b:bc:eb:0e:a2:a1:55:91:6f:55:f9:29:81:
24:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:91:B1:F0:9F:E5:8D:8B:7B:B1:F3:F0:78:54:B9:37:EB:0C:21:6C
X509v3 Authority Key Identifier:
keyid:DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c4:3f:ab:04:29:86:06:0a:a3:d8:a9:55:c9:0f:05:1d:cd:
03:d1:da:e8:77:37:9a:08:27:e9:90:04:3b:76:97:75:8e:9f:
db:02:c9:b4:88:15:a8:28:9c:01:3b:00:bc:1f:1a:ef:72:b3:
e6:e6:c1:ef:e6:85:ff:d8:58:07:34:a8:d0:63:84:c1:fa:c6:
50:89:93:5d:ef:a4:fa:6e:ad:2a:c8:b9:c5:5f:11:7b:ba:38:
eb:89:65:a5:4d:69:82:b5:10:1b:70:67:ee:4f:3d:a4:1e:b1:
54:0e:70:53:5d:9c:ea:5a:e9:66:20:d9:b5:1e:b2:c4:08:f0:
c6:8d:4b:eb:f5:a3:b4:79:b3:cb:e7:e6:a2:f8:44:a3:22:66:
cd:70:20:37:3b:46:da:12:6d:aa:2f:1d:5c:99:5e:cc:79:7f:
7f:37:79:ba:82:d7:7f:f6:e3:89:4f:92:15:42:b1:09:02:eb:
62:a0:16:8c:aa:8f:b7:5d:f6:59:ea:63:d0:72:82:3f:16:89:
c4:4c:68:f1:94:ea:b7:79:29:bf:54:da:69:e8:c2:85:c4:c5:
b3:b6:22:3a:77:1e:6f:1f:01:40:ab:50:c9:16:60:c6:dc:dc:
20:3f:65:0f:d1:f4:12:cd:58:f7:d4:86:29:01:c2:51:8d:c7:
f4:8a:28:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz/Rpo5sKdjlXu0MV445qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNDc5NGQ5ZmNhYjIzZWMwNWRkZGQ1MDQ4YTNmYzcyMDQw
MDJhMmEwHhcNMjUwNjE0MDUwMDU2WhcNMjUwNjE1MDUwMDU2WjAzMTEwLwYDVQQD
Eyg4MTkxYjFmMDlmZTU4ZDhiN2JiMWYzZjA3ODU0YjkzN2ViMGMyMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydW6tebPZ5dVXl0BNC3OrGVjL415
Kj94EYrbh8LEuhfH77R+NrQb9Jgm37KWvoglP+EUcRV07pOp+/pzhkRABMZwU0eO
87vEKGOh7aR1Q2SUu1XgNBplU3YnBp++8cVqzzaUNEQfn/EcceLgXozVCroEDWwo
K/Hd7ePAn2pI9d1toY7QtoeMmzI/GnzpvEvjg0fKmuJIYqnV++IufpgrGNLGZvHi
IaWvzZNQFOY7mhkt825ilsfiDEgjpvozKZ/n54s6scGY04JwtqMXhNkvuHmL+U6P
K/H6TWsWjzkhw0jx0gJ5NBOHKwHO8xTkQOFfHTu86w6ioVWRb1X5KYEkOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGRsfCf5Y2Le7Hz8HhUuTfrDCFsMB8GA1UdIwQY
MBaAFN5HlNn8qyPsBd3dUEij/HIEACoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2tlVTJmeXJJLXdGM2QxUVNLUDhjZ1FBS2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wODAwZmUtOWJkMi00ODhiLThjNDIt
ZjAxMTI5Mzk1M2Y1LzEvM2tlVTJmeXJJLXdGM2QxUVNLUDhjZ1FBS2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wODAwZmUtOWJkMi00ODhiLThjNDItZjAxMTI5Mzk1M2Y1
LzEvM2tlVTJmeXJJLXdGM2QxUVNLUDhjZ1FBS2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsQ/qwQp
hgYKo9ipVckPBR3NA9Ha6Hc3mggn6ZAEO3aXdY6f2wLJtIgVqCicATsAvB8a73Kz
5ubB7+aF/9hYBzSo0GOEwfrGUImTXe+k+m6tKsi5xV8Re7o464llpU1pgrUQG3Bn
7k89pB6xVA5wU12c6lrpZiDZtR6yxAjwxo1L6/WjtHmzy+fmovhEoyJmzXAgNztG
2hJtqi8dXJlezHl/fzd5uoLXf/bjiU+SFUKxCQLrYqAWjKqPt132Wepj0HKCPxaJ
xExo8ZTqt3kpv1TaaejChcTFs7YiOncebx8BQKtQyRZgxtzcID9lD9H0Es1Y99SG
KQHCUY3H9IoocA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:11:12 2025 by rpki-client