Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
File: sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json)
Hash identifier: ff/nl4vmUgk1I/WIxraXoBPYC1r7mhCuXQTCF7wpWfA=
Subject key identifier: D9:C3:8E:4A:3A:1E:78:52:29:C1:34:B3:06:81:AF:56:C7:8F:66:0A
Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
Certificate issuer: /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Certificate serial: 01976C6265D082E90077F303FF9430336636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 03:01:17 +0000
Manifest this update: Sat 14 Jun 2025 03:01:17 +0000
Manifest next update: Sun 15 Jun 2025 03:01:17 +0000
Files and hashes: 1: IO0LvnAOcWauTMBpIRocATcgbnc.roa (hash: X7MgkZkBpVtr92LvTB/v/8FDDjBqTMenme65NutXS6Q=)
2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: Fpq32mf64Kk33+ShCbKTT5j9uJuTeRCcjA0psOBaNDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:65:d0:82:e9:00:77:f3:03:ff:94:30:33:66:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Validity
Not Before: Jun 14 03:01:17 2025 GMT
Not After : Jun 15 03:01:17 2025 GMT
Subject: CN=d9c38e4a3a1e785229c134b30681af56c78f660a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b5:30:d9:53:76:da:54:6d:d7:6c:b7:cb:35:
f5:ae:8b:b9:89:17:f7:60:ba:4c:1e:cc:80:e9:2a:
ec:88:af:96:14:a2:ca:cd:9f:e9:78:e9:07:cc:96:
83:51:02:35:b5:90:ff:39:a5:00:a2:03:b5:9d:e7:
89:7f:b1:95:23:f3:22:71:dd:64:03:80:04:02:5e:
58:95:7b:c8:be:68:dd:8e:79:03:e9:a9:c1:52:81:
c0:72:d7:47:32:f0:1d:54:64:a5:b9:8a:c2:c8:60:
39:42:41:12:77:dc:86:db:7b:e2:c4:17:fc:d9:1a:
72:bd:30:4d:aa:43:62:18:2e:13:f7:f4:ae:22:53:
ec:bb:93:f0:58:39:04:5d:ee:52:0f:63:e5:49:d5:
55:60:d6:70:a7:cf:d7:89:68:ce:60:1f:24:00:83:
67:d6:55:ef:c2:fa:e9:4a:0d:9e:a6:68:e8:f2:b4:
2e:68:57:d6:fb:02:cf:dc:19:29:b2:bd:36:0c:a1:
13:62:30:9d:2f:d1:03:ce:b3:0c:8c:cd:bf:62:be:
31:16:03:97:bd:4c:78:3c:b5:27:c8:3f:df:f7:15:
c1:67:44:74:96:81:f9:b5:35:b9:63:d3:fa:61:ef:
bd:12:89:cd:1f:0f:af:c1:49:7b:6f:da:b4:60:52:
ca:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C3:8E:4A:3A:1E:78:52:29:C1:34:B3:06:81:AF:56:C7:8F:66:0A
X509v3 Authority Key Identifier:
keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ff:f1:63:62:94:e5:23:a4:fd:7f:75:1d:a9:69:82:7b:ed:
16:1d:67:27:73:58:e1:dd:17:1e:32:9b:29:ca:56:b6:91:ed:
2e:fe:3e:32:4c:b6:9b:57:22:ba:b8:22:04:44:d0:d7:35:a0:
51:e8:e1:92:21:6c:ec:34:03:0f:62:e4:af:b5:b5:40:98:e7:
e9:18:2b:e7:3f:41:70:9e:75:8a:03:f1:54:8f:0f:10:06:c3:
9f:94:7b:2a:e0:38:fa:38:1b:b9:85:e4:7c:ba:e3:da:16:3e:
db:f2:95:ec:47:7d:ba:84:33:5c:69:e1:17:f8:d9:74:18:0e:
fc:0f:59:26:18:18:1f:66:a3:dd:2d:4c:88:62:e1:a3:95:b1:
46:07:be:cf:86:6e:3f:52:7a:ec:56:bf:00:77:94:12:45:03:
9c:82:4e:8f:43:91:92:7f:aa:e7:27:c7:e4:07:c2:63:6c:3e:
b2:c4:5e:a7:51:65:52:b2:c0:07:95:b6:06:d2:d8:08:dd:10:
aa:ed:a3:b9:76:75:6a:8e:fe:5a:6b:b6:ac:4a:ec:4a:6b:69:
22:94:ae:dd:ca:f3:ad:8f:1d:13:42:d2:96:a6:f4:77:08:da:
fe:68:6b:83:44:5c:b0:de:9c:54:de:26:d5:70:fb:3a:ea:3f:
57:f1:89:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYmXQgukAd/MD/5QwM2Y2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYWRmMDVhZmVmNmY2NWZhMTlhNjFjMzBhZTRmYjExYzdj
ZjI1YjYwHhcNMjUwNjE0MDMwMTE3WhcNMjUwNjE1MDMwMTE3WjAzMTEwLwYDVQQD
EyhkOWMzOGU0YTNhMWU3ODUyMjljMTM0YjMwNjgxYWY1NmM3OGY2NjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47Uw2VN22lRt12y3yzX1rou5iRf3
YLpMHsyA6SrsiK+WFKLKzZ/peOkHzJaDUQI1tZD/OaUAogO1neeJf7GVI/Micd1k
A4AEAl5YlXvIvmjdjnkD6anBUoHActdHMvAdVGSluYrCyGA5QkESd9yG23vixBf8
2RpyvTBNqkNiGC4T9/SuIlPsu5PwWDkEXe5SD2PlSdVVYNZwp8/XiWjOYB8kAINn
1lXvwvrpSg2epmjo8rQuaFfW+wLP3Bkpsr02DKETYjCdL9EDzrMMjM2/Yr4xFgOX
vUx4PLUnyD/f9xXBZ0R0loH5tTW5Y9P6Ye+9EonNHw+vwUl7b9q0YFLK8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnDjko6HnhSKcE0swaBr1bHj2YKMB8GA1UdIwQY
MBaAFLCt8Fr+9vZfoZphwwrk+xHHzyW2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDk1OWItZDc5Yi00MmRjLWI4OTMt
NWYyZDBlMmFlNzE0LzEvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS83MDk1OWItZDc5Yi00MmRjLWI4OTMtNWYyZDBlMmFlNzE0
LzEvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAv/xY2KU
5SOk/X91HalpgnvtFh1nJ3NY4d0XHjKbKcpWtpHtLv4+Mky2m1ciurgiBETQ1zWg
UejhkiFs7DQDD2Lkr7W1QJjn6Rgr5z9BcJ51igPxVI8PEAbDn5R7KuA4+jgbuYXk
fLrj2hY+2/KV7Ed9uoQzXGnhF/jZdBgO/A9ZJhgYH2aj3S1MiGLho5WxRge+z4Zu
P1J67Fa/AHeUEkUDnIJOj0ORkn+q5yfH5AfCY2w+ssRep1FlUrLAB5W2BtLYCN0Q
qu2juXZ1ao7+Wmu2rErsSmtpIpSu3crzrY8dE0LSlqb0dwja/mhrg0RcsN6cVN4m
1XD7Ouo/V/GJzw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:52 2025 by rpki-client