Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: Ce8ajq3rfMQJWa5YJLekZ+XCMOq8nIsdlpcnF7Z5rks=
Subject key identifier: 4F:F0:2A:D8:C7:CE:69:42:1F:CA:8F:4B:AC:3A:CD:B4:11:67:9C:F6
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 01976D06DBC13A84AF8AC785EBA297E80895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 0554
Signing time: Sat 14 Jun 2025 06:00:55 +0000
Manifest this update: Sat 14 Jun 2025 06:00:55 +0000
Manifest next update: Sun 15 Jun 2025 06:00:55 +0000
Files and hashes: 1: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: WN2WHJ6r6GWzo2lVWJ9zJ8+CCC6EwqgS+r6qSWmSKKI=)
2: kN-GBCc12Ggp4V30uGC2WdsZGBg.roa (hash: jMACQRtQaq5bgDi3odEVzwvhAu6LZ6fYSZGcu6sjPTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:db:c1:3a:84:af:8a:c7:85:eb:a2:97:e8:08:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Jun 14 06:00:55 2025 GMT
Not After : Jun 15 06:00:55 2025 GMT
Subject: CN=4ff02ad8c7ce69421fca8f4bac3acdb411679cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:f0:7c:bb:12:09:18:66:d9:11:3b:bf:23:
cf:46:50:9d:12:6c:e3:7a:4a:b4:67:7f:d4:f8:5f:
c8:20:ba:4d:1d:3d:3a:44:91:5c:7d:21:56:af:8d:
ef:eb:a1:c4:c2:76:08:5d:06:f6:f4:35:e3:ed:5e:
18:84:e4:3e:f1:1d:f0:6f:ce:de:15:da:51:49:bd:
00:ba:e0:cf:47:01:1c:af:44:b3:11:ee:32:a0:5f:
fc:fb:15:25:81:73:c9:35:f7:4d:93:77:9b:8e:73:
8b:74:48:18:97:2d:90:aa:b6:d9:18:c9:53:65:fb:
37:b0:0c:e7:a8:95:9b:5e:da:43:6f:82:61:ca:98:
22:cc:b9:da:4c:d5:d9:81:b2:9e:30:7c:25:e6:9a:
31:36:13:e0:73:81:c2:04:c7:cc:8d:9e:f3:27:c2:
65:2b:0b:fa:42:d3:a5:ce:8b:5e:d2:50:a4:19:56:
e9:41:ef:44:59:38:68:7e:2f:3a:ab:7e:94:9c:3f:
0e:1a:ed:3e:9d:50:a0:80:91:fe:46:16:cf:0c:15:
75:17:09:9b:85:cc:36:95:c8:92:ee:35:28:fb:86:
82:1a:7d:5e:e7:20:9e:9f:55:bd:5e:f6:8d:4e:db:
58:a6:53:c6:e7:89:85:3c:b8:e9:c4:09:ad:49:9e:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F0:2A:D8:C7:CE:69:42:1F:CA:8F:4B:AC:3A:CD:B4:11:67:9C:F6
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:be:06:06:58:a5:cc:00:39:50:a5:2e:02:7a:6f:96:dd:7b:
ce:93:2e:e8:91:29:2c:6f:65:88:42:5e:e8:2e:ec:be:07:b7:
51:e3:50:ab:24:f1:ed:08:69:b8:9c:6b:57:ce:cd:97:90:6c:
1d:f7:77:86:28:20:c2:14:62:68:13:5d:20:dc:45:6d:a9:2a:
f3:97:fc:e1:08:98:34:71:98:7a:d3:24:8b:40:92:a4:7f:57:
36:7f:00:94:6a:94:99:2d:a0:5b:c5:01:d1:0e:08:cb:53:ad:
de:ce:c2:40:9b:45:aa:1b:c3:78:3f:cc:be:33:f9:ee:d4:4b:
b0:b8:a9:dc:ed:34:5a:15:40:61:ca:d6:02:ee:5d:dc:39:2c:
87:e9:4f:84:49:f4:20:d8:44:c3:dc:19:df:c2:d3:b7:38:c6:
14:2b:13:21:10:d7:db:80:2a:db:ac:b1:45:9f:1b:d1:b1:ea:
be:b1:b0:1a:8f:25:0b:6a:c7:25:65:6e:43:a5:0e:d2:cd:59:
91:13:c9:51:22:ab:bb:ae:32:d2:1f:70:48:16:a5:ef:94:93:
40:e1:54:66:f2:24:82:f4:36:89:63:51:b8:c5:1a:65:bc:17:
18:38:38:8e:4b:ba:4a:e6:c5:39:b6:81:30:08:bb:62:cd:c5:
60:40:02:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBtvBOoSviseF66KX6AiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNzRiODUzZGZkOTk3M2YyY2Q5OTRiMmUzYjc1NDYxZDlh
M2ZjNDQwHhcNMjUwNjE0MDYwMDU1WhcNMjUwNjE1MDYwMDU1WjAzMTEwLwYDVQQD
Eyg0ZmYwMmFkOGM3Y2U2OTQyMWZjYThmNGJhYzNhY2RiNDExNjc5Y2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CDwfLsSCRhm2RE7vyPPRlCdEmzj
ekq0Z3/U+F/IILpNHT06RJFcfSFWr43v66HEwnYIXQb29DXj7V4YhOQ+8R3wb87e
FdpRSb0AuuDPRwEcr0SzEe4yoF/8+xUlgXPJNfdNk3ebjnOLdEgYly2QqrbZGMlT
Zfs3sAznqJWbXtpDb4JhypgizLnaTNXZgbKeMHwl5poxNhPgc4HCBMfMjZ7zJ8Jl
Kwv6QtOlzote0lCkGVbpQe9EWThofi86q36UnD8OGu0+nVCggJH+RhbPDBV1Fwmb
hcw2lciS7jUo+4aCGn1e5yCen1W9XvaNTttYplPG54mFPLjpxAmtSZ6mLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/wKtjHzmlCH8qPS6w6zbQRZ5z2MB8GA1UdIwQY
MBaAFJN0uFPf2Zc/LNmUsuO3VGHZo/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQt
NjViY2M4Y2VmZGQyLzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQtNjViY2M4Y2VmZGQy
LzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAL4GBlil
zAA5UKUuAnpvlt17zpMu6JEpLG9liEJe6C7svge3UeNQqyTx7QhpuJxrV87Nl5Bs
Hfd3higgwhRiaBNdINxFbakq85f84QiYNHGYetMki0CSpH9XNn8AlGqUmS2gW8UB
0Q4Iy1Ot3s7CQJtFqhvDeD/MvjP57tRLsLip3O00WhVAYcrWAu5d3Dksh+lPhEn0
INhEw9wZ38LTtzjGFCsTIRDX24Aq26yxRZ8b0bHqvrGwGo8lC2rHJWVuQ6UO0s1Z
kRPJUSKru64y0h9wSBal75STQOFUZvIkgvQ2iWNRuMUaZbwXGDg4jku6SubFObaB
MAi7Ys3FYEAC1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:46 2025 by rpki-client