Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: dgVNsMfPkpw5rC/5tcZRozJYr8WpVN+SlXC11BkyzAU=
Subject key identifier: 87:04:48:99:6C:E1:E8:2B:4A:20:8D:66:B8:26:9C:C4:F0:17:60:F1
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 01977640AA6224AC7AAB63ED53FB5BBC83DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 0F7D
Signing time: Mon 16 Jun 2025 01:00:38 +0000
Manifest this update: Mon 16 Jun 2025 01:00:38 +0000
Manifest next update: Tue 17 Jun 2025 01:00:38 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: 2uP0C+3SYtow/hJpaEGAGpa+26RrK8KRrkSEG5paLPg=)
2: 3UIDKEFXJEmxMbGydMkXkbNNCTY.roa (hash: pgCRcX9iheRr/OCGNJKjSelNy2YviytvLV7qgkrg4cw=)
3: 63KLq4xWCCCiZXA-wVIdQJ4PdKc.roa (hash: WWbZVpPXaQ4lgKGhfzlX90xgl3LD+KyLy9eYy0r99WI=)
4: DED9vt3vinq5uo7W8xf1qKgQoDQ.roa (hash: 4ofAOFKN04CoU+Upz0jkwmu0l7yf9aj6OLtWjSx3Wtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:40:aa:62:24:ac:7a:ab:63:ed:53:fb:5b:bc:83:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Jun 16 01:00:38 2025 GMT
Not After : Jun 17 01:00:38 2025 GMT
Subject: CN=870448996ce1e82b4a208d66b8269cc4f01760f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f1:7c:0d:14:a9:eb:ee:af:3b:07:c5:18:f7:
bc:09:45:d5:3c:6a:d4:f3:12:95:52:58:bb:a6:5f:
8a:35:bb:43:57:65:3b:b6:79:ab:e6:a1:f3:95:41:
20:fb:aa:78:7a:c4:db:49:68:cd:41:2d:d4:aa:cf:
33:96:44:e0:50:c3:5b:19:ad:cd:0d:89:1c:d1:f9:
a9:24:6e:e6:1a:b8:8c:00:c7:b8:b5:72:18:0a:c0:
a4:24:e4:2b:c7:3b:3f:66:62:9e:bc:2d:1e:2d:e5:
46:70:69:97:c0:49:ff:4a:e4:11:f2:9a:e2:cd:7c:
70:64:bb:54:83:b3:66:5e:42:68:46:03:af:5a:fe:
3f:73:18:38:45:10:3b:08:a3:95:9a:47:9f:9d:06:
2a:ba:ce:29:ba:b9:41:4b:c2:51:e9:6a:dc:00:59:
fc:95:04:b8:8c:e9:23:68:16:d4:14:1c:2d:be:92:
4a:17:99:45:4e:bd:31:7f:5e:63:99:f2:e9:0c:76:
6b:83:96:d8:c8:60:03:f7:19:a3:45:eb:27:12:43:
31:1f:32:d6:d5:15:61:bd:f9:ac:70:02:cc:fe:f0:
07:5b:81:aa:d7:55:b7:e2:93:ee:e9:76:37:13:11:
5d:5c:0e:5d:bd:d1:92:c6:6f:8d:77:d9:66:20:94:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:04:48:99:6C:E1:E8:2B:4A:20:8D:66:B8:26:9C:C4:F0:17:60:F1
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3f:ee:30:ee:4a:d4:b3:1f:8c:ea:4b:d4:e3:bb:b5:21:44:
9a:7b:c2:63:58:43:80:fb:08:83:d4:d6:e8:af:f3:04:68:91:
b7:95:0a:52:ed:c9:70:dd:4c:26:6a:a8:18:a1:40:d4:a6:a8:
29:e4:3c:b4:b3:13:f9:33:cf:76:18:ae:a6:30:34:ec:82:1b:
4f:d6:ba:25:cf:8b:0e:8c:4e:11:6b:2d:35:07:ee:c9:d7:16:
89:58:7e:65:46:19:f0:4a:d9:ff:18:94:0e:86:47:b0:1d:56:
1a:47:40:bd:9e:bb:ff:42:7f:20:ca:38:47:ed:2e:6d:fc:65:
c7:33:fe:ed:5e:e7:59:d2:55:dd:70:68:21:58:1c:ff:fc:32:
c3:c1:21:30:45:7a:9d:05:ce:be:0d:a8:22:2b:46:0d:84:33:
64:92:b3:a7:96:e8:18:73:95:fc:36:63:fa:22:f1:cf:3c:20:
a9:f4:b2:bf:4c:f6:61:cc:96:4c:ee:a7:04:aa:5e:6e:fa:14:
c1:10:72:9a:e1:ad:6b:10:51:d4:16:d4:18:13:e1:b9:ac:91:
9f:74:cb:d3:e7:82:5c:d3:77:2c:aa:fb:92:52:bf:a0:c2:2c:
d2:94:db:51:79:e8:a1:3c:87:42:b2:de:2d:76:b5:43:81:38:
4e:0f:69:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd2QKpiJKx6q2PtU/tbvIPeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmODg3N2YzYzU1YjUyOGUxYTI5ZGIzZDc5OTIwNjU2ZjBj
NjZhZWIwHhcNMjUwNjE2MDEwMDM4WhcNMjUwNjE3MDEwMDM4WjAzMTEwLwYDVQQD
Eyg4NzA0NDg5OTZjZTFlODJiNGEyMDhkNjZiODI2OWNjNGYwMTc2MGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/F8DRSp6+6vOwfFGPe8CUXVPGrU
8xKVUli7pl+KNbtDV2U7tnmr5qHzlUEg+6p4esTbSWjNQS3Uqs8zlkTgUMNbGa3N
DYkc0fmpJG7mGriMAMe4tXIYCsCkJOQrxzs/ZmKevC0eLeVGcGmXwEn/SuQR8pri
zXxwZLtUg7NmXkJoRgOvWv4/cxg4RRA7CKOVmkefnQYqus4purlBS8JR6WrcAFn8
lQS4jOkjaBbUFBwtvpJKF5lFTr0xf15jmfLpDHZrg5bYyGAD9xmjResnEkMxHzLW
1RVhvfmscALM/vAHW4Gq11W34pPu6XY3ExFdXA5dvdGSxm+Nd9lmIJSndwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcESJls4egrSiCNZrgmnMTwF2DxMB8GA1UdIwQY
MBaAFN+Id/PFW1KOGinbPXmSBlbwxmrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODkt
MjU0NTVhOGRkZDQ1LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kMjFkNjAtMjEwZi00MGIzLTlkODktMjU0NTVhOGRkZDQ1
LzEvMzRoMzg4VmJVbzRhS2RzOWVaSUdWdkRHYXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYz/uMO5K
1LMfjOpL1OO7tSFEmnvCY1hDgPsIg9TW6K/zBGiRt5UKUu3JcN1MJmqoGKFA1Kao
KeQ8tLMT+TPPdhiupjA07IIbT9a6Jc+LDoxOEWstNQfuydcWiVh+ZUYZ8ErZ/xiU
DoZHsB1WGkdAvZ67/0J/IMo4R+0ubfxlxzP+7V7nWdJV3XBoIVgc//wyw8EhMEV6
nQXOvg2oIitGDYQzZJKzp5boGHOV/DZj+iLxzzwgqfSyv0z2YcyWTO6nBKpebvoU
wRBymuGtaxBR1BbUGBPhuayRn3TL0+eCXNN3LKr7klK/oMIs0pTbUXnooTyHQrLe
LXa1Q4E4Tg9pBg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:49:15 2025 by rpki-client