Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
File: 3pj4NjKYKX-6uupodyArXEQOWpA.mft (raw, json)
Hash identifier: lu1LeD2R0N/mFWC1yjvnvUn4xdfPd6A3HSpHfj59xdk=
Subject key identifier: 7B:29:73:21:71:86:C1:BE:B9:55:93:40:C6:24:2F:CA:6C:01:90:02
Authority key identifier: DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
Certificate issuer: /CN=de98f8363298297fbabaea6877202b5c440e5a90
Certificate serial: 0197B6A10FC18C643CC8C206BD7E36037842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
Manifest number: 0C44
Signing time: Sat 28 Jun 2025 13:01:37 +0000
Manifest this update: Sat 28 Jun 2025 13:01:37 +0000
Manifest next update: Sun 29 Jun 2025 13:01:37 +0000
Files and hashes: 1: 3pj4NjKYKX-6uupodyArXEQOWpA.crl (hash: hixH4WBD8mL1jIzKOKOQKnKQ0WGhZWX2itzli71pETk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0f:c1:8c:64:3c:c8:c2:06:bd:7e:36:03:78:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de98f8363298297fbabaea6877202b5c440e5a90
Validity
Not Before: Jun 28 13:01:37 2025 GMT
Not After : Jun 29 13:01:37 2025 GMT
Subject: CN=7b2973217186c1beb9559340c6242fca6c019002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:04:53:c2:86:e2:96:4d:3b:b4:3a:af:32:
33:90:b1:f9:23:11:4e:17:4b:79:59:5f:5b:1d:29:
4e:e0:d5:40:06:5f:6c:9d:fa:1e:b7:6f:3d:55:92:
a5:4a:88:9f:b8:7b:76:bc:37:ea:95:c7:a9:89:68:
c6:35:5d:78:c6:47:3d:d6:ca:a6:ca:37:07:32:1f:
7e:d1:b9:ba:4b:03:00:63:2f:e6:35:b6:60:fc:2d:
d9:d2:6f:11:c4:20:0e:b6:60:42:2f:b0:ec:bb:73:
a1:8c:5d:f8:61:a6:90:c8:27:3b:fd:82:6e:59:2e:
38:41:50:4a:0b:ab:e3:d8:77:bb:03:b3:16:8e:80:
3a:fa:46:7d:03:1d:35:09:47:5b:6f:3c:20:5b:89:
de:eb:a0:cb:69:eb:23:69:ba:5d:48:f7:2a:11:6d:
98:0d:eb:b2:9c:95:7e:4d:53:31:2f:79:cc:45:bd:
1e:72:28:9f:31:69:e5:00:ba:d1:80:c0:3e:b9:5e:
aa:14:87:2a:2c:65:c9:9a:93:96:e8:03:1f:16:31:
15:f5:b9:ad:dc:ae:bd:ba:40:0c:a3:ea:a2:32:da:
83:eb:de:ae:de:91:21:3d:a2:ac:2c:34:27:e2:4e:
a8:40:5f:f8:74:73:9c:69:0b:98:66:45:43:cd:88:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:29:73:21:71:86:C1:BE:B9:55:93:40:C6:24:2F:CA:6C:01:90:02
X509v3 Authority Key Identifier:
keyid:DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5d:49:7c:a9:6d:79:33:c4:68:3c:82:6a:5c:20:a4:9e:94:
0c:bd:b2:6e:c7:59:5f:b3:16:3e:a0:59:7a:41:9b:9c:e3:10:
98:34:56:56:d2:04:be:de:fc:bf:69:08:37:70:ac:29:85:e5:
86:44:1f:46:b2:d8:35:d5:12:91:05:ba:02:6f:9a:6d:17:f8:
1c:2d:0b:9b:78:d5:88:40:d3:0a:af:1b:26:0a:bd:7e:b3:9f:
cf:d3:29:99:16:37:24:3a:65:32:28:58:77:65:f6:8d:c9:5f:
d3:5b:35:ec:8f:7a:bd:15:76:d4:d8:36:a6:a0:1b:e8:63:ba:
87:fe:0b:52:72:77:bd:f5:13:e4:d7:1f:9f:bd:01:96:aa:54:
c8:ad:e0:45:b1:f5:cb:38:5c:74:54:45:a5:f6:f5:e9:48:6d:
a6:4a:a5:76:77:31:b1:bf:c2:11:d8:8f:93:35:04:18:da:36:
b4:8b:01:86:12:26:ae:8c:b1:28:a5:33:fd:47:e5:76:61:6b:
f8:53:49:66:c3:38:06:81:85:f8:d2:7f:52:b4:dd:fd:b9:8d:
87:1a:50:6b:e6:88:ab:9f:cb:ab:c2:94:ee:6f:09:67:52:45:
6f:f7:8d:22:38:d6:d3:c1:cd:a8:3f:af:a0:18:07:b7:23:14:
93:f1:ef:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oQ/BjGQ8yMIGvX42A3hCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOThmODM2MzI5ODI5N2ZiYWJhZWE2ODc3MjAyYjVjNDQw
ZTVhOTAwHhcNMjUwNjI4MTMwMTM3WhcNMjUwNjI5MTMwMTM3WjAzMTEwLwYDVQQD
Eyg3YjI5NzMyMTcxODZjMWJlYjk1NTkzNDBjNjI0MmZjYTZjMDE5MDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/AEU8KG4pZNO7Q6rzIzkLH5IxFO
F0t5WV9bHSlO4NVABl9snfoet289VZKlSoifuHt2vDfqlcepiWjGNV14xkc91sqm
yjcHMh9+0bm6SwMAYy/mNbZg/C3Z0m8RxCAOtmBCL7Dsu3OhjF34YaaQyCc7/YJu
WS44QVBKC6vj2He7A7MWjoA6+kZ9Ax01CUdbbzwgW4ne66DLaesjabpdSPcqEW2Y
DeuynJV+TVMxL3nMRb0eciifMWnlALrRgMA+uV6qFIcqLGXJmpOW6AMfFjEV9bmt
3K69ukAMo+qiMtqD696u3pEhPaKsLDQn4k6oQF/4dHOcaQuYZkVDzYiAYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHspcyFxhsG+uVWTQMYkL8psAZACMB8GA1UdIwQY
MBaAFN6Y+DYymCl/urrqaHcgK1xEDlqQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BqNE5qS1lLWC02dXVwb2R5QXJYRVFPV3BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ODBlMjktN2Q4My00NTU4LWI0MTEt
ZTdmYmQ1MGUwMzQ5LzEvM3BqNE5qS1lLWC02dXVwb2R5QXJYRVFPV3BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82ODBlMjktN2Q4My00NTU4LWI0MTEtZTdmYmQ1MGUwMzQ5
LzEvM3BqNE5qS1lLWC02dXVwb2R5QXJYRVFPV3BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArV1JfKlt
eTPEaDyCalwgpJ6UDL2ybsdZX7MWPqBZekGbnOMQmDRWVtIEvt78v2kIN3CsKYXl
hkQfRrLYNdUSkQW6Am+abRf4HC0Lm3jViEDTCq8bJgq9frOfz9MpmRY3JDplMihY
d2X2jclf01s17I96vRV21Ng2pqAb6GO6h/4LUnJ3vfUT5Ncfn70BlqpUyK3gRbH1
yzhcdFRFpfb16Uhtpkqldncxsb/CEdiPkzUEGNo2tIsBhhImroyxKKUz/UfldmFr
+FNJZsM4BoGF+NJ/UrTd/bmNhxpQa+aIq5/Lq8KU7m8JZ1JFb/eNIjjW08HNqD+v
oBgHtyMUk/Hvuw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:42 2025 by rpki-client