Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
File: 3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft (raw, json)
Hash identifier: WMEsu6mSSv9ENSRazTkv+AqryTiK1/r3i73tupewlD0=
Subject key identifier: CF:E3:75:4B:DA:87:77:B3:6B:87:51:A5:62:7B:50:15:9E:2E:EF:60
Authority key identifier: DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6
Certificate issuer: /CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6
Certificate serial: 0197B74559C0AD8B4F9166CB42ADF663E8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
Manifest number: EA
Signing time: Sat 28 Jun 2025 16:01:04 +0000
Manifest this update: Sat 28 Jun 2025 16:01:04 +0000
Manifest next update: Sun 29 Jun 2025 16:01:04 +0000
Files and hashes: 1: 3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl (hash: AnRwwZU79tolxifk34EICprqe68TvmE1hp57pz76sYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:59:c0:ad:8b:4f:91:66:cb:42:ad:f6:63:e8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de15d81f0a7f3dd34451840ae31caff667ceeaf6
Validity
Not Before: Jun 28 16:01:04 2025 GMT
Not After : Jun 29 16:01:04 2025 GMT
Subject: CN=cfe3754bda8777b36b8751a5627b50159e2eef60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:92:cb:38:3a:29:21:fb:54:7b:ef:71:71:
97:28:ac:a7:38:ba:d5:1d:f5:d0:58:4e:6c:ff:f8:
3d:d8:7f:9e:d9:6b:0f:40:af:51:e0:8c:43:6c:e7:
a3:d8:10:7a:8c:fe:a4:12:48:e3:6f:e5:0e:6e:86:
0c:c6:28:72:6e:ae:3a:bf:0b:2c:a3:33:82:55:5f:
42:7a:ec:01:6c:b6:60:78:92:e6:d3:d0:8f:62:be:
1b:dc:75:26:fe:95:fe:5c:00:e0:c0:64:e3:c1:4d:
27:0a:e2:bc:e0:43:0e:a2:17:e3:05:f8:4e:9a:c8:
27:fd:4e:3c:a1:42:a4:78:3d:b4:44:54:30:a7:2a:
09:d8:39:d1:97:c3:de:5d:ff:19:bf:5d:17:26:a1:
05:1b:39:d7:49:9f:ba:4d:ce:6b:d3:a1:e8:8f:dd:
ba:8b:51:58:f1:0f:06:dd:41:06:5d:03:22:a9:f1:
97:85:00:0f:0b:87:de:48:07:f4:d2:6c:b3:eb:1c:
4f:37:db:5b:9e:d2:f3:05:c6:52:39:a9:0b:b4:f3:
61:83:b1:4f:35:2c:17:79:c2:b4:b2:c6:5f:2b:82:
3a:0c:8b:b3:2f:dc:2b:c7:57:2f:a1:0a:bc:d3:f2:
4d:3e:84:f5:3d:87:04:5a:8c:86:6a:da:fd:d4:09:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E3:75:4B:DA:87:77:B3:6B:87:51:A5:62:7B:50:15:9E:2E:EF:60
X509v3 Authority Key Identifier:
keyid:DE:15:D8:1F:0A:7F:3D:D3:44:51:84:0A:E3:1C:AF:F6:67:CE:EA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hXYHwp_PdNEUYQK4xyv9mfO6vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8768cb-b48a-478b-987a-9cc784693669/1/3hXYHwp_PdNEUYQK4xyv9mfO6vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b1:66:b1:47:dd:29:e6:62:f5:08:11:3e:3c:12:36:cb:47:
b1:af:69:e6:87:df:70:3e:da:93:ae:c3:c4:4e:c9:84:1b:18:
8e:a9:61:34:4c:74:43:df:f1:63:9c:54:b3:17:cc:f6:21:bc:
73:22:98:1c:48:05:ae:57:ad:f7:ac:c5:20:6b:db:8d:a8:e6:
0a:91:e5:46:08:c2:4a:c7:fa:cf:85:d6:a7:3c:52:54:fd:63:
9f:c5:94:6c:5c:f1:36:d9:31:05:44:80:85:52:26:39:76:7b:
0b:36:ae:0a:50:76:a4:ad:98:39:33:34:1f:9f:91:f9:a1:9e:
d4:26:24:d8:27:35:cd:13:7c:3c:17:6d:6e:7c:e1:7e:36:0e:
01:de:ea:ba:16:ac:ec:cb:63:67:26:be:cc:d9:2b:10:ba:4e:
7c:81:1e:92:92:55:34:3a:39:7f:3a:4e:bd:da:3b:0f:cb:db:
65:13:fb:aa:2e:86:30:91:0e:25:a8:4c:38:dc:3b:9d:e8:b5:
b6:0b:6f:81:a6:a1:8e:91:6c:fe:0d:79:ea:48:e2:25:2d:ea:
0e:3e:dd:5f:b2:70:82:48:51:18:ec:e8:35:83:19:af:8e:4e:
12:18:07:0c:33:a0:3b:55:cf:d2:5c:1e:63:d2:54:57:8f:ed:
65:b1:a6:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RVnArYtPkWbLQq32Y+i8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTVkODFmMGE3ZjNkZDM0NDUxODQwYWUzMWNhZmY2Njdj
ZWVhZjYwHhcNMjUwNjI4MTYwMTA0WhcNMjUwNjI5MTYwMTA0WjAzMTEwLwYDVQQD
EyhjZmUzNzU0YmRhODc3N2IzNmI4NzUxYTU2MjdiNTAxNTllMmVlZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD2Syzg6KSH7VHvvcXGXKKynOLrV
HfXQWE5s//g92H+e2WsPQK9R4IxDbOej2BB6jP6kEkjjb+UOboYMxihybq46vwss
ozOCVV9CeuwBbLZgeJLm09CPYr4b3HUm/pX+XADgwGTjwU0nCuK84EMOohfjBfhO
msgn/U48oUKkeD20RFQwpyoJ2DnRl8PeXf8Zv10XJqEFGznXSZ+6Tc5r06Hoj926
i1FY8Q8G3UEGXQMiqfGXhQAPC4feSAf00myz6xxPN9tbntLzBcZSOakLtPNhg7FP
NSwXecK0ssZfK4I6DIuzL9wrx1cvoQq80/JNPoT1PYcEWoyGatr91AkcrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/jdUvah3eza4dRpWJ7UBWeLu9gMB8GA1UdIwQY
MBaAFN4V2B8Kfz3TRFGECuMcr/Znzur2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hYWUh3cF9QZE5FVVlRSzR4eXY5bWZPNnZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84NzY4Y2ItYjQ4YS00NzhiLTk4N2Et
OWNjNzg0NjkzNjY5LzEvM2hYWUh3cF9QZE5FVVlRSzR4eXY5bWZPNnZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84NzY4Y2ItYjQ4YS00NzhiLTk4N2EtOWNjNzg0NjkzNjY5
LzEvM2hYWUh3cF9QZE5FVVlRSzR4eXY5bWZPNnZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrFmsUfd
KeZi9QgRPjwSNstHsa9p5offcD7ak67DxE7JhBsYjqlhNEx0Q9/xY5xUsxfM9iG8
cyKYHEgFrlet96zFIGvbjajmCpHlRgjCSsf6z4XWpzxSVP1jn8WUbFzxNtkxBUSA
hVImOXZ7CzauClB2pK2YOTM0H5+R+aGe1CYk2Cc1zRN8PBdtbnzhfjYOAd7quhas
7MtjZya+zNkrELpOfIEekpJVNDo5fzpOvdo7D8vbZRP7qi6GMJEOJahMONw7nei1
tgtvgaahjpFs/g156kjiJS3qDj7dX7JwgkhRGOzoNYMZr45OEhgHDDOgO1XP0lwe
Y9JUV4/tZbGmPw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:26 2025 by rpki-client