
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: auPB46hL/bIGj3y3ifkWeQ5C+AwhN224biAfu1xfMak=
Subject key identifier: 0C:C6:B3:D6:E7:28:8F:26:EF:F8:3B:7D:25:43:33:9C:23:12:F0:46
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 0197B88F94C917ADBF15A5F9AF082DC116D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 0F27
Signing time: Sat 28 Jun 2025 22:01:46 +0000
Manifest this update: Sat 28 Jun 2025 22:01:46 +0000
Manifest next update: Sun 29 Jun 2025 22:01:46 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: LmzybCdWjPVhifQ4brKnsBFccTFBCfb7f1Td76anb0E=)
2: i8FpzgugtZcFKDdMebgRZ16RoIg.roa (hash: Z0Wnkrs5xvwFBERJB5wvtxVMhqH4ul49O/mmtU48/Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:94:c9:17:ad:bf:15:a5:f9:af:08:2d:c1:16:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Jun 28 22:01:46 2025 GMT
Not After : Jun 29 22:01:46 2025 GMT
Subject: CN=0cc6b3d6e7288f26eff83b7d2543339c2312f046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:eb:a7:32:7e:44:9f:41:d2:11:25:d5:77:
d5:a2:0d:d0:cb:cd:fe:27:c7:4c:9f:57:67:8b:c1:
c8:66:f5:e1:71:48:65:a5:04:0c:07:39:33:47:1c:
08:06:b9:7a:51:48:b5:cc:b6:18:fd:91:99:7b:23:
34:a8:23:68:ec:0b:3f:16:f4:9e:04:37:cc:90:47:
64:c9:a0:81:84:e2:49:d3:f5:e1:84:3c:d4:74:bc:
2c:48:fd:7c:17:b9:fc:a9:39:5c:0b:68:70:03:d0:
b2:6f:a0:40:35:9a:98:02:81:36:8c:34:77:0b:9b:
8c:0e:b1:70:39:dd:ec:6a:24:c6:b1:fe:c2:f4:db:
d0:d1:19:b6:10:6d:15:7f:0e:10:36:cf:61:8f:96:
12:20:02:d6:06:92:29:17:1a:ba:4d:8b:2a:95:f9:
e4:48:b0:93:98:78:8f:6b:7c:be:98:7e:4b:7f:10:
ef:ac:b7:3d:c8:0f:a4:8b:56:ec:16:92:27:c2:8e:
7b:58:c9:b4:ac:8b:6d:cf:cc:23:87:7a:8e:26:4b:
23:a4:03:b2:99:69:cf:20:04:c9:13:c1:be:da:ae:
f0:c2:72:ac:f4:62:d0:e7:50:6a:71:cb:8e:2f:14:
cb:bf:4d:2c:6f:1f:68:55:9a:60:0f:90:1a:b3:f2:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C6:B3:D6:E7:28:8F:26:EF:F8:3B:7D:25:43:33:9C:23:12:F0:46
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d2:c2:34:d4:6c:d1:e4:87:a0:4d:32:bf:4c:89:8b:3e:c2:
8a:9c:c5:fb:be:3f:53:17:9c:ab:c9:0f:79:d8:03:f8:4f:84:
5f:c4:4c:1b:82:ee:ba:d5:23:e4:63:88:35:8f:7e:98:ea:18:
db:50:b7:91:93:f4:97:4f:ac:da:cb:8b:f6:0c:43:b7:4d:35:
18:43:1e:f5:1d:ba:99:8a:21:25:ac:62:ca:3a:18:51:42:07:
b1:02:3c:9f:1f:ec:d2:9d:ac:94:ab:0f:f7:02:f6:45:07:fb:
c7:29:e7:6f:ef:ad:d9:7f:ae:e5:bb:15:61:39:e7:d1:80:c8:
6a:fd:1e:25:b4:82:57:29:be:fb:8a:a6:94:c1:53:9e:bf:ed:
5f:96:c2:04:e4:c7:2a:a4:65:4b:08:d6:fe:4f:bb:25:9e:40:
d7:dc:b2:dc:fa:59:e0:54:78:35:e6:df:bf:6a:bf:20:cf:7f:
ab:2e:fd:89:df:00:42:15:2f:5c:f7:61:76:82:c1:4d:94:8d:
ec:28:f1:8e:a1:8b:db:bd:cd:fd:b9:26:7f:c6:f9:a5:50:e2:
9b:3f:7a:79:9d:30:b1:57:04:f6:38:a4:a7:47:31:aa:d3:93:
37:55:c0:62:c3:c9:71:5c:fc:22:01:47:46:62:2f:d4:93:72:
dc:9d:50:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j5TJF62/FaX5rwgtwRbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGUzODkyZjQ2YjEwNzg1MmMzZWFlMWIyN2RjY2Y2MGZh
Yjk5YmQwHhcNMjUwNjI4MjIwMTQ2WhcNMjUwNjI5MjIwMTQ2WjAzMTEwLwYDVQQD
EygwY2M2YjNkNmU3Mjg4ZjI2ZWZmODNiN2QyNTQzMzM5YzIzMTJmMDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZPrpzJ+RJ9B0hEl1XfVog3Qy83+
J8dMn1dni8HIZvXhcUhlpQQMBzkzRxwIBrl6UUi1zLYY/ZGZeyM0qCNo7As/FvSe
BDfMkEdkyaCBhOJJ0/XhhDzUdLwsSP18F7n8qTlcC2hwA9Cyb6BANZqYAoE2jDR3
C5uMDrFwOd3saiTGsf7C9NvQ0Rm2EG0Vfw4QNs9hj5YSIALWBpIpFxq6TYsqlfnk
SLCTmHiPa3y+mH5LfxDvrLc9yA+ki1bsFpInwo57WMm0rIttz8wjh3qOJksjpAOy
mWnPIATJE8G+2q7wwnKs9GLQ51BqccuOLxTLv00sbx9oVZpgD5Aas/KyIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzGs9bnKI8m7/g7fSVDM5wjEvBGMB8GA1UdIwQY
MBaAFN1OOJL0axB4UsPq4bJ9zPYPq5m9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTkt
M2I1YjcxY2JiMzIyLzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTktM2I1YjcxY2JiMzIy
LzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdLCNNRs
0eSHoE0yv0yJiz7CipzF+74/Uxecq8kPedgD+E+EX8RMG4LuutUj5GOINY9+mOoY
21C3kZP0l0+s2suL9gxDt001GEMe9R26mYohJaxiyjoYUUIHsQI8nx/s0p2slKsP
9wL2RQf7xynnb++t2X+u5bsVYTnn0YDIav0eJbSCVym++4qmlMFTnr/tX5bCBOTH
KqRlSwjW/k+7JZ5A19yy3PpZ4FR4Nebfv2q/IM9/qy79id8AQhUvXPdhdoLBTZSN
7CjxjqGL273N/bkmf8b5pVDimz96eZ0wsVcE9jikp0cxqtOTN1XAYsPJcVz8IgFH
RmIv1JNy3J1QXA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:46 2025 by rpki-client