Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File: 3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier: WcYFTBpflELgCT3rHgUd1RQGRUjibrm1KzjYrjMt5ys=
Subject key identifier: E1:6A:6E:41:2D:2E:FD:7E:00:77:BB:FE:F2:0B:1C:D1:9B:06:C4:75
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer: /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial: 0197B6A13B99A0EE380677F6B1B20DD78133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number: 0F12
Signing time: Sat 28 Jun 2025 13:01:49 +0000
Manifest this update: Sat 28 Jun 2025 13:01:49 +0000
Manifest next update: Sun 29 Jun 2025 13:01:49 +0000
Files and hashes: 1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: uHekqZ93Xnl3qJrYiR7giWPtZ0A7kv5Wjzx/91tzpQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:3b:99:a0:ee:38:06:77:f6:b1:b2:0d:d7:81:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de122d172c13b15291e41f945681525826fef892
Validity
Not Before: Jun 28 13:01:49 2025 GMT
Not After : Jun 29 13:01:49 2025 GMT
Subject: CN=e16a6e412d2efd7e0077bbfef20b1cd19b06c475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:e5:2c:8d:a0:a8:2d:39:57:ff:d2:46:8d:
64:bb:12:84:a9:4c:d7:1d:f7:3f:d4:56:37:19:62:
d1:31:ca:31:5e:b8:2b:31:66:7f:7b:7c:b1:ff:35:
c9:53:87:72:10:18:bf:1f:b7:70:d8:db:46:56:65:
74:6c:6e:7e:df:43:66:ff:65:43:47:7f:15:da:d8:
24:f9:56:8c:ea:50:f5:cc:8e:7b:43:2a:cc:a5:d1:
98:d8:07:47:2d:68:11:2a:2e:7d:ac:68:8a:b7:6d:
0d:28:13:1c:7f:05:e8:ff:fe:bd:1c:e9:cb:e3:f0:
2c:fe:9a:a0:7e:c9:da:a1:c2:9a:fc:4b:a4:de:60:
a7:9d:27:29:fc:8e:e3:55:b6:d6:27:fa:b2:f1:51:
bc:14:b4:fc:da:a2:6c:97:fd:71:a9:e9:e5:a0:5b:
3c:bd:63:ed:4f:02:5a:38:f3:6d:55:5d:29:36:4f:
9c:6e:ca:4a:62:b9:4c:a8:c4:5f:86:4c:9a:79:28:
35:32:71:cd:f2:ec:b7:31:f7:ed:6a:0d:3f:7a:aa:
0d:5b:86:f9:c7:93:c2:38:f7:ae:cb:fb:97:b8:34:
7f:75:96:e5:f3:b5:d5:27:04:26:8f:98:80:a7:28:
19:fd:2a:d8:7c:c7:4b:3f:29:92:b9:e6:b9:b8:bc:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6A:6E:41:2D:2E:FD:7E:00:77:BB:FE:F2:0B:1C:D1:9B:06:C4:75
X509v3 Authority Key Identifier:
keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:00:e5:a1:03:f3:a4:97:c0:02:e6:b1:fc:34:82:36:75:4b:
bf:94:ca:75:58:77:cf:2d:b5:2e:4b:0b:73:0a:30:98:82:b0:
88:89:3f:3d:de:39:75:e9:9c:b2:97:f2:a2:be:d6:a8:bd:e8:
1c:23:e0:d2:38:b8:b8:d5:eb:95:28:ad:4a:57:3a:9f:4f:af:
bb:b2:14:5b:84:eb:31:25:f1:9e:51:ca:35:3a:9c:5e:e2:c1:
43:2d:31:38:51:df:ed:9e:3b:a5:c0:57:80:18:3f:cb:8b:32:
cc:90:8b:08:be:4b:0d:a4:e3:4f:67:d4:26:96:78:fb:7f:35:
7e:57:02:f7:d2:72:49:fc:f5:9b:2d:9b:39:0d:03:28:c4:ab:
b7:df:58:72:60:8c:f5:ad:e5:58:ea:cc:6a:a9:61:6a:da:1b:
da:1e:6c:3d:77:f0:36:17:c7:45:53:88:80:ed:3a:49:83:b3:
c5:1b:c0:9a:c1:e6:3c:5f:8b:4e:60:72:e1:95:9d:26:bd:b5:
ca:58:65:8c:2c:6d:4e:5a:78:34:62:01:8b:50:e8:bf:99:b4:
26:b1:77:f8:f9:47:51:dd:ae:51:ec:3c:5d:89:2e:ce:58:87:
b9:72:c9:98:b4:7c:d7:29:cf:96:2c:29:d9:c6:dd:8f:1f:a1:
40:73:5f:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oTuZoO44Bnf2sbIN14EzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTIyZDE3MmMxM2IxNTI5MWU0MWY5NDU2ODE1MjU4MjZm
ZWY4OTIwHhcNMjUwNjI4MTMwMTQ5WhcNMjUwNjI5MTMwMTQ5WjAzMTEwLwYDVQQD
EyhlMTZhNmU0MTJkMmVmZDdlMDA3N2JiZmVmMjBiMWNkMTliMDZjNDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbvlLI2gqC05V//SRo1kuxKEqUzX
Hfc/1FY3GWLRMcoxXrgrMWZ/e3yx/zXJU4dyEBi/H7dw2NtGVmV0bG5+30Nm/2VD
R38V2tgk+VaM6lD1zI57QyrMpdGY2AdHLWgRKi59rGiKt20NKBMcfwXo//69HOnL
4/As/pqgfsnaocKa/Euk3mCnnScp/I7jVbbWJ/qy8VG8FLT82qJsl/1xqenloFs8
vWPtTwJaOPNtVV0pNk+cbspKYrlMqMRfhkyaeSg1MnHN8uy3Mfftag0/eqoNW4b5
x5PCOPeuy/uXuDR/dZbl87XVJwQmj5iApygZ/SrYfMdLPymSuea5uLzeNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFqbkEtLv1+AHe7/vILHNGbBsR1MB8GA1UdIwQY
MBaAFN4SLRcsE7FSkeQflFaBUlgm/viSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84MzcwMjItZmRkYi00ZmM5LWE3MzMt
MzY1YzRiNWMyNGVkLzEvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84MzcwMjItZmRkYi00ZmM5LWE3MzMtMzY1YzRiNWMyNGVk
LzEvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgDloQPz
pJfAAuax/DSCNnVLv5TKdVh3zy21LksLcwowmIKwiIk/Pd45demcspfyor7WqL3o
HCPg0ji4uNXrlSitSlc6n0+vu7IUW4TrMSXxnlHKNTqcXuLBQy0xOFHf7Z47pcBX
gBg/y4syzJCLCL5LDaTjT2fUJpZ4+381flcC99JySfz1my2bOQ0DKMSrt99YcmCM
9a3lWOrMaqlhatob2h5sPXfwNhfHRVOIgO06SYOzxRvAmsHmPF+LTmBy4ZWdJr21
ylhljCxtTlp4NGIBi1Dov5m0JrF3+PlHUd2uUew8XYkuzliHuXLJmLR81ynPliwp
2cbdjx+hQHNfJg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:01 2025 by rpki-client