Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
File: cs3rVmQuM1iXcef9pxu3HgF_nZY.mft (raw, json)
Hash identifier: K1AY87NwGHHoR/Fs03q2qBo9eJjLFFn+SSpDn5rmQUo=
Subject key identifier: 4D:6B:87:02:78:81:6B:60:F7:2C:81:48:DC:4F:81:8F:87:D3:BE:38
Authority key identifier: 72:CD:EB:56:64:2E:33:58:97:71:E7:FD:A7:1B:B7:1E:01:7F:9D:96
Certificate issuer: /CN=72cdeb56642e33589771e7fda71bb71e017f9d96
Certificate serial: 0197B7B30E96EEDA7995064BA08640D39A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
Manifest number: 0AD3
Signing time: Sat 28 Jun 2025 18:00:54 +0000
Manifest this update: Sat 28 Jun 2025 18:00:54 +0000
Manifest next update: Sun 29 Jun 2025 18:00:54 +0000
Files and hashes: 1: cs3rVmQuM1iXcef9pxu3HgF_nZY.crl (hash: 2jHyGcmeQ1fanPwp5oAyUsxxWJIN/PPf9EbQOjaJElA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:0e:96:ee:da:79:95:06:4b:a0:86:40:d3:9a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cdeb56642e33589771e7fda71bb71e017f9d96
Validity
Not Before: Jun 28 18:00:54 2025 GMT
Not After : Jun 29 18:00:54 2025 GMT
Subject: CN=4d6b870278816b60f72c8148dc4f818f87d3be38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:b9:f5:f8:9f:a8:e8:bb:80:67:21:48:4e:
c0:0b:1c:7e:70:58:f7:ae:eb:79:86:1f:7e:05:77:
c9:26:12:4b:2f:78:b6:75:69:d2:7e:de:83:e6:e7:
99:92:b4:25:be:b3:ea:f8:ff:1c:57:4c:d6:be:86:
8c:d2:52:bb:42:69:dc:51:62:74:94:c4:1d:d7:e1:
b1:00:43:4c:44:46:11:51:cb:04:0f:c2:6d:d3:8d:
bc:a2:90:b5:5c:7d:5d:eb:0d:1c:fc:b6:0a:70:8c:
02:04:29:59:3a:0b:f1:65:58:23:c1:4a:d0:8d:ae:
14:c6:7e:6a:46:d0:06:7d:26:7e:3b:69:52:cd:a8:
4e:36:39:4a:dd:4b:47:b8:77:e3:5f:c3:b3:36:10:
9d:f1:84:4c:ae:0b:43:49:dc:c4:3c:39:b7:45:c9:
b2:44:d9:9d:d3:76:72:f1:95:d0:f4:99:74:2c:3b:
99:e1:2e:a9:d7:e2:e2:4f:f0:c0:ea:6a:62:0a:9e:
fd:82:05:d8:43:66:04:e9:cc:6c:bf:57:70:27:e1:
96:ce:90:bd:f3:8b:ae:64:23:ba:8a:8f:e7:16:fc:
d0:77:46:40:85:ea:e4:ee:8e:84:43:8c:f1:29:4d:
be:4f:36:26:68:ef:44:e7:78:8d:aa:70:07:47:15:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6B:87:02:78:81:6B:60:F7:2C:81:48:DC:4F:81:8F:87:D3:BE:38
X509v3 Authority Key Identifier:
keyid:72:CD:EB:56:64:2E:33:58:97:71:E7:FD:A7:1B:B7:1E:01:7F:9D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:38:36:15:48:0e:4f:93:e9:4d:1e:87:53:75:42:13:a1:a6:
60:90:6b:1c:30:0a:00:ec:6c:28:aa:df:e8:05:04:9a:de:cd:
4e:4d:87:3d:42:f2:b8:da:91:21:1d:3c:aa:d4:2b:80:f7:b3:
b5:d1:ee:f6:ca:be:25:a5:53:09:f4:51:ba:ae:9f:84:8f:01:
cf:2f:43:9d:5e:fd:c8:ce:8a:73:fb:5b:c3:80:4c:85:35:c9:
7a:d8:ef:2d:f6:c4:10:41:ff:a3:77:5d:d8:09:91:f5:8a:43:
be:32:b6:08:ae:7b:38:5e:b3:ce:db:b7:45:12:14:96:06:8c:
94:a2:a3:2b:24:78:a0:35:cd:b3:4f:67:29:83:5b:cb:b2:fe:
cf:c5:3c:4c:9a:4c:6d:58:f4:41:7e:da:8c:54:c4:5f:4b:5a:
bd:d2:ac:91:96:6a:04:69:b4:94:30:a8:f8:20:6e:46:0b:d7:
bf:53:05:cf:49:07:47:33:5d:26:29:8a:cc:bb:88:84:3a:fa:
55:92:69:10:4b:74:63:16:27:ea:88:35:ff:3d:b0:b8:de:3b:
f4:2d:4a:75:59:8f:53:ea:57:a5:5d:2e:af:80:d0:25:4d:3d:
96:f2:71:87:71:f9:ea:66:d1:16:d2:45:4b:ff:f6:3e:ce:70:
11:07:e1:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sw6W7tp5lQZLoIZA05qPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyY2RlYjU2NjQyZTMzNTg5NzcxZTdmZGE3MWJiNzFlMDE3
ZjlkOTYwHhcNMjUwNjI4MTgwMDU0WhcNMjUwNjI5MTgwMDU0WjAzMTEwLwYDVQQD
Eyg0ZDZiODcwMjc4ODE2YjYwZjcyYzgxNDhkYzRmODE4Zjg3ZDNiZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbi59fifqOi7gGchSE7ACxx+cFj3
rut5hh9+BXfJJhJLL3i2dWnSft6D5ueZkrQlvrPq+P8cV0zWvoaM0lK7QmncUWJ0
lMQd1+GxAENMREYRUcsED8Jt0428opC1XH1d6w0c/LYKcIwCBClZOgvxZVgjwUrQ
ja4Uxn5qRtAGfSZ+O2lSzahONjlK3UtHuHfjX8OzNhCd8YRMrgtDSdzEPDm3Rcmy
RNmd03Zy8ZXQ9Jl0LDuZ4S6p1+LiT/DA6mpiCp79ggXYQ2YE6cxsv1dwJ+GWzpC9
84uuZCO6io/nFvzQd0ZAherk7o6EQ4zxKU2+TzYmaO9E53iNqnAHRxXcwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1rhwJ4gWtg9yyBSNxPgY+H0744MB8GA1UdIwQY
MBaAFHLN61ZkLjNYl3Hn/acbtx4Bf52WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3MzclZtUXVNMWlYY2VmOXB4dTNIZ0ZfblpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zYzg0NDgtYWY0YS00YjQ4LWE3MmEt
ZTgyNzc0YTE2YTU3LzEvY3MzclZtUXVNMWlYY2VmOXB4dTNIZ0ZfblpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8zYzg0NDgtYWY0YS00YjQ4LWE3MmEtZTgyNzc0YTE2YTU3
LzEvY3MzclZtUXVNMWlYY2VmOXB4dTNIZ0ZfblpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTg2FUgO
T5PpTR6HU3VCE6GmYJBrHDAKAOxsKKrf6AUEmt7NTk2HPULyuNqRIR08qtQrgPez
tdHu9sq+JaVTCfRRuq6fhI8Bzy9DnV79yM6Kc/tbw4BMhTXJetjvLfbEEEH/o3dd
2AmR9YpDvjK2CK57OF6zztu3RRIUlgaMlKKjKyR4oDXNs09nKYNby7L+z8U8TJpM
bVj0QX7ajFTEX0tavdKskZZqBGm0lDCo+CBuRgvXv1MFz0kHRzNdJimKzLuIhDr6
VZJpEEt0YxYn6og1/z2wuN479C1KdVmPU+pXpV0ur4DQJU09lvJxh3H56mbRFtJF
S//2Ps5wEQfhvg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:04 2025 by rpki-client