Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier: yZXO9k1HXzAIEFI1lknutDF/hzUB18aw0C12n3hspSA=
Subject key identifier: D3:4B:35:B1:2B:9A:66:02:99:03:EB:26:81:40:FC:F8:3F:B1:6F:FF
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial: 0197B88F0FC0BE21C720E8627DE771354FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number: 128C
Signing time: Sat 28 Jun 2025 22:01:12 +0000
Manifest this update: Sat 28 Jun 2025 22:01:12 +0000
Manifest next update: Sun 29 Jun 2025 22:01:12 +0000
Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: So7darckyZj3/Xk/cREf9aO+zEfSYhUAd+7MNKb9WyI=)
2: K668RnN8R9Zt_BhcvITxrQRhBNs.roa (hash: 8wo0Wz+L+phQUblwdU8c4kneYF4uQyTcefZ7CpD7SsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:0f:c0:be:21:c7:20:e8:62:7d:e7:71:35:4f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
Validity
Not Before: Jun 28 22:01:12 2025 GMT
Not After : Jun 29 22:01:12 2025 GMT
Subject: CN=d34b35b12b9a66029903eb268140fcf83fb16fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:9c:b6:dc:f1:3b:92:e0:11:b4:03:40:52:
d5:27:16:aa:3b:7c:14:7e:79:03:88:ca:5f:73:50:
82:61:56:68:93:01:43:71:4b:b7:47:7a:60:f7:d7:
84:b2:f0:e4:79:4c:3f:b1:3e:5c:e3:89:72:38:f4:
c6:92:ca:9f:c6:f5:4b:ab:27:68:a0:57:71:16:25:
2f:e5:0c:01:37:a8:49:41:87:05:4c:e4:d8:02:ea:
c5:45:97:eb:97:eb:82:45:18:c0:e9:0f:2d:f5:d9:
d9:fc:35:32:09:99:f2:52:70:cb:e1:92:e8:42:96:
fe:de:8b:4f:80:5f:ae:71:ff:99:1d:a2:1f:ac:24:
9b:a9:a8:0d:dc:7c:48:13:16:06:b9:05:f2:3c:64:
36:52:ec:e1:fe:34:e1:ba:16:c3:3e:f6:3d:ae:97:
e5:2c:26:11:f7:a4:e8:44:60:eb:d9:be:df:df:7b:
7d:c5:7a:3c:ea:9e:8a:81:82:13:83:ee:93:98:0a:
5a:47:24:40:ff:04:c5:db:98:0f:6d:cc:f2:58:1c:
87:3f:d3:e8:5c:85:a1:75:fd:38:ca:ab:50:b5:ed:
07:b1:10:63:c9:60:88:7c:87:d4:58:ff:ac:c9:20:
ed:3c:6a:86:c6:91:21:40:22:cf:2d:6e:5a:56:e6:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4B:35:B1:2B:9A:66:02:99:03:EB:26:81:40:FC:F8:3F:B1:6F:FF
X509v3 Authority Key Identifier:
keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5a:e5:07:89:3e:13:66:f8:77:9e:ad:ab:fd:54:7b:09:3f:
b3:d1:d5:96:37:b7:3d:d3:f9:31:d1:06:0e:3d:21:44:e4:49:
82:61:66:7b:af:b3:21:b0:5b:f2:d2:8b:42:b6:51:55:15:24:
66:3b:5a:3b:da:f8:bb:b6:17:01:4c:60:00:aa:2a:f0:86:b8:
1c:b7:b6:75:8e:d2:7f:ec:cc:fd:48:4b:44:a9:8c:e1:28:77:
71:b5:05:62:3d:49:70:ef:cd:3e:26:42:ef:dd:24:d6:0a:15:
73:b7:89:ea:ee:d9:86:a4:27:f4:e3:d9:86:d0:f1:fa:3a:d1:
fa:1e:ce:ea:e8:ee:33:f3:3c:94:46:84:53:91:30:7b:9c:cc:
73:82:4b:2e:29:2f:86:fa:3a:66:6f:e0:2e:c8:dd:ca:a9:6c:
93:42:ea:ab:b4:71:47:a5:97:59:2a:05:a7:53:c7:e7:ec:6a:
26:a8:1b:23:70:c8:31:0d:ac:4c:1d:35:a1:06:70:f1:3e:d5:
79:98:6a:3c:2d:10:ba:d4:6b:bb:79:17:e4:b0:de:2a:88:75:
01:c5:83:b4:71:04:0a:0d:c5:10:01:8b:66:36:b2:43:33:f0:
1d:9d:87:3b:b5:b0:80:9e:54:c4:8e:06:f0:be:57:e4:77:76:
1b:d1:50:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jw/AviHHIOhifedxNU/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOWZmNjE5NTA5NmEwOThjMTkyODE1NDhlNDEwN2I4Njdj
NzNhZmYwHhcNMjUwNjI4MjIwMTEyWhcNMjUwNjI5MjIwMTEyWjAzMTEwLwYDVQQD
EyhkMzRiMzViMTJiOWE2NjAyOTkwM2ViMjY4MTQwZmNmODNmYjE2ZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHacttzxO5LgEbQDQFLVJxaqO3wU
fnkDiMpfc1CCYVZokwFDcUu3R3pg99eEsvDkeUw/sT5c44lyOPTGksqfxvVLqydo
oFdxFiUv5QwBN6hJQYcFTOTYAurFRZfrl+uCRRjA6Q8t9dnZ/DUyCZnyUnDL4ZLo
Qpb+3otPgF+ucf+ZHaIfrCSbqagN3HxIExYGuQXyPGQ2Uuzh/jThuhbDPvY9rpfl
LCYR96ToRGDr2b7f33t9xXo86p6KgYITg+6TmApaRyRA/wTF25gPbczyWByHP9Po
XIWhdf04yqtQte0HsRBjyWCIfIfUWP+sySDtPGqGxpEhQCLPLW5aVuZ/ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNLNbErmmYCmQPrJoFA/Pg/sW//MB8GA1UdIwQY
MBaAFN6f9hlQlqCYwZKBVI5BB7hnxzr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83MzY3OWEtY2IwMS00M2NkLTkyNDUt
YTI5YzZkYWUzNWMwLzEvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83MzY3OWEtY2IwMS00M2NkLTkyNDUtYTI5YzZkYWUzNWMw
LzEvM3BfMkdWQ1dvSmpCa29GVWprRUh1R2ZIT3Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFrlB4k+
E2b4d56tq/1Uewk/s9HVlje3PdP5MdEGDj0hRORJgmFme6+zIbBb8tKLQrZRVRUk
ZjtaO9r4u7YXAUxgAKoq8Ia4HLe2dY7Sf+zM/UhLRKmM4Sh3cbUFYj1JcO/NPiZC
790k1goVc7eJ6u7ZhqQn9OPZhtDx+jrR+h7O6ujuM/M8lEaEU5Ewe5zMc4JLLikv
hvo6Zm/gLsjdyqlsk0Lqq7RxR6WXWSoFp1PH5+xqJqgbI3DIMQ2sTB01oQZw8T7V
eZhqPC0QutRru3kX5LDeKoh1AcWDtHEECg3FEAGLZjayQzPwHZ2HO7WwgJ5UxI4G
8L5X5Hd2G9FQKw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:32:25 2025 by rpki-client