Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: v5ssKN31a/Ffvx1Jm00nx6+mp9F3tze04HvQYu5H+Z0=
Subject key identifier: CB:AD:C6:5A:2D:AD:82:61:EB:08:85:58:76:5A:A2:F8:69:B3:3B:79
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 0197B8FDC21D347FE23E8CEEEEA452F98401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 0ECC
Signing time: Sun 29 Jun 2025 00:02:07 +0000
Manifest this update: Sun 29 Jun 2025 00:02:07 +0000
Manifest next update: Mon 30 Jun 2025 00:02:07 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: k2kxpQ0HDSXQU3B7QTsy44i6cSKNL3+ByH0HiD8Njcc=)
2: f98-QGGyvPNag3NBWDooTVrQ2vI.roa (hash: HJhPbHQVg92t7q01K4xm1xNnj11AYPaciJd3bC3Ng+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:c2:1d:34:7f:e2:3e:8c:ee:ee:a4:52:f9:84:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Jun 29 00:02:07 2025 GMT
Not After : Jun 30 00:02:07 2025 GMT
Subject: CN=cbadc65a2dad8261eb088558765aa2f869b33b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:ed:85:b7:6b:2e:c5:59:31:8f:75:c8:f0:
fe:bc:ae:c1:64:5a:06:f5:90:21:22:30:25:52:16:
58:7a:32:ba:68:a8:be:2e:bf:96:13:76:26:fc:1d:
3a:b5:7a:85:f6:ad:ae:27:37:97:ad:79:1f:3c:ae:
9d:0c:bc:61:50:02:11:8b:10:0c:22:66:ad:a2:3e:
c7:39:b5:1d:95:bf:af:c5:97:18:22:74:00:11:ec:
24:00:29:03:6f:13:db:5d:25:52:b6:8a:78:af:fe:
bb:06:7a:9e:52:2a:1e:d9:f1:70:d7:9f:9c:f7:57:
c8:40:a2:6f:1e:92:82:b3:52:90:f7:ad:e6:b8:f5:
48:fa:ac:9b:b9:e7:d2:a0:c8:d9:a2:b6:8e:e3:26:
b1:c7:be:86:26:c0:2a:af:75:6f:17:d2:c1:4f:77:
99:f3:6c:35:c2:c1:74:87:61:9b:88:b2:2d:e4:ca:
36:f4:76:3a:40:9b:50:8e:e1:28:bd:e0:e3:b9:d2:
6f:34:79:a1:ec:48:0a:5e:16:aa:f8:f1:f3:ad:11:
77:02:84:1b:8a:93:62:55:2c:8e:65:85:09:2e:be:
7b:63:6c:03:f6:76:6b:b4:c5:b1:44:1c:b7:c1:4f:
f9:c3:b5:08:9f:6e:85:2d:e8:09:7b:c8:d4:5d:23:
d6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AD:C6:5A:2D:AD:82:61:EB:08:85:58:76:5A:A2:F8:69:B3:3B:79
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:83:9b:1d:3a:74:ef:1d:8e:41:4a:e1:4b:9b:46:2f:25:66:
cd:26:36:45:24:c0:a3:8e:22:9a:a8:95:cf:9d:79:c9:1d:78:
7d:76:e9:56:b0:23:0d:df:c8:f3:1b:90:b7:a8:31:88:18:e6:
9e:79:7c:39:f3:ae:65:38:43:e2:62:6e:68:24:d7:64:b4:91:
8d:2d:a8:37:1b:90:02:a5:49:ae:71:00:44:34:6b:29:a6:95:
9a:f4:1e:60:92:1c:f6:8b:c6:e0:84:35:e8:ab:14:31:84:6f:
d2:f3:16:7c:7e:f6:f7:9c:08:b6:47:49:7b:6d:15:1c:91:a9:
ac:4c:83:bb:54:b0:13:8b:e9:61:d1:74:80:cf:0c:ab:73:7c:
47:38:d5:51:c3:21:ee:27:64:e9:49:97:b7:95:81:6a:b2:af:
08:e1:d6:27:8e:34:a4:f2:bf:b1:a9:7d:26:9a:e9:85:df:db:
9a:d2:0e:dd:1f:b3:97:bc:74:0b:0b:1c:0e:8d:17:57:78:b5:
45:c3:17:82:ac:94:ab:67:94:3d:43:81:b9:57:9c:f7:a4:14:
9b:cb:54:c2:66:fb:77:4e:1a:00:ac:00:db:a8:26:dc:46:81:
3e:7b:f0:d7:8c:7d:32:81:92:7f:cd:20:02:e0:81:84:98:32:
7e:8f:a0:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/cIdNH/iPozu7qRS+YQBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDhkNTA4MjE1MzQwZWFjMGYxNGYwYjc0NzQ5ZDFjOGVj
OWY1NjYwHhcNMjUwNjI5MDAwMjA3WhcNMjUwNjMwMDAwMjA3WjAzMTEwLwYDVQQD
EyhjYmFkYzY1YTJkYWQ4MjYxZWIwODg1NTg3NjVhYTJmODY5YjMzYjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD3thbdrLsVZMY91yPD+vK7BZFoG
9ZAhIjAlUhZYejK6aKi+Lr+WE3Ym/B06tXqF9q2uJzeXrXkfPK6dDLxhUAIRixAM
Imatoj7HObUdlb+vxZcYInQAEewkACkDbxPbXSVStop4r/67BnqeUioe2fFw15+c
91fIQKJvHpKCs1KQ963muPVI+qybuefSoMjZoraO4yaxx76GJsAqr3VvF9LBT3eZ
82w1wsF0h2GbiLIt5Mo29HY6QJtQjuEoveDjudJvNHmh7EgKXhaq+PHzrRF3AoQb
ipNiVSyOZYUJLr57Y2wD9nZrtMWxRBy3wU/5w7UIn26FLegJe8jUXSPWgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMutxlotrYJh6wiFWHZaovhpszt5MB8GA1UdIwQY
MBaAFN1I1QghU0DqwPFPC3R0nRyOyfVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iYTE2YmEtYThjOC00NDJhLWJhYjkt
NDVlNDc0MDAyM2RiLzEvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iYTE2YmEtYThjOC00NDJhLWJhYjktNDVlNDc0MDAyM2Ri
LzEvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIObHTp0
7x2OQUrhS5tGLyVmzSY2RSTAo44imqiVz515yR14fXbpVrAjDd/I8xuQt6gxiBjm
nnl8OfOuZThD4mJuaCTXZLSRjS2oNxuQAqVJrnEARDRrKaaVmvQeYJIc9ovG4IQ1
6KsUMYRv0vMWfH7295wItkdJe20VHJGprEyDu1SwE4vpYdF0gM8Mq3N8RzjVUcMh
7idk6UmXt5WBarKvCOHWJ440pPK/sal9Jprphd/bmtIO3R+zl7x0CwscDo0XV3i1
RcMXgqyUq2eUPUOBuVec96QUm8tUwmb7d04aAKwA26gm3EaBPnvw14x9MoGSf80g
AuCBhJgyfo+g1Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:35:23 2025 by rpki-client