Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File: 3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier: WyrmHRaHLuM6PPlKpZAzPm5ztDltDc3+y0thRjhvg8I=
Subject key identifier: 49:81:70:0D:81:3B:F7:42:F0:99:33:64:C4:69:66:53:1F:9F:DE:A4
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer: /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial: 01984777B0521344B825EAC4692E770C21FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number: 0F5D
Signing time: Sat 26 Jul 2025 16:01:22 +0000
Manifest this update: Sat 26 Jul 2025 16:01:22 +0000
Manifest next update: Sun 27 Jul 2025 16:01:22 +0000
Files and hashes: 1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: QF0Ue1DejyobRFdsoao6S5VwYTd5yNFgeqEmjyJEueY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:b0:52:13:44:b8:25:ea:c4:69:2e:77:0c:21:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de122d172c13b15291e41f945681525826fef892
Validity
Not Before: Jul 26 16:01:22 2025 GMT
Not After : Jul 27 16:01:22 2025 GMT
Subject: CN=4981700d813bf742f0993364c46966531f9fdea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:ec:a8:40:8b:3a:41:eb:c1:78:f1:b6:dd:
0e:60:e0:4a:c9:0e:cd:02:13:fc:91:a2:5d:ce:5b:
0c:ac:73:6f:fb:6c:87:51:ae:38:42:4b:d5:52:35:
5d:e6:f2:c0:81:39:6b:ad:72:25:c7:b8:b6:2f:25:
f8:a9:91:7f:f1:8b:4c:8f:34:a8:32:ce:af:42:8a:
d7:60:e7:58:a2:47:8f:3d:00:c5:2b:d9:32:92:4a:
01:06:df:74:0d:26:b3:19:dd:ec:c5:6c:aa:41:18:
8a:6d:95:10:18:6d:28:2c:56:54:c9:da:16:3d:40:
1d:95:7b:12:7f:7c:ea:01:0e:b1:57:79:e5:a2:76:
75:37:c5:9e:38:1e:50:6d:5b:92:33:ea:d6:4e:ff:
ab:e0:c3:9f:a5:cd:7e:4d:c7:67:10:2b:f4:11:81:
bd:4e:61:91:47:c1:70:45:f7:34:ae:79:b6:d7:a6:
be:e2:90:ff:a9:6a:bd:89:a0:c9:80:cf:26:86:c3:
b9:37:a4:72:0f:fc:8f:4b:db:bc:38:d8:fa:b3:e0:
20:fe:72:e5:78:07:58:86:df:b8:40:e1:df:e8:72:
75:8b:e4:69:4c:3e:df:4a:63:09:14:90:a9:d2:b4:
c9:df:bf:55:b2:13:58:eb:86:a3:30:e4:e3:9a:0d:
92:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:81:70:0D:81:3B:F7:42:F0:99:33:64:C4:69:66:53:1F:9F:DE:A4
X509v3 Authority Key Identifier:
keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d7:c5:dd:55:b8:99:5f:5e:99:3e:50:f4:9c:8d:06:7e:5b:
a3:6b:d9:91:00:ee:64:91:28:7f:f5:60:30:4a:e0:58:ff:ea:
5f:68:94:31:1d:23:b6:25:c7:dd:1c:02:89:fb:d2:2a:12:08:
14:ad:a4:d0:0d:4e:cf:14:bb:84:c6:71:a9:e1:9d:e6:fd:15:
a5:a8:02:62:47:6b:1b:7d:66:2f:5a:58:50:eb:31:7f:85:0d:
1c:89:01:26:76:19:af:46:16:19:86:49:79:9b:84:8e:98:96:
46:fe:0d:b4:b9:a9:3b:85:dc:b1:76:ad:99:41:d7:e3:c9:4f:
03:e1:ab:7a:b9:92:4f:ec:6b:df:e8:90:f9:ca:7c:9e:fa:38:
8b:a7:4b:42:48:28:21:7c:e4:e0:d8:eb:7f:b6:3d:4a:39:18:
f4:42:7f:ed:17:ab:4a:c1:b5:8e:bc:53:90:5a:a0:77:11:04:
2e:e7:b5:7e:dc:26:15:b0:e5:fa:99:05:6a:7b:5d:7a:3f:2d:
dc:67:71:72:16:10:9a:f7:45:f5:18:ba:2e:ce:99:92:a2:0e:
e8:ca:11:a7:c2:24:19:58:9f:c1:b7:13:c8:b0:fe:a4:b4:d7:
29:b8:f2:aa:e6:82:57:77:75:5e:61:12:d5:86:a9:ea:a7:3f:
db:0d:00:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd7BSE0S4JerEaS53DCH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTIyZDE3MmMxM2IxNTI5MWU0MWY5NDU2ODE1MjU4MjZm
ZWY4OTIwHhcNMjUwNzI2MTYwMTIyWhcNMjUwNzI3MTYwMTIyWjAzMTEwLwYDVQQD
Eyg0OTgxNzAwZDgxM2JmNzQyZjA5OTMzNjRjNDY5NjY1MzFmOWZkZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAbsqECLOkHrwXjxtt0OYOBKyQ7N
AhP8kaJdzlsMrHNv+2yHUa44QkvVUjVd5vLAgTlrrXIlx7i2LyX4qZF/8YtMjzSo
Ms6vQorXYOdYokePPQDFK9kykkoBBt90DSazGd3sxWyqQRiKbZUQGG0oLFZUydoW
PUAdlXsSf3zqAQ6xV3nlonZ1N8WeOB5QbVuSM+rWTv+r4MOfpc1+TcdnECv0EYG9
TmGRR8FwRfc0rnm216a+4pD/qWq9iaDJgM8mhsO5N6RyD/yPS9u8ONj6s+Ag/nLl
eAdYht+4QOHf6HJ1i+RpTD7fSmMJFJCp0rTJ379VshNY64ajMOTjmg2S7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmBcA2BO/dC8JkzZMRpZlMfn96kMB8GA1UdIwQY
MBaAFN4SLRcsE7FSkeQflFaBUlgm/viSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84MzcwMjItZmRkYi00ZmM5LWE3MzMt
MzY1YzRiNWMyNGVkLzEvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84MzcwMjItZmRkYi00ZmM5LWE3MzMtMzY1YzRiNWMyNGVk
LzEvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9fF3VW4
mV9emT5Q9JyNBn5bo2vZkQDuZJEof/VgMErgWP/qX2iUMR0jtiXH3RwCifvSKhII
FK2k0A1OzxS7hMZxqeGd5v0VpagCYkdrG31mL1pYUOsxf4UNHIkBJnYZr0YWGYZJ
eZuEjpiWRv4NtLmpO4XcsXatmUHX48lPA+GrermST+xr3+iQ+cp8nvo4i6dLQkgo
IXzk4Njrf7Y9SjkY9EJ/7RerSsG1jrxTkFqgdxEELue1ftwmFbDl+pkFantdej8t
3GdxchYQmvdF9Ri6Ls6ZkqIO6MoRp8IkGVifwbcTyLD+pLTXKbjyquaCV3d1XmES
1Yap6qc/2w0AfQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:32:03 2025 by rpki-client