Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
File: a3YD1VVBw1n46HRHfL6K8h9peHw.mft (raw, json)
Hash identifier: PuG5KJGDsJfzDReOno8HaXSojkg5h0p4qSneG99L2Hw=
Subject key identifier: 3C:23:17:DD:8D:31:5A:3A:01:3E:5F:64:78:2E:B8:A9:58:02:8D:C7
Authority key identifier: 6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
Certificate issuer: /CN=6b7603d55541c359f8e874477cbe8af21f69787c
Certificate serial: 019748553FE64F98916868003ACC8211CA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
Manifest number: 0274
Signing time: Sat 07 Jun 2025 03:00:35 +0000
Manifest this update: Sat 07 Jun 2025 03:00:35 +0000
Manifest next update: Sun 08 Jun 2025 03:00:35 +0000
Files and hashes: 1: a3YD1VVBw1n46HRHfL6K8h9peHw.crl (hash: FfJfMXXYbQWPJdH4RC70tXUQpLin3LEVkTS/qKktqh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:3f:e6:4f:98:91:68:68:00:3a:cc:82:11:ca:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7603d55541c359f8e874477cbe8af21f69787c
Validity
Not Before: Jun 7 03:00:35 2025 GMT
Not After : Jun 8 03:00:35 2025 GMT
Subject: CN=3c2317dd8d315a3a013e5f64782eb8a958028dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:11:a3:e2:ea:8e:9c:00:b3:c4:6b:c3:31:
ff:7d:67:6b:e5:38:e7:45:89:83:fb:e4:92:1b:18:
e1:9d:38:b5:45:e4:27:29:28:da:5f:c4:2e:d4:f0:
a1:be:5c:50:89:14:c5:c7:ae:3e:15:31:0b:f1:d7:
21:7a:f6:08:5c:ed:bb:1a:3d:ca:ec:c1:cc:0c:07:
75:33:b9:cb:13:07:74:23:4c:26:7e:c1:a3:f4:2c:
f9:36:5c:eb:ed:13:ab:36:1e:05:fd:61:39:e4:10:
a0:9f:61:9d:8d:c1:0a:32:94:d7:15:82:36:d9:4f:
5c:85:16:82:73:05:51:83:dd:30:c1:c9:06:3c:4b:
c0:4c:a1:03:f2:68:67:8f:f1:ce:c9:7e:ef:b6:cc:
0d:24:49:3e:f5:ed:11:e5:89:15:e2:4f:27:9e:d7:
1a:bc:7d:02:52:4f:fd:64:e7:4d:05:5e:01:14:89:
0c:d7:92:48:ca:41:19:9a:11:0f:62:d4:22:51:a0:
31:86:2c:86:c8:d5:92:03:ed:0c:16:83:bd:8e:e1:
45:78:59:e7:8e:93:30:be:1c:96:d3:fa:9f:e9:8d:
7d:2a:46:2c:17:cc:28:d3:de:f8:ff:80:50:cb:3c:
48:da:35:4a:eb:98:e5:e8:85:92:20:a3:c4:63:27:
ba:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:23:17:DD:8D:31:5A:3A:01:3E:5F:64:78:2E:B8:A9:58:02:8D:C7
X509v3 Authority Key Identifier:
keyid:6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c9:b8:64:43:0d:9d:57:49:af:1f:af:64:a8:20:4e:37:c2:
fe:fd:75:1a:ee:6e:ba:2b:98:30:0d:2b:3d:23:ac:1e:f6:e5:
be:ac:68:1d:07:3b:5e:bf:c6:c3:ee:75:ce:90:7e:04:1d:38:
6d:72:56:38:26:89:03:27:48:c9:ea:ee:f1:c6:ab:f0:a7:29:
41:53:8a:8b:7c:14:a5:83:35:80:1c:ff:99:a5:2e:99:77:cf:
ea:39:70:f2:db:27:f3:7f:37:d4:f0:6e:d5:f4:c8:24:34:d5:
10:e7:d2:ff:fe:8d:3a:38:56:ed:43:3a:e4:07:9c:9f:e5:53:
3b:59:20:74:a1:92:24:08:b2:1a:89:10:fb:ae:84:16:95:d1:
fa:ff:2a:60:07:48:35:c2:5c:8f:2e:48:ac:6f:c4:06:d1:3d:
af:65:30:de:43:a3:69:6c:da:b8:f6:6f:0e:56:a4:75:06:19:
2a:12:89:fa:b4:a9:4b:09:65:f1:70:36:6a:d4:f6:a9:6a:15:
6a:a0:8f:1c:25:63:bb:66:05:79:2d:ff:a9:36:0c:ed:92:0f:
8e:66:08:27:b4:39:4a:8a:3a:50:0c:93:17:47:e9:b5:b2:da:
b7:a6:7e:63:d2:a1:72:e9:22:47:4e:80:37:ca:57:97:42:10:
23:b8:4e:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVT/mT5iRaGgAOsyCEcosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNzYwM2Q1NTU0MWMzNTlmOGU4NzQ0NzdjYmU4YWYyMWY2
OTc4N2MwHhcNMjUwNjA3MDMwMDM1WhcNMjUwNjA4MDMwMDM1WjAzMTEwLwYDVQQD
EygzYzIzMTdkZDhkMzE1YTNhMDEzZTVmNjQ3ODJlYjhhOTU4MDI4ZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjoRo+LqjpwAs8RrwzH/fWdr5Tjn
RYmD++SSGxjhnTi1ReQnKSjaX8Qu1PChvlxQiRTFx64+FTEL8dchevYIXO27Gj3K
7MHMDAd1M7nLEwd0I0wmfsGj9Cz5Nlzr7ROrNh4F/WE55BCgn2GdjcEKMpTXFYI2
2U9chRaCcwVRg90wwckGPEvATKED8mhnj/HOyX7vtswNJEk+9e0R5YkV4k8nntca
vH0CUk/9ZOdNBV4BFIkM15JIykEZmhEPYtQiUaAxhiyGyNWSA+0MFoO9juFFeFnn
jpMwvhyW0/qf6Y19KkYsF8wo0974/4BQyzxI2jVK65jl6IWSIKPEYye6OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwjF92NMVo6AT5fZHguuKlYAo3HMB8GA1UdIwQY
MBaAFGt2A9VVQcNZ+Oh0R3y+ivIfaXh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTNZRDFWVkJ3MW40NkhSSGZMNks4aDlwZUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zYzU4OWYtMmJkMi00OWJkLWJkODEt
NTdlNjMyMGIxMThmLzEvYTNZRDFWVkJ3MW40NkhSSGZMNks4aDlwZUh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zYzU4OWYtMmJkMi00OWJkLWJkODEtNTdlNjMyMGIxMThm
LzEvYTNZRDFWVkJ3MW40NkhSSGZMNks4aDlwZUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvcm4ZEMN
nVdJrx+vZKggTjfC/v11Gu5uuiuYMA0rPSOsHvblvqxoHQc7Xr/Gw+51zpB+BB04
bXJWOCaJAydIyeru8car8KcpQVOKi3wUpYM1gBz/maUumXfP6jlw8tsn83831PBu
1fTIJDTVEOfS//6NOjhW7UM65Aecn+VTO1kgdKGSJAiyGokQ+66EFpXR+v8qYAdI
NcJcjy5IrG/EBtE9r2Uw3kOjaWzauPZvDlakdQYZKhKJ+rSpSwll8XA2atT2qWoV
aqCPHCVju2YFeS3/qTYM7ZIPjmYIJ7Q5Soo6UAyTF0fptbLat6Z+Y9KhcukiR06A
N8pXl0IQI7hO4w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:35:31 2025 by rpki-client