Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File: 3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier: slFg6xtCQmYUcxTkL1lxTxo10Bj0+r0v9R2mhfrtqNI=
Subject key identifier: 40:51:E2:BF:8F:13:6B:69:F5:22:EC:0E:27:D0:11:15:E7:07:AD:1F
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 019746D4A8031935B4459AE08DC1F1A24508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number: 101C
Signing time: Fri 06 Jun 2025 20:00:30 +0000
Manifest this update: Fri 06 Jun 2025 20:00:30 +0000
Manifest next update: Sat 07 Jun 2025 20:00:30 +0000
Files and hashes: 1: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: xu6Mi5izA/dvg0LhLLg47DMCiiv3xaNctaERQx8zbkE=)
2: To63YyOS4m4xGKG36WLK52zQE8c.roa (hash: tp9xM1hLtDqI8FvsSwdqSoCI37g77m4oJd7PdWAciIs=)
3: rNJomldCeu_xMB-3_GrfVy4SpuA.roa (hash: 0qwCuh+Crxi2V764XIv8ArKA6g54Zdfi93Itg0+iAvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:a8:03:19:35:b4:45:9a:e0:8d:c1:f1:a2:45:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Jun 6 20:00:30 2025 GMT
Not After : Jun 7 20:00:30 2025 GMT
Subject: CN=4051e2bf8f136b69f522ec0e27d01115e707ad1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:90:f1:9c:45:35:71:c9:29:0d:3a:8b:23:
2d:a6:34:f1:7f:5e:0c:8c:c6:32:02:a0:61:2c:28:
2f:b8:ec:c7:04:e4:49:cd:3d:81:04:c9:d1:5a:de:
c6:77:0d:da:8c:f2:e7:17:9c:66:a9:ba:3a:76:a5:
76:5e:66:d9:60:db:7f:cf:cb:46:6e:49:f2:85:4e:
4e:d5:1b:da:57:47:bb:bc:59:0a:3a:9a:26:e1:06:
34:70:ac:1b:ba:76:c5:a2:ab:79:5b:ba:a7:26:84:
5c:a3:52:19:42:91:12:01:c5:92:78:b7:55:ef:b7:
a1:dd:04:10:21:2b:ff:ec:56:f6:5f:94:c0:f0:f4:
61:a8:62:ea:29:e9:d7:88:ab:64:41:8f:36:4e:30:
bb:9e:2c:f5:d4:c3:06:2f:36:1f:e2:0a:92:4f:bb:
c1:a1:b7:d4:91:2b:21:fa:87:6e:3e:08:a0:2f:ff:
19:08:94:2c:03:66:14:73:11:d3:7b:f6:2a:3e:a0:
76:82:0d:68:7b:5d:56:32:60:3e:e3:47:a9:0d:74:
a0:3c:87:03:d7:04:c5:56:02:88:b0:e5:c0:0d:d8:
b0:c1:d8:c6:45:6c:4c:8a:cb:fb:11:84:e8:ba:af:
6e:fd:dc:87:d4:7f:85:ab:1b:d4:67:45:40:cf:5c:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:51:E2:BF:8F:13:6B:69:F5:22:EC:0E:27:D0:11:15:E7:07:AD:1F
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f9:01:d1:c7:5b:95:c1:81:b4:db:57:44:b6:98:b2:37:f5:
0f:87:a7:14:5e:3b:fb:5d:20:c1:80:df:df:95:a1:c6:db:53:
41:0a:71:76:83:ea:be:eb:d0:75:65:b0:b7:2e:8a:a0:c2:b5:
ae:ff:e3:85:f1:66:9d:99:d2:13:f8:73:6a:5c:9b:23:0d:7b:
df:19:2c:33:fa:dc:06:06:05:47:f2:cf:37:67:6f:96:41:9b:
60:1c:e6:4f:a6:ad:a6:78:71:3f:33:48:2e:29:54:43:56:b7:
06:34:e8:18:ac:93:3d:13:b7:e2:2b:e5:ed:0e:1a:76:74:77:
7a:4a:3b:7f:32:81:8c:0b:9a:2a:32:ca:e9:48:b1:7c:94:2f:
62:00:b6:9b:02:f0:58:95:ba:2f:21:71:ad:33:10:81:81:2d:
e8:33:15:2d:75:ea:1d:af:37:79:9b:be:54:60:14:f9:30:0f:
08:c7:ab:0d:e1:a9:0f:75:ca:3b:0d:4b:5d:1a:f5:c2:b9:15:
ef:40:be:63:fb:04:ec:e8:c9:a3:0f:6b:b3:a5:3c:ab:dd:38:
4e:c8:cb:8a:44:51:96:66:32:f7:95:35:cf:4d:5b:6c:f7:36:
2c:e6:37:4d:ed:61:06:87:71:a8:e4:cc:fa:7d:bd:f0:35:ef:
31:50:0b:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1KgDGTW0RZrgjcHxokUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTQ2MWMyMTFiZjM1NTFjNTUwN2M5MzBiNDIwNGM2ZWM0
M2IzMjIwHhcNMjUwNjA2MjAwMDMwWhcNMjUwNjA3MjAwMDMwWjAzMTEwLwYDVQQD
Eyg0MDUxZTJiZjhmMTM2YjY5ZjUyMmVjMGUyN2QwMTExNWU3MDdhZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykCQ8ZxFNXHJKQ06iyMtpjTxf14M
jMYyAqBhLCgvuOzHBORJzT2BBMnRWt7Gdw3ajPLnF5xmqbo6dqV2XmbZYNt/z8tG
bknyhU5O1RvaV0e7vFkKOpom4QY0cKwbunbFoqt5W7qnJoRco1IZQpESAcWSeLdV
77eh3QQQISv/7Fb2X5TA8PRhqGLqKenXiKtkQY82TjC7niz11MMGLzYf4gqST7vB
obfUkSsh+oduPgigL/8ZCJQsA2YUcxHTe/YqPqB2gg1oe11WMmA+40epDXSgPIcD
1wTFVgKIsOXADdiwwdjGRWxMisv7EYTouq9u/dyH1H+FqxvUZ0VAz1wnMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBR4r+PE2tp9SLsDifQERXnB60fMB8GA1UdIwQY
MBaAFN6UYcIRvzVRxVB8kwtCBMbsQ7MiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2Zjct
ODIwMmE0NjdkNzUzLzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2ZjctODIwMmE0NjdkNzUz
LzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/kB0cdb
lcGBtNtXRLaYsjf1D4enFF47+10gwYDf35WhxttTQQpxdoPqvuvQdWWwty6KoMK1
rv/jhfFmnZnSE/hzalybIw173xksM/rcBgYFR/LPN2dvlkGbYBzmT6atpnhxPzNI
LilUQ1a3BjToGKyTPRO34ivl7Q4adnR3eko7fzKBjAuaKjLK6UixfJQvYgC2mwLw
WJW6LyFxrTMQgYEt6DMVLXXqHa83eZu+VGAU+TAPCMerDeGpD3XKOw1LXRr1wrkV
70C+Y/sE7OjJow9rs6U8q904TsjLikRRlmYy95U1z01bbPc2LOY3Te1hBodxqOTM
+n298DXvMVALcw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 05:02:21 2025 by rpki-client