Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: D1GRTtwcHLabH5UzhytH7OwEbUoYs7CLTb6qJ0THNUk=
Subject key identifier: 43:17:13:F5:86:90:C2:02:92:5B:CC:3A:19:55:95:CD:DF:C5:53:0E
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 019754226E9A77A67A3FC345A724FDEB5DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 10:00:32 +0000
Manifest this update: Mon 09 Jun 2025 10:00:32 +0000
Manifest next update: Tue 10 Jun 2025 10:00:32 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: ZAE5BfPNy1RrqBiFDQ1H91kRteYfjoJvjqQ9L+LiKI0=)
2: O3I8fzz4GA8viyeptOfjUJ2mnRw.roa (hash: MhSpfjBUjJxXqy4aU0rHbneKVULz0h6JWSZvHTRBN24=)
3: ovS3rx1XoRtGLlvdJ72CyzvNZcw.roa (hash: lov3tLPiy71ecc5+P9JXxH2Fu9PCJbxZNtxQg4EVWM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:6e:9a:77:a6:7a:3f:c3:45:a7:24:fd:eb:5d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Jun 9 10:00:32 2025 GMT
Not After : Jun 10 10:00:32 2025 GMT
Subject: CN=431713f58690c202925bcc3a195595cddfc5530e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:98:bf:41:a9:b8:02:49:f5:1b:37:e9:3d:
ec:e2:23:64:21:00:61:8b:a7:51:d7:b7:07:aa:a8:
50:4f:83:af:1f:88:4c:ab:74:32:d5:5a:42:66:04:
9f:97:94:94:70:55:fa:bf:6c:13:20:4a:97:56:8c:
ad:9a:d5:b3:d1:f2:0c:d5:67:2f:52:ce:a5:60:38:
0f:30:71:9d:b0:ea:09:49:90:18:22:bb:74:f6:0a:
f3:c2:22:3a:37:42:e4:f4:3e:24:a0:d3:3c:72:31:
f8:a7:cc:ff:dd:85:4c:87:57:e2:76:26:14:7a:65:
d0:c4:b4:34:ac:f9:f0:e6:ba:53:1f:6e:e0:d0:08:
e0:ab:bd:cd:c6:21:a7:d4:ca:6c:c3:2d:ae:b2:31:
a7:d9:5d:96:7f:57:87:c8:ae:d2:69:0c:af:d2:ec:
44:c1:90:36:b1:66:b5:08:45:88:b5:51:2e:9f:7c:
e5:64:a4:94:04:2e:77:08:ef:d8:4b:e0:86:0f:73:
70:0a:09:95:44:20:34:e2:fd:a5:76:65:b3:0b:51:
25:87:9c:79:f5:10:1c:99:2e:d4:df:71:b5:49:de:
0a:bf:f0:e0:fa:54:4b:85:90:a5:42:1f:03:18:d2:
ca:ac:07:b9:23:32:2c:2c:d1:ea:68:36:2a:4c:78:
0a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:17:13:F5:86:90:C2:02:92:5B:CC:3A:19:55:95:CD:DF:C5:53:0E
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:62:de:76:b4:a0:b3:ad:d3:47:7d:cb:4a:2a:67:9e:af:cf:
6f:d4:fb:a3:f5:91:11:15:cd:c3:30:fb:7e:5e:34:c0:05:8f:
63:96:06:bb:52:bc:89:1c:a8:44:8a:86:5e:20:14:79:39:b0:
9e:65:0e:13:00:f2:e7:f5:2e:1a:d3:d9:1a:cc:d6:2c:24:3b:
88:13:39:90:89:70:0e:fe:40:51:0e:de:84:55:16:c9:a3:2b:
ed:32:07:ea:37:51:67:3a:9a:70:94:d6:55:08:15:5d:5c:e9:
f8:1c:67:64:e1:0b:48:d6:f8:59:33:d6:93:57:3f:f2:42:9c:
c7:e5:35:a3:1a:62:3a:27:0a:c5:8b:6c:d4:a6:a0:62:34:7a:
44:a9:3d:eb:c0:66:bb:96:bb:d5:16:a8:a8:62:cd:95:93:ea:
29:cc:57:17:29:8c:75:6d:f1:44:3c:48:f7:4c:6e:d1:52:57:
fb:10:dc:b5:62:78:b9:7e:e8:f3:84:2a:cf:25:05:ba:88:31:
1a:fc:d1:64:68:20:a4:66:84:4e:7a:c9:86:b7:26:d0:0a:cb:
88:93:ed:f2:44:29:1d:f5:22:fc:52:b3:a5:21:f4:77:04:5c:
26:90:92:a8:a4:d9:ac:b6:4d:f8:42:95:4c:26:a4:dc:f3:2a:
a0:23:29:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUIm6ad6Z6P8NFpyT9613jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZGNiMDJiNjFlM2ExNWVhYzM3M2I5OTJlMGUxYTY1NDVm
NjFlNTIwHhcNMjUwNjA5MTAwMDMyWhcNMjUwNjEwMTAwMDMyWjAzMTEwLwYDVQQD
Eyg0MzE3MTNmNTg2OTBjMjAyOTI1YmNjM2ExOTU1OTVjZGRmYzU1MzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2aYv0GpuAJJ9Rs36T3s4iNkIQBh
i6dR17cHqqhQT4OvH4hMq3Qy1VpCZgSfl5SUcFX6v2wTIEqXVoytmtWz0fIM1Wcv
Us6lYDgPMHGdsOoJSZAYIrt09grzwiI6N0Lk9D4koNM8cjH4p8z/3YVMh1fidiYU
emXQxLQ0rPnw5rpTH27g0Ajgq73NxiGn1Mpswy2usjGn2V2Wf1eHyK7SaQyv0uxE
wZA2sWa1CEWItVEun3zlZKSUBC53CO/YS+CGD3NwCgmVRCA04v2ldmWzC1Elh5x5
9RAcmS7U33G1Sd4Kv/Dg+lRLhZClQh8DGNLKrAe5IzIsLNHqaDYqTHgKKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMXE/WGkMICklvMOhlVlc3fxVMOMB8GA1UdIwQY
MBaAFNzcsCth46FerDc7mS4OGmVF9h5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAt
NjY3NTg0Nzk4NjNlLzEvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAtNjY3NTg0Nzk4NjNl
LzEvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2LedrSg
s63TR33LSipnnq/Pb9T7o/WRERXNwzD7fl40wAWPY5YGu1K8iRyoRIqGXiAUeTmw
nmUOEwDy5/UuGtPZGszWLCQ7iBM5kIlwDv5AUQ7ehFUWyaMr7TIH6jdRZzqacJTW
VQgVXVzp+BxnZOELSNb4WTPWk1c/8kKcx+U1oxpiOicKxYts1KagYjR6RKk968Bm
u5a71RaoqGLNlZPqKcxXFymMdW3xRDxI90xu0VJX+xDctWJ4uX7o84QqzyUFuogx
GvzRZGggpGaETnrJhrcm0ArLiJPt8kQpHfUi/FKzpSH0dwRcJpCSqKTZrLZN+EKV
TCak3PMqoCMpBQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:59:23 2025 by rpki-client