Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: yYBi6vxEubAe0JQoHvvaCwjqo6rpp/ZmAxuurc9PF4Y=
Subject key identifier: AA:B6:A3:2C:5E:1C:FE:EE:B3:56:8A:71:AD:40:A5:33:C0:F4:91:C5
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 019748F9F79998B9A0EDCB0673AED9AF7214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 1510
Signing time: Sat 07 Jun 2025 06:00:30 +0000
Manifest this update: Sat 07 Jun 2025 06:00:30 +0000
Manifest next update: Sun 08 Jun 2025 06:00:30 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: 8K7ONwy8VoGoh8ophV2tDNci3uzevJqD5ScVdqZ1a/4=)
2: KC65iLduV38Y-_4YeZcOkvub1x0.roa (hash: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:f7:99:98:b9:a0:ed:cb:06:73:ae:d9:af:72:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Jun 7 06:00:30 2025 GMT
Not After : Jun 8 06:00:30 2025 GMT
Subject: CN=aab6a32c5e1cfeeeb3568a71ad40a533c0f491c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:d7:a0:2e:6b:5d:bd:d5:2d:78:83:11:44:
34:89:63:14:10:db:9f:c8:95:4c:1f:7d:63:f4:a1:
76:fb:6d:b2:6b:09:3c:10:0b:d6:84:b7:ad:06:69:
19:fc:75:78:49:4d:8e:96:d3:b0:ec:b9:c9:c6:43:
5b:37:38:fb:35:b3:f3:9c:93:5b:ec:42:d9:c4:46:
72:ee:7b:7a:38:25:64:7f:d0:e1:c3:4f:e4:aa:b2:
38:9a:d1:1f:9f:07:c2:99:46:4b:58:64:82:00:97:
e5:d3:4e:6c:42:39:b2:f8:58:5a:7a:e6:ce:a2:3c:
44:5a:42:08:70:3b:c1:f5:c0:21:53:b5:8a:ed:70:
ce:64:67:6a:01:f9:74:12:24:63:4e:ad:69:36:d2:
a6:e9:18:51:01:66:ec:e2:12:20:06:bc:71:53:c9:
1b:64:fa:97:11:c1:d8:8a:41:d4:54:10:b5:9c:88:
67:80:07:44:c2:e1:a9:b4:c7:59:f9:71:e9:e6:56:
7a:2c:97:71:62:8f:09:04:c9:00:2a:fb:87:ad:32:
49:a5:58:e2:7a:17:6a:8f:55:93:fc:3d:f1:a2:f9:
5e:ea:18:0b:bf:74:80:c4:d1:94:86:7a:58:63:c5:
54:60:a0:08:fe:d4:70:68:2b:4d:56:1e:52:d7:f3:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B6:A3:2C:5E:1C:FE:EE:B3:56:8A:71:AD:40:A5:33:C0:F4:91:C5
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:04:0b:8c:87:15:55:00:de:5b:88:d3:7a:9b:7f:5b:60:c2:
f3:65:f3:a5:ea:ea:02:d4:75:53:5a:7a:3e:d5:78:4e:22:f2:
7b:ca:57:6a:5f:10:cd:b4:63:89:d5:0e:36:68:31:18:98:57:
d5:36:09:66:f9:86:53:7e:b8:de:ae:c0:90:6e:c0:4b:3f:b9:
bb:a9:e8:17:7d:84:4e:b5:6f:97:4c:d1:d0:d2:4e:08:a0:5a:
b5:0a:3a:3d:1a:3c:ff:bd:07:1b:25:2d:09:a1:c6:9a:aa:51:
31:8f:08:00:83:13:91:3e:f3:29:ab:46:d7:5d:3a:0b:77:a4:
71:d3:6e:55:10:88:4d:7a:e8:6b:27:08:d7:31:ad:e5:f5:d0:
80:0f:ef:4d:81:cb:2c:70:59:93:50:5b:5b:86:e0:46:67:49:
e2:78:85:24:fe:6d:38:50:1a:d3:d2:0b:09:15:0f:aa:5b:0a:
36:9d:c5:55:83:fb:57:b3:08:75:36:7b:05:6b:4a:5e:36:d7:
12:e3:3a:cc:9c:f4:1f:51:bc:9e:f4:55:22:28:34:04:bf:ba:
9c:5b:c0:23:eb:01:1f:df:ee:6e:d5:d8:6a:5f:d7:9e:e6:05:
45:cb:af:d7:af:5b:8b:37:4d:db:e3:7c:04:1f:cb:cb:6b:c1:
d8:de:3b:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+feZmLmg7csGc67Zr3IUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGRlYTRlYTI1NDZkN2EwMTlhNGVmODI0M2I1ZWI2MzU2
NWM4NDcwHhcNMjUwNjA3MDYwMDMwWhcNMjUwNjA4MDYwMDMwWjAzMTEwLwYDVQQD
EyhhYWI2YTMyYzVlMWNmZWVlYjM1NjhhNzFhZDQwYTUzM2MwZjQ5MWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIXXoC5rXb3VLXiDEUQ0iWMUENuf
yJVMH31j9KF2+22yawk8EAvWhLetBmkZ/HV4SU2OltOw7LnJxkNbNzj7NbPznJNb
7ELZxEZy7nt6OCVkf9Dhw0/kqrI4mtEfnwfCmUZLWGSCAJfl005sQjmy+FhaeubO
ojxEWkIIcDvB9cAhU7WK7XDOZGdqAfl0EiRjTq1pNtKm6RhRAWbs4hIgBrxxU8kb
ZPqXEcHYikHUVBC1nIhngAdEwuGptMdZ+XHp5lZ6LJdxYo8JBMkAKvuHrTJJpVji
ehdqj1WT/D3xovle6hgLv3SAxNGUhnpYY8VUYKAI/tRwaCtNVh5S1/NeEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq2oyxeHP7us1aKca1ApTPA9JHFMB8GA1UdIwQY
MBaAFNwN6k6iVG16AZpO+CQ7XrY1ZchHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMt
M2Q0YjI4M2YzMjJkLzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMtM2Q0YjI4M2YzMjJk
LzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAugQLjIcV
VQDeW4jTept/W2DC82XzperqAtR1U1p6PtV4TiLye8pXal8QzbRjidUONmgxGJhX
1TYJZvmGU3643q7AkG7ASz+5u6noF32ETrVvl0zR0NJOCKBatQo6PRo8/70HGyUt
CaHGmqpRMY8IAIMTkT7zKatG1106C3ekcdNuVRCITXroaycI1zGt5fXQgA/vTYHL
LHBZk1BbW4bgRmdJ4niFJP5tOFAa09ILCRUPqlsKNp3FVYP7V7MIdTZ7BWtKXjbX
EuM6zJz0H1G8nvRVIig0BL+6nFvAI+sBH9/ubtXYal/XnuYFRcuv169bizdN2+N8
BB/Ly2vB2N475g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:57 2025 by rpki-client