Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier: xk4J75bL5dYbqC1/dUJaRBukZbcJJRE8vPjUTX0goNg=
Subject key identifier: EF:A1:38:66:61:10:E6:72:79:BA:81:96:FD:C3:20:E6:A4:A5:D6:5B
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer: /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial: 01974EFC61D66E70C9FB23300987033E06BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number: 1177
Signing time: Sun 08 Jun 2025 10:00:52 +0000
Manifest this update: Sun 08 Jun 2025 10:00:52 +0000
Manifest next update: Mon 09 Jun 2025 10:00:52 +0000
Files and hashes: 1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: p14whdaP+wPqOpciDa/F4wdQBXKO0ewiQxi0QUvcrU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:61:d6:6e:70:c9:fb:23:30:09:87:03:3e:06:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Validity
Not Before: Jun 8 10:00:52 2025 GMT
Not After : Jun 9 10:00:52 2025 GMT
Subject: CN=efa138666110e67279ba8196fdc320e6a4a5d65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:d5:42:44:d5:11:0f:02:2c:f6:72:60:5c:
dc:cd:06:71:a0:da:5a:5b:17:cd:32:c2:79:86:c8:
54:2a:ab:59:78:ed:95:69:12:4a:c7:8a:e0:4b:c9:
64:b1:69:d5:2e:4b:76:63:1e:43:c9:00:83:2e:31:
38:09:f0:62:bf:cd:13:f3:58:73:45:8f:d2:2f:49:
76:11:cb:81:97:2e:0d:f6:45:ac:e8:df:b2:8d:3a:
65:15:ff:2a:bc:b4:b6:c7:ad:b9:aa:98:9e:57:b0:
7b:26:23:d3:8e:0f:d3:83:37:e9:60:18:2d:84:a8:
83:f0:2c:fc:98:83:bf:94:aa:5c:24:b5:e1:57:81:
d3:c4:9d:38:ce:03:42:4e:cf:b2:ca:eb:ca:68:0b:
d1:f2:80:bb:0a:e3:c4:22:c8:f9:95:cf:dd:71:79:
76:0a:da:a7:80:ba:ef:0f:6f:eb:62:ee:fd:12:27:
ab:8e:d2:16:29:96:79:5b:36:1e:91:ad:fb:d4:0e:
32:3b:5c:a7:3f:2d:c1:1a:fc:a0:3f:1e:78:34:48:
0f:78:14:2b:d0:73:c2:15:2c:d9:bf:29:02:31:5e:
9a:37:46:44:21:d5:b3:ab:34:60:74:87:43:44:a3:
9b:5d:a6:31:17:fa:a7:e6:c8:8b:c3:d7:12:28:0a:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A1:38:66:61:10:E6:72:79:BA:81:96:FD:C3:20:E6:A4:A5:D6:5B
X509v3 Authority Key Identifier:
keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9b:e0:41:9e:12:96:2b:d8:86:c1:4e:fd:da:dd:b7:34:bd:
32:ac:d5:8f:d2:7e:20:de:ce:c9:bd:85:83:0f:6b:c9:c8:db:
1c:32:f4:ad:95:40:7c:75:88:72:9c:e2:4f:f9:ec:7d:da:85:
0f:0d:7a:f6:d4:a3:d5:65:b0:7e:57:dc:a5:51:8a:f8:c3:ab:
30:91:3f:69:2d:33:bb:0a:c7:19:e9:f7:ff:55:24:dd:9b:ed:
46:e9:c9:ec:3f:43:ec:02:ba:3c:59:48:ab:d4:e5:af:85:ce:
fb:0a:50:0f:13:ad:43:a2:cb:7b:aa:97:53:4e:a8:c2:e2:2d:
f9:c9:df:c1:26:9d:4a:1f:df:93:d1:2b:cb:7c:14:f6:ee:cd:
7e:91:cb:b7:5a:8e:48:ee:e6:e6:fa:32:dd:95:49:34:e4:93:
ce:19:88:e4:88:10:13:98:5f:a5:a2:c4:c8:bd:c5:08:a1:77:
82:48:57:8c:c5:f2:ac:51:30:95:6c:8b:3f:25:69:30:f7:0a:
74:7e:ef:90:67:44:91:40:3b:cb:eb:4b:9c:5b:da:91:d0:07:
35:43:c7:c1:55:83:33:55:a2:7a:f1:91:f4:db:c2:bc:ee:47:
4d:d5:39:8c:ab:08:8c:5a:cd:75:fb:7e:f0:76:d0:83:eb:91:
78:46:ec:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdO/GHWbnDJ+yMwCYcDPga7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYzAxNjc0MDY0NDFlYTE2YzQ3NDA2ZDA1MjJiNWM2NjMw
YWJjYjMwHhcNMjUwNjA4MTAwMDUyWhcNMjUwNjA5MTAwMDUyWjAzMTEwLwYDVQQD
EyhlZmExMzg2NjYxMTBlNjcyNzliYTgxOTZmZGMzMjBlNmE0YTVkNjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrfVQkTVEQ8CLPZyYFzczQZxoNpa
WxfNMsJ5hshUKqtZeO2VaRJKx4rgS8lksWnVLkt2Yx5DyQCDLjE4CfBiv80T81hz
RY/SL0l2EcuBly4N9kWs6N+yjTplFf8qvLS2x625qpieV7B7JiPTjg/TgzfpYBgt
hKiD8Cz8mIO/lKpcJLXhV4HTxJ04zgNCTs+yyuvKaAvR8oC7CuPEIsj5lc/dcXl2
CtqngLrvD2/rYu79EierjtIWKZZ5WzYeka371A4yO1ynPy3BGvygPx54NEgPeBQr
0HPCFSzZvykCMV6aN0ZEIdWzqzRgdIdDRKObXaYxF/qn5siLw9cSKAo9JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+hOGZhEOZyebqBlv3DIOakpdZbMB8GA1UdIwQY
MBaAFN3AFnQGRB6hbEdAbQUitcZjCryzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNjA3YjctMTg3Yi00NTQ1LWI2MTQt
M2Q5YWVkYWMyYjMzLzEvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jNjA3YjctMTg3Yi00NTQ1LWI2MTQtM2Q5YWVkYWMyYjMz
LzEvM2NBV2RBWkVIcUZzUjBCdEJTSzF4bU1LdkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopvgQZ4S
livYhsFO/drdtzS9MqzVj9J+IN7Oyb2Fgw9rycjbHDL0rZVAfHWIcpziT/nsfdqF
Dw169tSj1WWwflfcpVGK+MOrMJE/aS0zuwrHGen3/1Uk3ZvtRunJ7D9D7AK6PFlI
q9Tlr4XO+wpQDxOtQ6LLe6qXU06owuIt+cnfwSadSh/fk9Ery3wU9u7NfpHLt1qO
SO7m5voy3ZVJNOSTzhmI5IgQE5hfpaLEyL3FCKF3gkhXjMXyrFEwlWyLPyVpMPcK
dH7vkGdEkUA7y+tLnFvakdAHNUPHwVWDM1WievGR9NvCvO5HTdU5jKsIjFrNdft+
8HbQg+uReEbsjQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:42:44 2025 by rpki-client