Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: 7amJEpBIUOWDOKyKgSSqiAEtnIB9azgtchR/Qzr5zRk=
Subject key identifier: 85:1B:AD:20:B5:51:3E:96:27:8C:79:B2:A9:B3:7D:7E:BA:48:54:A6
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 019748FA499734DB4039A28CA00DC5396F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 1587
Signing time: Sat 07 Jun 2025 06:00:51 +0000
Manifest this update: Sat 07 Jun 2025 06:00:51 +0000
Manifest next update: Sun 08 Jun 2025 06:00:51 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: hFvjVyU2973UhrS2jVbJDj/Rvd+W0YHdValYqI8zJC0=)
2: XeTdM9cnm-nj4Gui4gyEqLrQLaw.roa (hash: byMWJNOsSPMVajbPUM5liOZkm9+BQbQeZEZJwK73A2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:49:97:34:db:40:39:a2:8c:a0:0d:c5:39:6f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Jun 7 06:00:51 2025 GMT
Not After : Jun 8 06:00:51 2025 GMT
Subject: CN=851bad20b5513e96278c79b2a9b37d7eba4854a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e8:18:cc:a4:3c:5a:90:5f:dc:8e:7c:bb:2d:
5a:db:8f:40:3c:96:86:3d:53:3d:74:d5:e4:4d:e1:
c7:ca:fc:5b:d3:04:bb:38:90:c9:6f:d5:a3:9c:18:
b2:49:5d:84:04:e3:6d:bc:79:5c:75:6b:a1:b5:1a:
ea:05:4a:a3:0e:b9:e5:03:b0:8e:4a:7a:c2:1c:a9:
a0:cd:1f:40:d9:e4:d2:2e:66:66:e6:3f:ec:af:d2:
da:6b:c7:7b:95:36:73:e6:c0:1b:bb:4b:42:91:fc:
ee:88:8f:ce:f2:e3:bc:ce:08:78:55:af:07:83:79:
48:21:a0:52:fd:47:4c:17:b3:33:00:00:ac:10:d4:
83:14:48:04:dd:43:67:f6:0b:1a:a6:3c:9b:41:65:
de:e0:bb:37:04:0d:df:fc:25:c6:4d:2b:3b:29:5a:
c7:63:ac:ed:75:f2:12:0f:c4:34:24:29:77:59:73:
1e:04:60:23:ac:67:84:d5:ea:67:9a:31:5d:63:60:
56:0d:9d:85:6d:e1:fa:8d:5d:ca:1a:b4:0c:e8:9e:
09:35:2f:ed:c2:f2:b4:86:20:9c:2f:0e:e1:d7:84:
63:4e:b9:79:cb:d4:41:76:57:56:eb:5c:e6:14:e3:
17:ab:ee:ec:8f:1d:11:73:29:4c:47:f5:39:06:1e:
8b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1B:AD:20:B5:51:3E:96:27:8C:79:B2:A9:B3:7D:7E:BA:48:54:A6
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:43:af:1a:c7:8f:0b:7f:5d:c3:3f:da:97:c4:7c:ae:3d:cf:
58:11:76:72:3c:18:30:3a:bb:ba:7a:2b:5b:01:a9:23:ee:0b:
54:43:fb:16:d2:e4:68:98:8f:43:76:9e:e5:bf:56:df:55:63:
73:20:29:fd:35:ff:ab:f0:98:ad:65:6a:cd:0f:62:7a:f9:ce:
e1:73:6e:91:43:5d:8f:37:80:68:9d:9a:23:e2:a2:66:ae:05:
19:7d:2b:a5:cd:6d:bc:2d:8f:a2:50:9a:79:21:fb:d5:ae:0c:
8f:0f:19:55:9e:88:ab:8f:1c:0e:e3:47:92:38:98:29:2d:ac:
03:c1:28:85:e5:5e:5b:74:dd:af:56:37:d9:c0:9a:85:31:11:
15:5f:32:7e:0a:b2:09:99:95:21:47:98:3a:58:75:3d:a3:61:
aa:e1:26:29:b7:ae:f1:c0:e2:e4:1c:a7:cb:a7:9f:ab:55:c8:
2e:1a:0e:25:ac:dd:a0:bc:5e:bc:60:64:10:2e:6c:19:e0:7d:
65:e1:d7:f1:84:ef:dc:85:01:a3:b5:de:db:8f:97:f6:d0:7a:
0c:13:0f:03:70:e4:f4:1b:f0:c5:a0:93:24:73:4b:3d:bb:6c:
eb:94:4c:51:e8:81:9e:38:27:a6:5d:38:67:2a:d0:35:a7:ca:
2a:bd:34:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+kmXNNtAOaKMoA3FOW9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTQ2YjFmY2Q5MmI0N2Y0ZjU1ZmFkMDM4Yzk1ODEzNDBh
OWQzNzAwHhcNMjUwNjA3MDYwMDUxWhcNMjUwNjA4MDYwMDUxWjAzMTEwLwYDVQQD
Eyg4NTFiYWQyMGI1NTEzZTk2Mjc4Yzc5YjJhOWIzN2Q3ZWJhNDg1NGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ugYzKQ8WpBf3I58uy1a249APJaG
PVM9dNXkTeHHyvxb0wS7OJDJb9WjnBiySV2EBONtvHlcdWuhtRrqBUqjDrnlA7CO
SnrCHKmgzR9A2eTSLmZm5j/sr9Laa8d7lTZz5sAbu0tCkfzuiI/O8uO8zgh4Va8H
g3lIIaBS/UdMF7MzAACsENSDFEgE3UNn9gsapjybQWXe4Ls3BA3f/CXGTSs7KVrH
Y6ztdfISD8Q0JCl3WXMeBGAjrGeE1epnmjFdY2BWDZ2FbeH6jV3KGrQM6J4JNS/t
wvK0hiCcLw7h14RjTrl5y9RBdldW61zmFOMXq+7sjx0RcylMR/U5Bh6L2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUbrSC1UT6WJ4x5sqmzfX66SFSmMB8GA1UdIwQY
MBaAFNykax/NkrR/T1X60DjJWBNAqdNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmIt
YzZkMmI4ZDFmNTY2LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmItYzZkMmI4ZDFmNTY2
LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyEOvGseP
C39dwz/al8R8rj3PWBF2cjwYMDq7unorWwGpI+4LVEP7FtLkaJiPQ3ae5b9W31Vj
cyAp/TX/q/CYrWVqzQ9ievnO4XNukUNdjzeAaJ2aI+KiZq4FGX0rpc1tvC2PolCa
eSH71a4Mjw8ZVZ6Iq48cDuNHkjiYKS2sA8EoheVeW3Tdr1Y32cCahTERFV8yfgqy
CZmVIUeYOlh1PaNhquEmKbeu8cDi5Byny6efq1XILhoOJazdoLxevGBkEC5sGeB9
ZeHX8YTv3IUBo7Xe24+X9tB6DBMPA3Dk9BvwxaCTJHNLPbts65RMUeiBnjgnpl04
ZyrQNafKKr004A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:38 2025 by rpki-client