
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
File: 3D56OUu_G77Efz-7aaGJ-KOx0FY.mft (raw, json)
Hash identifier: hZdrYCfBMCSp39tGHi2ucZEDcR73VvDRRpoY+tigTrw=
Subject key identifier: F6:6E:57:9C:B9:9A:0F:59:49:ED:1F:B3:83:F7:5F:C1:E1:3B:5E:28
Authority key identifier: DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
Certificate issuer: /CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Certificate serial: 019758004A970518E5A160E1BFE8C0B90451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
Manifest number: 082F
Signing time: Tue 10 Jun 2025 04:01:43 +0000
Manifest this update: Tue 10 Jun 2025 04:01:43 +0000
Manifest next update: Wed 11 Jun 2025 04:01:43 +0000
Files and hashes: 1: 3D56OUu_G77Efz-7aaGJ-KOx0FY.crl (hash: UFrWP2rxQrucDTOkuBOPzITftc+Plv9pdEvplPG4la8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:00:4a:97:05:18:e5:a1:60:e1:bf:e8:c0:b9:04:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Validity
Not Before: Jun 10 04:01:43 2025 GMT
Not After : Jun 11 04:01:43 2025 GMT
Subject: CN=f66e579cb99a0f5949ed1fb383f75fc1e13b5e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:c2:3a:32:bb:7b:bf:cf:97:c4:7e:03:a9:
9b:1b:b1:80:9d:45:9f:9b:81:cb:9a:cb:20:9b:7c:
b9:25:89:d3:ca:2a:4d:7e:e7:72:c4:a7:e9:6c:8c:
43:3d:92:d1:e9:99:e9:3f:e4:85:cb:35:24:e6:a9:
52:f0:2b:97:5e:7d:5d:7a:2d:01:55:e9:36:f9:dd:
e9:6c:42:eb:f4:48:4c:cd:5d:62:19:0c:63:80:42:
66:ae:bc:2b:93:2b:a9:3c:4c:08:ba:84:bc:f1:6e:
e0:8d:c2:60:8d:ea:0b:3c:43:60:4b:5e:3a:52:7f:
23:d4:df:b9:14:7f:52:40:5b:50:73:c2:b6:f2:20:
d4:1d:d0:de:bc:bc:77:78:2a:52:b1:52:47:0e:01:
88:56:47:f5:34:27:69:26:6e:1b:ce:ba:76:17:3d:
c5:27:db:bd:00:43:15:76:0f:a3:6a:9d:ea:bd:e5:
7a:b7:8e:1b:72:ce:3e:73:a9:81:4b:e5:08:e2:06:
72:1b:9e:f1:6d:32:74:35:2d:b0:1b:8b:9a:55:e0:
14:22:aa:e0:a9:4a:c7:81:dc:1f:1c:82:6c:d2:1e:
38:ff:4a:3f:a4:6e:71:f9:78:1b:e9:7b:6d:a2:5c:
eb:ae:33:72:49:82:4f:37:dc:f8:f6:c1:1b:f3:67:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6E:57:9C:B9:9A:0F:59:49:ED:1F:B3:83:F7:5F:C1:E1:3B:5E:28
X509v3 Authority Key Identifier:
keyid:DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:39:c3:5d:4a:69:17:15:fc:4c:cc:96:3a:cb:57:a1:ec:16:
aa:4a:69:e4:d1:aa:d5:cc:29:99:37:7e:e7:33:30:50:91:c2:
2b:b3:ff:77:b5:6f:16:aa:00:e8:41:4b:08:fe:b0:b1:eb:9d:
51:62:93:05:40:ec:1d:53:27:d4:14:cf:60:a3:a0:b2:5f:36:
1a:fa:53:0b:db:5b:c8:a7:dd:c2:eb:80:21:40:dc:bc:be:27:
f5:a8:d6:1d:90:a0:6a:db:b7:2a:9e:ad:d1:7f:6b:df:f7:38:
5b:c7:e6:c4:c9:e3:68:bd:9d:e7:92:c3:5a:97:84:35:2b:0a:
8e:25:59:51:27:e2:91:08:e4:ff:a3:39:6e:d4:a6:71:f9:1e:
6f:2a:57:09:b1:08:2e:22:2e:48:3e:7a:2e:95:9c:b9:be:b9:
1f:9b:e5:95:87:7c:b3:2e:1c:1f:fe:78:55:61:77:04:7b:b6:
57:de:70:f6:42:0e:2e:15:3f:d2:fd:8e:d2:08:76:a9:7c:8c:
bf:12:40:a8:ee:b0:39:71:14:9b:ce:2e:48:f7:eb:8e:d0:ab:
30:9d:76:a2:ab:56:f8:eb:84:06:05:16:aa:fe:08:8f:2e:2a:
b1:91:5b:87:b0:16:7c:07:1d:aa:b7:55:b4:49:31:83:c1:4f:
5c:cf:a3:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYAEqXBRjloWDhv+jAuQRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjM2U3YTM5NGJiZjFiYmVjNDdmM2ZiYjY5YTE4OWY4YTNi
MWQwNTYwHhcNMjUwNjEwMDQwMTQzWhcNMjUwNjExMDQwMTQzWjAzMTEwLwYDVQQD
EyhmNjZlNTc5Y2I5OWEwZjU5NDllZDFmYjM4M2Y3NWZjMWUxM2I1ZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA/COjK7e7/Pl8R+A6mbG7GAnUWf
m4HLmssgm3y5JYnTyipNfudyxKfpbIxDPZLR6ZnpP+SFyzUk5qlS8CuXXn1dei0B
Vek2+d3pbELr9EhMzV1iGQxjgEJmrrwrkyupPEwIuoS88W7gjcJgjeoLPENgS146
Un8j1N+5FH9SQFtQc8K28iDUHdDevLx3eCpSsVJHDgGIVkf1NCdpJm4bzrp2Fz3F
J9u9AEMVdg+jap3qveV6t44bcs4+c6mBS+UI4gZyG57xbTJ0NS2wG4uaVeAUIqrg
qUrHgdwfHIJs0h44/0o/pG5x+Xgb6XttolzrrjNySYJPN9z49sEb82egHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZuV5y5mg9ZSe0fs4P3X8HhO14oMB8GA1UdIwQY
MBaAFNw+ejlLvxu+xH8/u2mhifijsdBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Q1Nk9VdV9HNzdFZnotN2FhR0otS094MEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81YjY4NGEtZTQwOS00N2VhLTljY2It
NDRiMjFhOGJlYmZkLzEvM0Q1Nk9VdV9HNzdFZnotN2FhR0otS094MEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81YjY4NGEtZTQwOS00N2VhLTljY2ItNDRiMjFhOGJlYmZk
LzEvM0Q1Nk9VdV9HNzdFZnotN2FhR0otS094MEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjnDXUpp
FxX8TMyWOstXoewWqkpp5NGq1cwpmTd+5zMwUJHCK7P/d7VvFqoA6EFLCP6wseud
UWKTBUDsHVMn1BTPYKOgsl82GvpTC9tbyKfdwuuAIUDcvL4n9ajWHZCgatu3Kp6t
0X9r3/c4W8fmxMnjaL2d55LDWpeENSsKjiVZUSfikQjk/6M5btSmcfkebypXCbEI
LiIuSD56LpWcub65H5vllYd8sy4cH/54VWF3BHu2V95w9kIOLhU/0v2O0gh2qXyM
vxJAqO6wOXEUm84uSPfrjtCrMJ12oqtW+OuEBgUWqv4Ijy4qsZFbh7AWfAcdqrdV
tEkxg8FPXM+jqQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 14:26:44 2025 by rpki-client