Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: ZjIb9EKBu/gfjG4HP6i0YqXYYvu9gpB66MiKERYqSDw=
Subject key identifier: 8F:92:0A:B0:5F:E8:3E:67:10:84:D4:ED:75:C4:D4:5F:34:D5:1F:E5
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 019756ECAC4476F38024F7DB6F1AB61C7AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 0C63
Signing time: Mon 09 Jun 2025 23:00:40 +0000
Manifest this update: Mon 09 Jun 2025 23:00:40 +0000
Manifest next update: Tue 10 Jun 2025 23:00:40 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: NWxh8n5NxZbiPMmExk1HTYFPXyjImnsrRoVxju/S/P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:ec:ac:44:76:f3:80:24:f7:db:6f:1a:b6:1c:7a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: Jun 9 23:00:40 2025 GMT
Not After : Jun 10 23:00:40 2025 GMT
Subject: CN=8f920ab05fe83e671084d4ed75c4d45f34d51fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:9b:52:44:13:1a:cf:f2:f8:47:c0:31:f2:
b8:ea:c2:2c:e7:ca:90:57:38:56:6c:2d:3f:1e:95:
90:91:27:f4:bb:e1:27:58:19:eb:7e:f7:29:31:3d:
13:9b:9c:83:de:cd:01:2c:03:b3:51:c3:bc:9f:0b:
c4:a2:18:b9:e8:a7:e4:02:9c:8c:0a:c4:f6:30:ef:
fa:30:a3:f5:46:00:61:84:81:61:18:66:4f:8b:62:
0d:40:cc:e2:6c:91:31:e4:8a:8a:e8:45:b2:65:11:
da:04:a5:5f:39:ed:c2:01:19:a1:02:92:5a:24:da:
f4:59:1a:b7:d4:e3:bb:17:ee:5a:09:20:10:52:a4:
44:34:f8:0f:dc:46:e0:bf:fe:e5:c3:3c:a6:35:bd:
44:d0:74:71:ee:a6:ca:55:17:a0:09:35:93:24:a0:
f7:e8:da:5a:b1:74:ad:b0:7c:99:4f:a0:b8:1d:78:
6f:57:e8:0a:6b:22:50:78:7c:d6:28:84:f8:02:0a:
ef:c1:1d:c4:1f:a3:73:2a:4a:b8:e4:57:60:6a:2d:
22:d6:fa:c6:01:1d:a4:89:cb:06:15:50:aa:c3:98:
0d:7e:42:5f:03:a3:96:ff:af:2c:11:3b:1c:f6:c8:
5f:2f:95:6e:b2:47:e5:86:46:dc:85:04:86:6c:1b:
a6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:92:0A:B0:5F:E8:3E:67:10:84:D4:ED:75:C4:D4:5F:34:D5:1F:E5
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4c:b3:d1:f5:17:c8:bd:c0:17:7c:87:88:f1:a3:a7:c0:a1:
cd:76:34:70:79:e1:91:ef:5a:b5:45:b1:5a:c4:36:ca:65:f3:
98:34:15:73:70:b1:6b:7e:85:2f:6b:62:84:60:6a:a8:b9:2f:
9e:7f:80:a3:5a:14:c8:02:96:5a:33:e9:08:ef:68:bc:f8:b0:
c8:7e:a1:a8:56:cd:3c:ba:62:34:90:e9:7f:a7:9d:bd:89:a3:
87:61:93:01:36:c3:c2:f2:01:cf:5a:3d:38:13:aa:b9:d0:e3:
89:27:42:49:81:2f:ed:df:31:9c:eb:07:46:9f:d6:fe:15:9f:
5f:cc:03:0c:41:e2:f2:ed:26:85:01:b2:6e:96:f3:30:25:61:
ba:77:5b:3a:89:c0:62:51:a0:da:e4:ad:e0:95:3f:00:da:66:
2c:75:71:00:53:87:34:58:df:aa:47:1a:67:f6:a7:3e:f1:fe:
b7:e7:d8:5f:64:87:b2:a9:d7:63:18:4c:4a:ec:e5:cf:b7:98:
ff:df:37:65:73:5d:cc:1e:93:04:57:c7:6e:52:aa:43:3f:f5:
06:ad:cb:bb:e6:c7:0b:a7:3f:4a:93:04:b7:6b:46:31:a0:4b:
2f:f8:18:69:1a:57:d3:de:b3:45:b5:57:d4:ef:2d:86:48:5a:
bc:a6:6b:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdW7KxEdvOAJPfbbxq2HHrZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYzQzMzk3N2M3MmI0YmU1ZDg4OGY1Njg1M2VkMzFhMWZm
MWVmYzYwHhcNMjUwNjA5MjMwMDQwWhcNMjUwNjEwMjMwMDQwWjAzMTEwLwYDVQQD
Eyg4ZjkyMGFiMDVmZTgzZTY3MTA4NGQ0ZWQ3NWM0ZDQ1ZjM0ZDUxZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszWbUkQTGs/y+EfAMfK46sIs58qQ
VzhWbC0/HpWQkSf0u+EnWBnrfvcpMT0Tm5yD3s0BLAOzUcO8nwvEohi56KfkApyM
CsT2MO/6MKP1RgBhhIFhGGZPi2INQMzibJEx5IqK6EWyZRHaBKVfOe3CARmhApJa
JNr0WRq31OO7F+5aCSAQUqRENPgP3Ebgv/7lwzymNb1E0HRx7qbKVRegCTWTJKD3
6NpasXStsHyZT6C4HXhvV+gKayJQeHzWKIT4AgrvwR3EH6NzKkq45Fdgai0i1vrG
AR2kicsGFVCqw5gNfkJfA6OW/68sETsc9shfL5VuskflhkbchQSGbBum6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+SCrBf6D5nEITU7XXE1F801R/lMB8GA1UdIwQY
MBaAFN7EM5d8crS+XYiPVoU+0xof8e/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80NTZhODUtYjdhMS00MTgzLWE2NGYt
MjIzZjUwOGMwNTVhLzEvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80NTZhODUtYjdhMS00MTgzLWE2NGYtMjIzZjUwOGMwNTVh
LzEvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEyz0fUX
yL3AF3yHiPGjp8ChzXY0cHnhke9atUWxWsQ2ymXzmDQVc3Cxa36FL2tihGBqqLkv
nn+Ao1oUyAKWWjPpCO9ovPiwyH6hqFbNPLpiNJDpf6edvYmjh2GTATbDwvIBz1o9
OBOqudDjiSdCSYEv7d8xnOsHRp/W/hWfX8wDDEHi8u0mhQGybpbzMCVhundbOonA
YlGg2uSt4JU/ANpmLHVxAFOHNFjfqkcaZ/anPvH+t+fYX2SHsqnXYxhMSuzlz7eY
/983ZXNdzB6TBFfHblKqQz/1Bq3Lu+bHC6c/SpMEt2tGMaBLL/gYaRpX096zRbVX
1O8thkhavKZrow==
-----END CERTIFICATE-----
Generated at Tue Jun 10 05:30:49 2025 by rpki-client