Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: o/0lkObE84ycgwRJGINvpF6CjOjzzRsIu9S/5OPJHto=
Subject key identifier: 46:FF:3F:26:19:DE:7B:4E:1B:DE:77:AE:87:81:81:C3:C9:70:B8:8F
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 0197628332DD1B5DEA7940C0F4DB3B39E261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 0C69
Signing time: Thu 12 Jun 2025 05:00:54 +0000
Manifest this update: Thu 12 Jun 2025 05:00:54 +0000
Manifest next update: Fri 13 Jun 2025 05:00:54 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: NZRVo0iK4WQbE6gne+EG2GQ+0oknB/b/6Q2UoB3Haa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:83:32:dd:1b:5d:ea:79:40:c0:f4:db:3b:39:e2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: Jun 12 05:00:54 2025 GMT
Not After : Jun 13 05:00:54 2025 GMT
Subject: CN=46ff3f2619de7b4e1bde77ae878181c3c970b88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:5a:e8:b8:bf:fa:88:68:9a:4b:5f:da:8b:
50:66:fa:06:ca:cc:ad:d7:ea:cf:1f:a8:18:31:95:
cc:b9:03:bc:4e:d7:66:02:7b:92:d6:96:41:ce:77:
64:da:2a:02:39:1a:92:86:28:10:b2:d9:07:98:11:
34:15:1e:bf:4a:09:d4:8d:3f:b4:c4:0e:57:b9:77:
bc:d7:3c:c1:ca:4d:b4:84:ae:77:3f:89:00:86:3c:
28:8e:e1:97:d9:d4:db:26:ec:af:ad:7a:1b:a6:f9:
b0:15:fd:42:8b:8c:e3:09:ad:94:6a:bb:83:83:57:
80:d4:14:85:22:39:1d:0e:a0:2c:5e:a4:c0:12:44:
42:24:ee:d4:87:aa:58:57:9e:63:f9:f0:66:5d:e0:
9c:b8:2e:e1:41:7b:ef:56:d3:d8:bf:14:0c:d7:2a:
82:9c:6c:80:65:b7:74:a0:c7:3e:aa:f4:2d:54:7b:
2f:6a:2a:81:26:75:01:dc:a5:96:b0:65:6b:7a:d2:
10:c1:bf:a7:b5:51:2d:ec:7b:09:01:03:72:17:21:
c6:17:a9:73:e5:34:b4:24:00:eb:99:16:c8:42:c4:
7c:a8:c1:39:9a:4f:83:fe:f8:bf:87:b9:f4:0c:73:
f9:48:ae:5f:ef:b8:e2:46:e0:de:19:d2:97:fd:af:
f3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FF:3F:26:19:DE:7B:4E:1B:DE:77:AE:87:81:81:C3:C9:70:B8:8F
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:51:05:92:4f:4d:b4:a7:d1:6b:6b:f7:29:b6:a1:f1:5b:14:
4e:69:bc:dc:88:77:c3:bf:8a:6d:10:a1:ce:99:b4:66:e8:72:
f6:bd:e7:e5:58:a3:6e:8b:c8:28:62:f7:82:0c:95:5c:bd:f6:
7b:d9:cb:3b:3d:bb:fb:cb:f6:ae:42:1b:1c:aa:af:52:da:4b:
cd:25:83:dc:0c:2e:ff:f6:cf:fe:ec:f6:ae:90:c1:1a:fc:61:
51:6c:76:88:c4:8b:b9:91:26:db:64:c7:4a:d3:d2:63:62:77:
93:10:b4:be:c6:ec:e9:37:02:4c:8c:a2:64:be:04:cc:0b:05:
f5:05:eb:f4:8e:73:1a:82:9e:10:20:83:09:af:e1:4e:86:88:
ea:c4:84:63:d4:26:6f:1b:f2:87:79:65:59:db:ac:d2:82:f4:
62:a6:ed:c6:06:c3:33:d1:da:d5:e4:5b:80:e0:32:64:d4:80:
18:c2:f7:c0:cb:79:fe:c6:1e:7c:62:31:47:9c:53:16:48:1f:
bf:b5:25:a9:67:5e:d0:d5:fe:7d:a4:ab:78:77:1b:6f:91:93:
e2:84:74:ee:38:3c:26:fa:5d:fc:1e:6e:c3:82:16:94:65:d1:
ea:94:c5:87:e9:2a:41:54:58:71:40:73:b0:e4:3b:12:54:0a:
9d:bd:da:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdigzLdG13qeUDA9Ns7OeJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYzQzMzk3N2M3MmI0YmU1ZDg4OGY1Njg1M2VkMzFhMWZm
MWVmYzYwHhcNMjUwNjEyMDUwMDU0WhcNMjUwNjEzMDUwMDU0WjAzMTEwLwYDVQQD
Eyg0NmZmM2YyNjE5ZGU3YjRlMWJkZTc3YWU4NzgxODFjM2M5NzBiODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcZa6Li/+ohomktf2otQZvoGysyt
1+rPH6gYMZXMuQO8TtdmAnuS1pZBzndk2ioCORqShigQstkHmBE0FR6/SgnUjT+0
xA5XuXe81zzByk20hK53P4kAhjwojuGX2dTbJuyvrXobpvmwFf1Ci4zjCa2UaruD
g1eA1BSFIjkdDqAsXqTAEkRCJO7Uh6pYV55j+fBmXeCcuC7hQXvvVtPYvxQM1yqC
nGyAZbd0oMc+qvQtVHsvaiqBJnUB3KWWsGVretIQwb+ntVEt7HsJAQNyFyHGF6lz
5TS0JADrmRbIQsR8qME5mk+D/vi/h7n0DHP5SK5f77jiRuDeGdKX/a/zIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEb/PyYZ3ntOG953roeBgcPJcLiPMB8GA1UdIwQY
MBaAFN7EM5d8crS+XYiPVoU+0xof8e/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80NTZhODUtYjdhMS00MTgzLWE2NGYt
MjIzZjUwOGMwNTVhLzEvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80NTZhODUtYjdhMS00MTgzLWE2NGYtMjIzZjUwOGMwNTVh
LzEvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlEFkk9N
tKfRa2v3Kbah8VsUTmm83Ih3w7+KbRChzpm0Zuhy9r3n5VijbovIKGL3ggyVXL32
e9nLOz27+8v2rkIbHKqvUtpLzSWD3Awu//bP/uz2rpDBGvxhUWx2iMSLuZEm22TH
StPSY2J3kxC0vsbs6TcCTIyiZL4EzAsF9QXr9I5zGoKeECCDCa/hToaI6sSEY9Qm
bxvyh3llWdus0oL0YqbtxgbDM9Ha1eRbgOAyZNSAGML3wMt5/sYefGIxR5xTFkgf
v7UlqWde0NX+faSreHcbb5GT4oR07jg8Jvpd/B5uw4IWlGXR6pTFh+kqQVRYcUBz
sOQ7ElQKnb3aEg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 10:38:14 2025 by rpki-client