Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: NX5RZczpziZMVegTaF9O26PCT3DnbP5mBmKzbZfkRvg=
Subject key identifier: E3:AA:CB:1F:EB:C2:F4:EB:EE:52:AE:C8:9C:A1:AE:90:80:8D:48:1F
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 0197534756C2C9E880A6E0B9B5FD609AD21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 0EC2
Signing time: Mon 09 Jun 2025 06:01:13 +0000
Manifest this update: Mon 09 Jun 2025 06:01:13 +0000
Manifest next update: Tue 10 Jun 2025 06:01:13 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: yc00VRxNfUHExniPatlb1GKNBjnqHGcWX3Ik6di9EcE=)
2: M0CEGpqdnFyhH05u6ywrw5xpjxw.roa (hash: Da8bL20Ezk/7GnIViJo/xS7eFj2lqLDIbA2oioZuSt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:47:56:c2:c9:e8:80:a6:e0:b9:b5:fd:60:9a:d2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Jun 9 06:01:13 2025 GMT
Not After : Jun 10 06:01:13 2025 GMT
Subject: CN=e3aacb1febc2f4ebee52aec89ca1ae90808d481f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:72:5d:a1:1b:4f:ed:ce:c0:09:22:ea:c7:
a3:da:1f:46:f9:92:bb:35:98:d9:a4:d2:96:69:1e:
ae:07:54:10:2a:3a:af:c6:33:ec:47:84:d2:94:62:
53:01:f0:e7:54:9e:86:09:f5:72:5d:89:8d:73:6e:
82:46:6a:6c:43:dd:c4:0e:a6:e6:e1:e6:e5:87:cc:
e2:83:ef:a8:5b:6e:09:38:2b:06:2f:59:5e:ea:6f:
80:60:de:07:b4:0b:01:b6:40:e8:35:8a:f0:9f:a3:
91:3b:2d:5a:be:04:f8:fb:ab:09:45:b2:00:52:78:
93:d5:a6:57:10:13:5c:e3:5f:96:e7:fb:33:90:a0:
d1:22:37:5c:2a:c0:d5:09:6e:b4:3c:1b:70:c9:ea:
48:ee:ef:d0:b1:ad:28:17:3e:b0:56:9c:fd:78:54:
51:6d:09:41:86:07:e1:81:b6:fd:de:bb:8f:47:9d:
ff:ab:8b:07:45:66:f1:bb:3b:fb:bd:d1:77:a2:08:
d8:ae:6b:71:e9:37:39:c9:8d:8a:f8:3a:20:9b:05:
28:04:78:a7:39:3b:e4:83:d9:60:a2:a7:39:25:a2:
34:a5:4f:6d:6e:0f:d0:ac:cd:d2:5f:62:5f:f2:65:
1c:06:26:0e:9d:68:3d:5c:7f:e8:0a:16:88:29:c6:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AA:CB:1F:EB:C2:F4:EB:EE:52:AE:C8:9C:A1:AE:90:80:8D:48:1F
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:29:b4:0a:8d:a4:a8:bb:a0:20:5c:0a:8e:5b:6f:98:cc:0e:
7c:5d:4c:c0:b8:3c:71:6c:49:50:50:51:df:02:d7:2f:e9:d1:
52:6b:bb:ad:3f:b8:98:23:67:74:4b:31:11:04:2c:d4:62:60:
ab:21:8d:1d:11:75:c4:1a:92:d4:b2:5a:4c:26:fd:a8:8b:b9:
9d:49:f5:68:1b:dd:0d:a8:e4:b2:81:cf:69:55:a6:cd:62:20:
2e:50:a8:e3:4a:da:10:68:2d:32:68:3b:af:28:30:6c:a9:e0:
ce:30:9f:e6:cc:5a:15:de:ca:2a:f6:03:73:01:66:ac:21:14:
c9:de:94:6c:aa:0f:53:a8:26:34:6e:76:0d:2f:df:2d:0f:91:
fa:53:fa:a2:ef:d9:d4:76:70:04:12:71:a8:b3:8b:40:6c:23:
d0:b9:51:f9:72:83:7a:de:98:42:2f:aa:4a:cf:34:73:1e:04:
7a:58:a9:44:ae:d2:20:fa:41:f0:ba:c2:27:ac:53:65:62:75:
4f:3c:ae:d9:74:35:c7:98:18:5d:c8:b6:c6:3a:cf:ac:aa:4d:
ba:af:11:83:44:dc:cf:bf:ea:c0:fc:af:5b:4b:34:4b:f5:00:
27:6c:0a:94:a7:2f:1c:20:49:94:dc:10:59:6c:cc:08:a1:c1:
bf:52:da:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTR1bCyeiApuC5tf1gmtIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjE0NTc1NjA4MGFmZjFiYjAwZjVmOTBmZDlmMmYyN2Nj
NTczMmEwHhcNMjUwNjA5MDYwMTEzWhcNMjUwNjEwMDYwMTEzWjAzMTEwLwYDVQQD
EyhlM2FhY2IxZmViYzJmNGViZWU1MmFlYzg5Y2ExYWU5MDgwOGQ0ODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN5yXaEbT+3OwAki6sej2h9G+ZK7
NZjZpNKWaR6uB1QQKjqvxjPsR4TSlGJTAfDnVJ6GCfVyXYmNc26CRmpsQ93EDqbm
4eblh8zig++oW24JOCsGL1le6m+AYN4HtAsBtkDoNYrwn6OROy1avgT4+6sJRbIA
UniT1aZXEBNc41+W5/szkKDRIjdcKsDVCW60PBtwyepI7u/Qsa0oFz6wVpz9eFRR
bQlBhgfhgbb93ruPR53/q4sHRWbxuzv7vdF3ogjYrmtx6Tc5yY2K+DogmwUoBHin
OTvkg9lgoqc5JaI0pU9tbg/QrM3SX2Jf8mUcBiYOnWg9XH/oChaIKcbTxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOqyx/rwvTr7lKuyJyhrpCAjUgfMB8GA1UdIwQY
MBaAFN6xRXVggK/xuwD1+Q/Z8vJ8xXMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1Njgt
M2ZmOTY0NTUwM2U5LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1NjgtM2ZmOTY0NTUwM2U5
LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSm0Co2k
qLugIFwKjltvmMwOfF1MwLg8cWxJUFBR3wLXL+nRUmu7rT+4mCNndEsxEQQs1GJg
qyGNHRF1xBqS1LJaTCb9qIu5nUn1aBvdDajksoHPaVWmzWIgLlCo40raEGgtMmg7
rygwbKngzjCf5sxaFd7KKvYDcwFmrCEUyd6UbKoPU6gmNG52DS/fLQ+R+lP6ou/Z
1HZwBBJxqLOLQGwj0LlR+XKDet6YQi+qSs80cx4EelipRK7SIPpB8LrCJ6xTZWJ1
Tzyu2XQ1x5gYXci2xjrPrKpNuq8Rg0Tcz7/qwPyvW0s0S/UAJ2wKlKcvHCBJlNwQ
WWzMCKHBv1LaeA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:29:54 2025 by rpki-client