Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
File: 3hItFywTsVKR5B-UVoFSWCb--JI.mft (raw, json)
Hash identifier: npOU9la7rBxF+gbZpZLVCtPRhrZUTYZYqXieTCUE23E=
Subject key identifier: 1E:34:50:4F:09:AF:50:43:8F:14:29:8E:7D:BB:4F:FD:2A:A3:8B:A1
Authority key identifier: DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
Certificate issuer: /CN=de122d172c13b15291e41f945681525826fef892
Certificate serial: 0197500E9F45C5919C229B1060D7FAED19BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
Manifest number: 0EDD
Signing time: Sun 08 Jun 2025 15:00:24 +0000
Manifest this update: Sun 08 Jun 2025 15:00:24 +0000
Manifest next update: Mon 09 Jun 2025 15:00:24 +0000
Files and hashes: 1: 3hItFywTsVKR5B-UVoFSWCb--JI.crl (hash: hoaq1O2cDpYpLEm8qJjJ0VIY/czYIYfJJjpusGUX9q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:9f:45:c5:91:9c:22:9b:10:60:d7:fa:ed:19:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de122d172c13b15291e41f945681525826fef892
Validity
Not Before: Jun 8 15:00:24 2025 GMT
Not After : Jun 9 15:00:24 2025 GMT
Subject: CN=1e34504f09af50438f14298e7dbb4ffd2aa38ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:32:ab:f7:15:31:7d:fe:5c:c6:fd:ea:c4:51:
46:ea:53:10:9e:0b:57:71:53:af:14:45:2f:33:67:
ef:cc:ae:e6:c4:05:9c:36:20:70:2b:2f:9b:58:58:
e3:cf:12:8e:69:63:64:2b:46:58:55:db:44:92:7c:
7c:e7:73:f7:ee:b9:51:99:d3:b8:8e:85:40:e4:8f:
ab:e5:43:a4:66:9d:71:b5:6f:35:15:2d:9e:5a:cd:
b6:f1:53:40:c7:32:66:60:ee:c9:91:fd:66:ae:d5:
d9:d5:fa:c9:66:7d:a7:7c:1f:50:8b:ec:9f:23:ae:
ce:f9:c9:2e:a0:81:08:8d:ac:84:ba:42:3e:40:f0:
2a:fe:5d:b6:e3:8c:af:f6:4c:3c:74:40:73:3c:be:
4f:40:79:36:b3:db:64:01:96:e2:79:77:ff:67:2f:
98:24:42:a4:67:8a:5e:03:84:9f:a5:dd:8b:fc:98:
8d:82:45:89:3a:35:f3:fd:fe:78:eb:c9:2a:47:d6:
52:a9:b8:17:5c:aa:0f:31:d9:58:98:4a:2d:3a:a7:
26:d8:6a:f9:8e:58:a0:ae:38:be:a2:b4:41:0a:5f:
32:b9:bb:66:18:db:92:de:e7:25:a2:44:36:9c:37:
ab:ed:eb:6e:63:53:17:a1:86:ea:b8:8e:b0:de:e1:
ae:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:34:50:4F:09:AF:50:43:8F:14:29:8E:7D:BB:4F:FD:2A:A3:8B:A1
X509v3 Authority Key Identifier:
keyid:DE:12:2D:17:2C:13:B1:52:91:E4:1F:94:56:81:52:58:26:FE:F8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hItFywTsVKR5B-UVoFSWCb--JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/837022-fddb-4fc9-a733-365c4b5c24ed/1/3hItFywTsVKR5B-UVoFSWCb--JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c2:db:95:46:fc:42:d0:c2:1c:36:7c:8a:dc:4b:2b:77:3e:
be:b7:7f:1e:47:4b:3e:05:5b:a2:26:d5:89:30:9b:bb:7e:0f:
1f:29:9a:55:a9:e8:1d:03:53:b6:34:af:65:d3:dd:5a:08:11:
98:57:db:f7:6d:45:30:eb:d8:68:6a:ea:30:f9:52:61:61:a7:
e2:ec:e1:ce:62:64:8d:03:9b:7e:2e:02:d8:cd:87:7b:30:db:
96:4c:51:78:a7:74:8b:49:ad:b9:66:d6:9b:77:82:ea:a5:11:
a8:0c:4a:45:7a:1b:1b:7b:9d:0f:52:67:f2:57:df:24:3f:83:
96:06:fb:ca:97:df:ea:86:78:03:84:d4:6a:06:08:1c:44:bc:
b4:05:fe:28:5f:bf:7a:22:7a:6c:f7:95:47:e9:9c:3e:64:6d:
17:7b:0d:ff:57:97:1c:51:53:4b:c4:72:3f:ed:f4:14:c3:3d:
5a:c8:3a:f0:c2:5d:2f:3b:f9:9d:e5:bc:9e:82:94:7a:ef:27:
50:f4:1a:e6:d9:e0:c5:76:b1:a0:a2:de:22:ef:78:b2:70:15:
71:e4:d4:59:c4:ec:f7:7a:bf:32:11:ca:4f:44:da:f8:3f:27:
93:d6:b8:30:5e:a2:db:cc:da:15:f1:52:8f:13:55:47:c7:db:
d0:3a:05:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQDp9FxZGcIpsQYNf67Rm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTIyZDE3MmMxM2IxNTI5MWU0MWY5NDU2ODE1MjU4MjZm
ZWY4OTIwHhcNMjUwNjA4MTUwMDI0WhcNMjUwNjA5MTUwMDI0WjAzMTEwLwYDVQQD
EygxZTM0NTA0ZjA5YWY1MDQzOGYxNDI5OGU3ZGJiNGZmZDJhYTM4YmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTKr9xUxff5cxv3qxFFG6lMQngtX
cVOvFEUvM2fvzK7mxAWcNiBwKy+bWFjjzxKOaWNkK0ZYVdtEknx853P37rlRmdO4
joVA5I+r5UOkZp1xtW81FS2eWs228VNAxzJmYO7Jkf1mrtXZ1frJZn2nfB9Qi+yf
I67O+ckuoIEIjayEukI+QPAq/l2244yv9kw8dEBzPL5PQHk2s9tkAZbieXf/Zy+Y
JEKkZ4peA4Sfpd2L/JiNgkWJOjXz/f5468kqR9ZSqbgXXKoPMdlYmEotOqcm2Gr5
jligrji+orRBCl8yubtmGNuS3uclokQ2nDer7etuY1MXoYbquI6w3uGuXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB40UE8Jr1BDjxQpjn27T/0qo4uhMB8GA1UdIwQY
MBaAFN4SLRcsE7FSkeQflFaBUlgm/viSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84MzcwMjItZmRkYi00ZmM5LWE3MzMt
MzY1YzRiNWMyNGVkLzEvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84MzcwMjItZmRkYi00ZmM5LWE3MzMtMzY1YzRiNWMyNGVk
LzEvM2hJdEZ5d1RzVktSNUItVVZvRlNXQ2ItLUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMLblUb8
QtDCHDZ8itxLK3c+vrd/HkdLPgVboibViTCbu34PHymaVanoHQNTtjSvZdPdWggR
mFfb921FMOvYaGrqMPlSYWGn4uzhzmJkjQObfi4C2M2HezDblkxReKd0i0mtuWbW
m3eC6qURqAxKRXobG3udD1Jn8lffJD+Dlgb7ypff6oZ4A4TUagYIHES8tAX+KF+/
eiJ6bPeVR+mcPmRtF3sN/1eXHFFTS8RyP+30FMM9Wsg68MJdLzv5neW8noKUeu8n
UPQa5tngxXaxoKLeIu94snAVceTUWcTs93q/MhHKT0Ta+D8nk9a4MF6i28zaFfFS
jxNVR8fb0DoFjQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:38:44 2025 by rpki-client