Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: O/8D6zY3RC7LwMTZE3nr/bPZ7XRBqLlVAtdOdeAVzac=
Subject key identifier: 88:52:6B:B7:8A:1C:8A:C1:3F:39:15:3E:43:D6:E9:1F:05:D1:5F:15
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 01974EC55DAD8901068CDA8B2E9470FE76F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 0D60
Signing time: Sun 08 Jun 2025 09:00:46 +0000
Manifest this update: Sun 08 Jun 2025 09:00:46 +0000
Manifest next update: Mon 09 Jun 2025 09:00:46 +0000
Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: EBukStwcV4PNFux23fAN50Gn0xqhvlG463Tfspu630w=)
2: C9mugrtzW_-CpWlbrAzn7HLndJs.roa (hash: us/IF6tfe4s5IdJAAyc5z0B0e23waKBVaik+zvz/TyQ=)
3: yll503ISaq2wNzfEAk_Qb_MtGbg.roa (hash: LYtS+Gvc0u0aK5E+MP2oP4ZNnIbSc6rSwiTMseFfpYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:5d:ad:89:01:06:8c:da:8b:2e:94:70:fe:76:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Jun 8 09:00:46 2025 GMT
Not After : Jun 9 09:00:46 2025 GMT
Subject: CN=88526bb78a1c8ac13f39153e43d6e91f05d15f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:57:1a:5b:7d:fe:78:0c:76:dc:18:a7:81:10:
6a:95:07:0b:57:c1:9f:d5:fd:6d:c4:0c:1b:4b:a9:
78:12:14:98:cd:0f:4a:58:f1:37:26:bf:04:bc:d5:
ef:6e:98:01:a1:69:01:c0:20:cc:10:7c:5e:cd:9b:
4c:89:b1:83:bf:b9:1d:f1:55:86:23:f4:4d:36:51:
aa:45:72:fe:07:ea:fe:af:a2:e4:af:3f:2e:f3:3a:
7f:43:58:31:5e:13:19:60:8c:be:93:a2:6a:68:1f:
4d:46:4c:db:d8:c6:eb:15:5f:fc:53:a5:9d:83:8d:
a8:c6:2d:43:57:a4:f6:20:35:86:f7:a9:3a:39:d5:
5b:90:87:d7:12:2c:bc:7c:a1:8a:3d:67:43:ba:0b:
ba:2d:06:d4:f0:8f:d9:eb:c2:0b:8e:2b:ca:12:5d:
dd:e4:e7:01:65:31:46:f5:60:c1:54:c8:73:37:88:
f5:16:7e:41:bb:fb:b2:ca:f4:b1:26:82:a4:2c:60:
e8:d9:c5:77:e6:f7:6b:be:17:ae:9e:2a:4a:eb:f9:
92:f6:4b:d8:7f:8b:ed:7b:41:a4:fd:bb:b5:c8:ff:
db:0a:ba:4e:dc:1f:69:96:52:cc:ad:98:21:46:25:
cc:40:04:a4:9f:40:10:9e:5b:9d:5c:97:7b:8d:36:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:52:6B:B7:8A:1C:8A:C1:3F:39:15:3E:43:D6:E9:1F:05:D1:5F:15
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1b:68:00:36:1f:90:15:93:f7:c3:da:dd:68:f1:0d:fc:4a:
2c:f7:52:b1:2c:2b:8a:a5:75:49:04:86:3a:b2:7e:ce:40:67:
30:62:7c:10:91:d5:c2:d8:ea:b1:a6:1c:b8:60:18:4e:9f:2e:
0b:ef:b5:a1:64:3c:94:23:06:8b:7f:52:79:85:9e:81:55:b5:
65:98:b9:c3:b4:76:c5:2f:d0:a7:f9:9b:ee:36:95:db:83:17:
c1:c4:b5:5b:46:63:58:cc:d9:be:18:78:bc:02:9c:32:e5:a2:
37:93:71:2b:ab:2e:8f:85:7e:76:84:ac:17:f7:da:31:09:0f:
6e:ef:39:44:a1:60:1f:ff:00:78:fa:9c:f1:f6:e7:23:1f:0c:
1e:3b:86:89:cd:0f:cf:01:fa:a2:95:55:93:cd:49:18:4c:c1:
e0:d1:34:84:18:8f:fb:63:d4:90:17:14:75:b2:d2:96:af:89:
73:6d:fb:6e:09:dd:5f:a3:98:61:bc:a1:6d:2c:b1:26:f2:23:
9f:19:3a:b4:a2:14:6b:96:87:8e:a5:24:5e:9b:6a:d2:63:c9:
5a:30:de:ff:4d:9e:46:81:30:3c:b3:c2:00:40:58:9e:d9:61:
23:b6:cf:1f:cb:e2:f2:f2:85:d2:29:47:8b:fa:eb:55:84:1e:
cf:9d:2f:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxV2tiQEGjNqLLpRw/nbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjkxNzY0NWQ5ZDIyMDQzNWY5MWM3ZTQ2YzgxMTBjZjg5
YWNiZTQwHhcNMjUwNjA4MDkwMDQ2WhcNMjUwNjA5MDkwMDQ2WjAzMTEwLwYDVQQD
Eyg4ODUyNmJiNzhhMWM4YWMxM2YzOTE1M2U0M2Q2ZTkxZjA1ZDE1ZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFcaW33+eAx23BingRBqlQcLV8Gf
1f1txAwbS6l4EhSYzQ9KWPE3Jr8EvNXvbpgBoWkBwCDMEHxezZtMibGDv7kd8VWG
I/RNNlGqRXL+B+r+r6Lkrz8u8zp/Q1gxXhMZYIy+k6JqaB9NRkzb2MbrFV/8U6Wd
g42oxi1DV6T2IDWG96k6OdVbkIfXEiy8fKGKPWdDugu6LQbU8I/Z68ILjivKEl3d
5OcBZTFG9WDBVMhzN4j1Fn5Bu/uyyvSxJoKkLGDo2cV35vdrvheunipK6/mS9kvY
f4vte0Gk/bu1yP/bCrpO3B9pllLMrZghRiXMQASkn0AQnludXJd7jTZ9bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhSa7eKHIrBPzkVPkPW6R8F0V8VMB8GA1UdIwQY
MBaAFNxpF2RdnSIENfkcfkbIEQz4msvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2Et
NDI4YmU5MDA4ZmJhLzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2EtNDI4YmU5MDA4ZmJh
LzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhtoADYf
kBWT98Pa3WjxDfxKLPdSsSwriqV1SQSGOrJ+zkBnMGJ8EJHVwtjqsaYcuGAYTp8u
C++1oWQ8lCMGi39SeYWegVW1ZZi5w7R2xS/Qp/mb7jaV24MXwcS1W0ZjWMzZvhh4
vAKcMuWiN5NxK6suj4V+doSsF/faMQkPbu85RKFgH/8AePqc8fbnIx8MHjuGic0P
zwH6opVVk81JGEzB4NE0hBiP+2PUkBcUdbLSlq+Jc237bgndX6OYYbyhbSyxJvIj
nxk6tKIUa5aHjqUkXptq0mPJWjDe/02eRoEwPLPCAEBYntlhI7bPH8vi8vKF0ilH
i/rrVYQez50vPQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:39:43 2025 by rpki-client