Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
File: 3IScc2nn5SxwUdIdunKYMIvpxCg.mft (raw, json)
Hash identifier: tq8vZmCtcADsjTjtFJxGXh6v8Ug9bSXEkyaJEFSGKyk=
Subject key identifier: A2:38:1C:6A:F2:81:5E:FF:21:59:C1:F5:BA:A8:BC:19:90:EB:1B:52
Authority key identifier: DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
Certificate issuer: /CN=dc849c7369e7e52c7051d21dba7298308be9c428
Certificate serial: 019749D5B79188A3D6BA423B5A960172D314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 10:00:32 +0000
Manifest this update: Sat 07 Jun 2025 10:00:32 +0000
Manifest next update: Sun 08 Jun 2025 10:00:32 +0000
Files and hashes: 1: 3IScc2nn5SxwUdIdunKYMIvpxCg.crl (hash: rZ8QPBm2u5jeI421yj1HDl4ycZNSWoeUS3IxL9XDemc=)
2: A1Kij3UmuqlYPUgtFwkRpc3mYFI.roa (hash: 7eehR/MKaZhrxZxZgGixZL1BWxFDBQrZZYdPEfeskDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:b7:91:88:a3:d6:ba:42:3b:5a:96:01:72:d3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc849c7369e7e52c7051d21dba7298308be9c428
Validity
Not Before: Jun 7 10:00:32 2025 GMT
Not After : Jun 8 10:00:32 2025 GMT
Subject: CN=a2381c6af2815eff2159c1f5baa8bc1990eb1b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:7a:8e:b5:5f:ee:71:1c:2a:66:32:7d:e0:
32:3b:08:21:48:75:cc:e0:46:37:4b:63:48:64:9e:
b1:24:cb:6e:5c:ee:86:c4:3c:bd:61:b7:f4:5a:3b:
70:3c:86:b8:b6:ba:a3:c8:b0:ed:9a:7d:67:c7:e5:
0b:be:4f:90:be:19:77:13:be:09:46:10:c5:26:af:
6a:2b:0e:fa:33:39:6a:1c:99:31:1d:58:b0:a2:2c:
c5:b6:26:4d:37:b2:b8:40:9b:7d:1b:25:96:fb:a5:
9f:4f:82:c5:41:3c:fa:a1:04:84:6b:df:d6:48:cb:
3d:ff:5b:7b:f3:3f:42:47:05:bd:58:b0:fd:50:6d:
a5:02:a3:e2:38:c2:91:cd:67:9d:f8:bd:38:e0:cb:
8c:d6:5e:9d:bd:ce:7b:72:7d:67:6f:a8:b4:5c:a5:
75:8c:c1:46:a6:26:9b:98:af:fc:97:8d:20:27:dc:
78:08:38:d3:c2:b1:50:d2:44:03:50:84:73:c9:6d:
b5:ad:40:fe:5d:19:76:12:00:9d:63:81:15:4c:0f:
c1:37:db:f8:5a:4a:05:51:56:a8:96:bd:8a:90:c6:
0b:64:ac:42:de:e7:49:98:6c:1b:c0:63:fa:2a:dd:
eb:85:f0:f5:45:47:85:dc:51:87:ec:26:cb:27:13:
e5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:38:1C:6A:F2:81:5E:FF:21:59:C1:F5:BA:A8:BC:19:90:EB:1B:52
X509v3 Authority Key Identifier:
keyid:DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ff:de:13:f0:ce:97:9f:bf:99:40:0b:5f:88:f5:3d:38:87:
5b:b2:df:d4:aa:30:91:31:1d:05:1b:87:cc:d2:da:0f:d8:40:
61:67:96:c1:8e:47:0a:17:83:92:bb:80:5a:7a:e1:0c:70:92:
de:5e:a2:02:80:33:42:d6:d3:27:a5:27:b8:03:a7:ad:01:8f:
12:e4:17:73:09:c1:00:cb:7f:5b:9f:9e:08:d9:a2:23:50:3b:
07:97:f0:22:f3:14:61:5a:14:4c:03:d6:3a:09:95:20:77:f6:
14:a9:b9:52:3e:c5:86:d8:31:0b:08:1b:50:56:62:5a:d2:ca:
f5:8c:d5:fd:cd:62:a1:c9:1f:0c:ef:98:44:ec:28:1d:c0:3c:
1c:8c:2d:c6:54:89:60:a3:1d:96:20:df:79:a8:5a:a1:d4:55:
d9:c4:33:e6:09:b1:f0:06:77:74:32:d6:bc:31:3b:11:d0:ef:
87:09:dc:7e:d6:9a:eb:d3:ac:8d:48:26:7d:99:88:0e:87:57:
fc:f2:c4:dc:3e:07:cf:92:6b:f1:66:ef:c4:37:80:62:97:9f:
dd:11:73:87:9a:77:35:81:a4:d1:45:da:20:7f:a2:41:ea:2b:
f0:2d:9f:0e:d7:fb:ff:75:0e:b9:0f:12:1b:67:47:a7:46:9b:
4b:6a:6f:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1beRiKPWukI7WpYBctMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODQ5YzczNjllN2U1MmM3MDUxZDIxZGJhNzI5ODMwOGJl
OWM0MjgwHhcNMjUwNjA3MTAwMDMyWhcNMjUwNjA4MTAwMDMyWjAzMTEwLwYDVQQD
EyhhMjM4MWM2YWYyODE1ZWZmMjE1OWMxZjViYWE4YmMxOTkwZWIxYjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+h6jrVf7nEcKmYyfeAyOwghSHXM
4EY3S2NIZJ6xJMtuXO6GxDy9Ybf0WjtwPIa4trqjyLDtmn1nx+ULvk+Qvhl3E74J
RhDFJq9qKw76MzlqHJkxHViwoizFtiZNN7K4QJt9GyWW+6WfT4LFQTz6oQSEa9/W
SMs9/1t78z9CRwW9WLD9UG2lAqPiOMKRzWed+L044MuM1l6dvc57cn1nb6i0XKV1
jMFGpiabmK/8l40gJ9x4CDjTwrFQ0kQDUIRzyW21rUD+XRl2EgCdY4EVTA/BN9v4
WkoFUVaolr2KkMYLZKxC3udJmGwbwGP6Kt3rhfD1RUeF3FGH7CbLJxPldwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKI4HGrygV7/IVnB9bqovBmQ6xtSMB8GA1UdIwQY
MBaAFNyEnHNp5+UscFHSHbpymDCL6cQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYmU4Y2YtMDdlYy00N2NiLThmNjMt
ZDNhMDZkMWY1YjRiLzEvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xYmU4Y2YtMDdlYy00N2NiLThmNjMtZDNhMDZkMWY1YjRi
LzEvM0lTY2Mybm41U3h3VWRJZHVuS1lNSXZweENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjf/eE/DO
l5+/mUALX4j1PTiHW7Lf1KowkTEdBRuHzNLaD9hAYWeWwY5HCheDkruAWnrhDHCS
3l6iAoAzQtbTJ6UnuAOnrQGPEuQXcwnBAMt/W5+eCNmiI1A7B5fwIvMUYVoUTAPW
OgmVIHf2FKm5Uj7FhtgxCwgbUFZiWtLK9YzV/c1iockfDO+YROwoHcA8HIwtxlSJ
YKMdliDfeahaodRV2cQz5gmx8AZ3dDLWvDE7EdDvhwncftaa69OsjUgmfZmIDodX
/PLE3D4Hz5Jr8WbvxDeAYpef3RFzh5p3NYGk0UXaIH+iQeor8C2fDtf7/3UOuQ8S
G2dHp0abS2pv+w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:14 2025 by rpki-client