Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
File: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft (raw, json)
Hash identifier: P95H7IsqP4LaUB9efrSDSYcX2aeUMzy9bAnIpu7PNqo=
Subject key identifier: 75:21:61:E3:0C:27:0A:5E:F3:44:BC:C1:D6:79:CF:59:73:D2:FE:AF
Authority key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
Certificate issuer: /CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Certificate serial: 01974A43BFCFEB24D9FDC724FD7A08D4D9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 12:00:43 +0000
Manifest this update: Sat 07 Jun 2025 12:00:43 +0000
Manifest next update: Sun 08 Jun 2025 12:00:43 +0000
Files and hashes: 1: 3R3CMh1y4wsFDSZM0M3C1xZygbQ.roa (hash: XMT6KzECLufc9ZTbE5ZuXejsU3/rr0tksv09pEK0Cjw=)
2: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl (hash: /Fqtw734rqdXy/qdxT0UkPojGJIhU/M+koQJWrXLyu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:bf:cf:eb:24:d9:fd:c7:24:fd:7a:08:d4:d9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e
Validity
Not Before: Jun 7 12:00:43 2025 GMT
Not After : Jun 8 12:00:43 2025 GMT
Subject: CN=752161e30c270a5ef344bcc1d679cf5973d2feaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6b:56:32:f9:6a:75:ca:b6:c0:4b:23:3b:c5:
b6:f8:92:85:64:e6:7d:50:b5:d6:8c:4a:51:9c:59:
0c:d1:d3:11:1c:41:10:b7:ea:0b:33:76:a8:9b:05:
78:30:51:b3:8c:db:16:5d:b0:18:13:6f:d9:84:36:
5a:95:7a:76:fd:f2:f9:37:8f:ce:a4:10:e4:1d:c1:
3b:43:ed:d4:40:37:40:40:26:a5:03:cd:ed:b2:93:
8b:c3:8f:c2:75:dc:c0:e4:ea:8b:88:36:88:25:36:
22:0e:05:3c:a6:2d:48:89:55:a8:f7:67:b6:b9:76:
18:cf:63:8e:62:6c:fa:3b:c9:3c:28:72:4d:e2:da:
d3:c4:c8:3a:43:f1:a7:52:0a:ac:59:dc:39:86:e2:
a1:82:1f:3d:3e:50:57:e7:d7:85:16:e1:7f:42:c9:
0d:df:18:00:41:c0:f0:75:4c:1a:c4:23:ba:25:68:
7f:e6:51:32:ea:7f:20:a5:64:60:3d:d3:fa:52:ea:
52:5d:7a:03:bb:13:c1:1a:44:c6:23:97:33:a0:0b:
fc:4c:7b:54:fd:c4:e0:e6:00:d5:80:98:71:4b:37:
71:6b:64:82:82:78:7c:4c:97:0e:14:21:d4:3a:f1:
c7:60:27:01:0e:1b:ea:04:51:67:14:ce:db:5c:86:
f3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:21:61:E3:0C:27:0A:5E:F3:44:BC:C1:D6:79:CF:59:73:D2:FE:AF
X509v3 Authority Key Identifier:
keyid:DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ba:ed:8b:fc:ed:3f:a7:23:32:8d:f0:a6:a9:a9:ce:2e:cf:
fe:78:16:3d:d5:cf:a9:3f:0f:60:bb:00:71:d9:e7:b1:e2:91:
de:da:7e:b3:03:3c:ed:3c:cd:55:fe:08:34:36:e5:e8:b1:b4:
81:c9:29:ff:66:b1:a8:03:97:2b:15:57:47:1b:96:21:4f:b8:
35:95:2c:58:67:bf:ea:30:4d:41:9c:55:ad:fb:36:bd:a3:d8:
e2:2c:52:19:e8:6f:ed:b1:1e:fb:94:28:e5:20:07:a6:f8:76:
cc:61:2e:6f:c0:88:9f:46:2a:62:a9:c6:8d:29:8e:f1:d0:6d:
a6:1d:2f:f1:46:74:24:3d:4c:86:c1:9a:05:5a:75:dd:d7:4d:
14:c4:d1:4f:2e:f9:fe:ba:ab:55:84:96:d6:1f:cc:c7:e1:91:
09:c8:3f:2f:b9:4f:0a:27:1c:52:0a:bd:80:21:50:69:1a:fd:
12:0a:e5:5e:c1:cf:07:df:d5:49:8d:55:dc:c2:bc:c7:1d:c5:
f9:bd:a2:74:94:f4:fe:8d:99:96:33:0a:64:a0:75:aa:fa:97:
00:18:74:bf:01:b1:bb:36:24:17:eb:8d:f5:8f:67:71:84:fe:
0e:c0:c1:e4:54:0e:cc:46:2a:c5:f4:e9:2c:c4:1b:12:06:1a:
a8:e3:22:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ7/P6yTZ/cck/XoI1NneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I3OTZjM2ZjNTU5YmZhZjRiNzY1NTA4OTRjZmY0ZDMw
YjliN2UwHhcNMjUwNjA3MTIwMDQzWhcNMjUwNjA4MTIwMDQzWjAzMTEwLwYDVQQD
Eyg3NTIxNjFlMzBjMjcwYTVlZjM0NGJjYzFkNjc5Y2Y1OTczZDJmZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmtWMvlqdcq2wEsjO8W2+JKFZOZ9
ULXWjEpRnFkM0dMRHEEQt+oLM3aomwV4MFGzjNsWXbAYE2/ZhDZalXp2/fL5N4/O
pBDkHcE7Q+3UQDdAQCalA83tspOLw4/CddzA5OqLiDaIJTYiDgU8pi1IiVWo92e2
uXYYz2OOYmz6O8k8KHJN4trTxMg6Q/GnUgqsWdw5huKhgh89PlBX59eFFuF/QskN
3xgAQcDwdUwaxCO6JWh/5lEy6n8gpWRgPdP6UupSXXoDuxPBGkTGI5czoAv8THtU
/cTg5gDVgJhxSzdxa2SCgnh8TJcOFCHUOvHHYCcBDhvqBFFnFM7bXIbzCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUhYeMMJwpe80S8wdZ5z1lz0v6vMB8GA1UdIwQY
MBaAFN87eWw/xVm/r0t2VQiUz/TTC5t+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jN2ZkYzgtY2FlYi00NzQxLWJlNGUt
MjhlNDRmMmVlOTBhLzEvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jN2ZkYzgtY2FlYi00NzQxLWJlNGUtMjhlNDRmMmVlOTBh
LzEvM3p0NWJEX0ZXYi12UzNaVkNKVFA5Tk1MbTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrrti/zt
P6cjMo3wpqmpzi7P/ngWPdXPqT8PYLsAcdnnseKR3tp+swM87TzNVf4INDbl6LG0
gckp/2axqAOXKxVXRxuWIU+4NZUsWGe/6jBNQZxVrfs2vaPY4ixSGehv7bEe+5Qo
5SAHpvh2zGEub8CIn0YqYqnGjSmO8dBtph0v8UZ0JD1MhsGaBVp13ddNFMTRTy75
/rqrVYSW1h/Mx+GRCcg/L7lPCiccUgq9gCFQaRr9EgrlXsHPB9/VSY1V3MK8xx3F
+b2idJT0/o2ZljMKZKB1qvqXABh0vwGxuzYkF+uN9Y9ncYT+DsDB5FQOzEYqxfTp
LMQbEgYaqOMi6w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:25:22 2025 by rpki-client