Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
File: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json)
Hash identifier: 4t6UFyAFRhzszGPbyJ6UElVGcy28Hp2o+2e4yu+xg/k=
Subject key identifier: 83:7B:F5:EA:1C:F8:DA:62:7A:31:56:E0:18:84:2E:EB:FC:87:9E:87
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial: 01974A0C733524737B09B4DD0956F5CAD404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
Manifest number: 10D8
Signing time: Sat 07 Jun 2025 11:00:19 +0000
Manifest this update: Sat 07 Jun 2025 11:00:19 +0000
Manifest next update: Sun 08 Jun 2025 11:00:19 +0000
Files and hashes: 1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: MMQz5L757bPg5nrHzajuOSLyQqdEx+CwhCMxowZsmyc=)
2: iVs53h_YZF7aBqVA1FOf0up1OVA.roa (hash: UW0lfLNzDTQsdkpmCT+L1fh8JEZx2jiYpIhhq1q1Nsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:73:35:24:73:7b:09:b4:dd:09:56:f5:ca:d4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
Validity
Not Before: Jun 7 11:00:19 2025 GMT
Not After : Jun 8 11:00:19 2025 GMT
Subject: CN=837bf5ea1cf8da627a3156e018842eebfc879e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:60:50:fd:4c:ba:77:42:0a:22:ba:f5:7e:
83:19:3f:57:6c:49:f7:69:7e:34:8f:f6:bb:f4:e6:
31:f4:b2:3d:07:86:c9:95:1f:8d:2e:14:72:73:cd:
5f:e7:62:a6:99:06:e6:b7:dd:19:da:d5:b9:bc:66:
d5:d4:fc:80:e8:8a:ec:8d:05:e1:5e:d1:3f:07:58:
ff:3f:9c:49:89:e0:07:cc:c5:2f:2f:9f:6f:09:36:
ef:55:58:58:25:cb:28:5c:69:2f:03:58:a1:19:96:
32:cc:e1:ac:ac:6d:7b:b6:06:4b:9a:63:67:e0:af:
be:fd:2d:d1:3b:ba:b5:4c:09:ac:4e:26:c7:f5:97:
5a:f5:71:11:2f:0f:44:2e:ad:1f:c7:ff:31:82:6f:
fa:72:44:d1:74:2f:80:83:08:04:5d:fe:18:30:c0:
24:15:a3:3e:1d:9c:7a:c1:13:e9:b0:f0:8f:14:75:
08:f2:36:c3:be:6e:1b:f6:3e:18:33:19:fb:a0:cb:
47:69:ca:db:95:2a:d6:07:90:16:c1:fa:59:b7:96:
df:05:f5:02:51:3f:1d:e9:e4:61:cf:43:c1:93:fb:
ee:15:c2:ba:6d:c2:9a:41:0f:7c:0f:6d:3b:f9:9d:
9a:50:ea:ca:72:47:c1:b5:52:2c:36:61:7a:dd:b3:
d5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7B:F5:EA:1C:F8:DA:62:7A:31:56:E0:18:84:2E:EB:FC:87:9E:87
X509v3 Authority Key Identifier:
keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7f:8d:1c:ec:27:ad:ce:1b:20:7a:4c:7a:17:52:26:63:9e:
a0:ed:40:14:76:90:cd:89:d8:c7:c4:fc:ea:14:ea:ac:5c:47:
ca:65:aa:5b:49:b4:48:69:ed:56:70:2e:82:78:e5:1f:8e:2a:
5e:42:36:ab:41:da:2e:09:80:28:46:4b:f8:1e:cf:64:93:98:
8d:64:87:0b:54:9e:d6:75:e7:ba:7c:c9:eb:c2:b1:3b:71:25:
84:d0:3b:75:51:7d:0b:8d:12:c3:de:c3:4b:91:8d:e4:d0:37:
6c:1f:23:7a:46:b0:bb:e2:56:6b:87:91:a0:c9:72:99:97:c9:
cb:6b:68:8b:7f:fe:0a:87:9e:6c:25:8b:f3:23:14:77:70:37:
1e:7e:5d:20:0e:d3:35:bc:81:71:88:d4:48:3a:77:a8:5a:59:
9b:f2:a6:43:17:7d:20:94:8a:25:e0:66:9a:5d:c0:33:ab:b5:
d1:84:40:fd:38:17:a4:26:69:4e:97:f9:d6:24:d8:5b:cd:ff:
d4:f2:a0:46:05:3c:0c:8f:88:ef:fd:e4:4d:82:b2:64:ae:9b:
ef:a2:eb:7d:97:ea:63:a4:dc:c4:4d:9b:ff:fa:68:d3:98:6f:
54:1c:27:c2:2a:33:b8:c7:f6:b1:ce:37:a6:7a:a2:59:df:b9:
41:5d:f3:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDHM1JHN7CbTdCVb1ytQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmE4Njg2M2M1NTg2NTcwMDYzNGUxMTM1ZTYxN2U0MDc5
YWY4YjkwHhcNMjUwNjA3MTEwMDE5WhcNMjUwNjA4MTEwMDE5WjAzMTEwLwYDVQQD
Eyg4MzdiZjVlYTFjZjhkYTYyN2EzMTU2ZTAxODg0MmVlYmZjODc5ZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsxgUP1MundCCiK69X6DGT9XbEn3
aX40j/a79OYx9LI9B4bJlR+NLhRyc81f52KmmQbmt90Z2tW5vGbV1PyA6IrsjQXh
XtE/B1j/P5xJieAHzMUvL59vCTbvVVhYJcsoXGkvA1ihGZYyzOGsrG17tgZLmmNn
4K++/S3RO7q1TAmsTibH9Zda9XERLw9ELq0fx/8xgm/6ckTRdC+AgwgEXf4YMMAk
FaM+HZx6wRPpsPCPFHUI8jbDvm4b9j4YMxn7oMtHacrblSrWB5AWwfpZt5bfBfUC
UT8d6eRhz0PBk/vuFcK6bcKaQQ98D207+Z2aUOrKckfBtVIsNmF63bPVuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIN79eoc+NpiejFW4BiELuv8h56HMB8GA1UdIwQY
MBaAFNz6hoY8VYZXAGNOETXmF+QHmvi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MDc2YTItMjk1Zi00NWVjLWI3Yzgt
YzVjOWM2ODliNzQ1LzEvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83MDc2YTItMjk1Zi00NWVjLWI3YzgtYzVjOWM2ODliNzQ1
LzEvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAon+NHOwn
rc4bIHpMehdSJmOeoO1AFHaQzYnYx8T86hTqrFxHymWqW0m0SGntVnAugnjlH44q
XkI2q0HaLgmAKEZL+B7PZJOYjWSHC1Se1nXnunzJ68KxO3ElhNA7dVF9C40Sw97D
S5GN5NA3bB8jekawu+JWa4eRoMlymZfJy2toi3/+CoeebCWL8yMUd3A3Hn5dIA7T
NbyBcYjUSDp3qFpZm/KmQxd9IJSKJeBmml3AM6u10YRA/TgXpCZpTpf51iTYW83/
1PKgRgU8DI+I7/3kTYKyZK6b76LrfZfqY6TcxE2b//po05hvVBwnwiozuMf2sc43
pnqiWd+5QV3zkg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:24:02 2025 by rpki-client