Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
File: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft (raw, json)
Hash identifier: b5ukVNAj1PZmAINMj8K5Om1Ld10zNMB1cvW3NBJ24CQ=
Subject key identifier: BB:85:DD:FE:14:A6:C3:AE:28:BA:E6:50:57:7F:29:B7:44:4A:31:E5
Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
Certificate issuer: /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Certificate serial: 01974D0DB562C40F511DA3DB891EBE6B76A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
Manifest number: 1435
Signing time: Sun 08 Jun 2025 01:00:33 +0000
Manifest this update: Sun 08 Jun 2025 01:00:33 +0000
Manifest next update: Mon 09 Jun 2025 01:00:33 +0000
Files and hashes: 1: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl (hash: VSriotxnp4FTeJysCmbbx4kf3mYF86zHXnXLl5+0d34=)
2: Wh1jH5vANwZcwldoZxeJx9Ms8Tw.roa (hash: /m2D3y0N+aO5CYT+TsC7FYKiJpOsP+DSU+ozinhXmV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:b5:62:c4:0f:51:1d:a3:db:89:1e:be:6b:76:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Validity
Not Before: Jun 8 01:00:33 2025 GMT
Not After : Jun 9 01:00:33 2025 GMT
Subject: CN=bb85ddfe14a6c3ae28bae650577f29b7444a31e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3e:3c:ee:4c:c4:4d:fa:2f:28:e0:2f:c2:b7:
de:cb:53:19:ab:31:2b:31:dc:bc:9e:83:0f:87:67:
97:25:ad:e7:b6:1e:7f:6c:82:1a:bd:c3:26:1d:3d:
9b:6d:87:63:4c:f9:b0:c8:93:8e:ce:54:36:c5:74:
85:12:01:86:95:90:74:d3:02:54:49:32:bd:30:0b:
06:93:34:54:34:93:93:b7:14:d3:98:a3:6e:5c:01:
84:e0:db:6b:71:56:6e:a0:35:b1:39:bc:b6:e1:e5:
09:4d:a6:74:10:d8:a5:48:10:70:b2:ff:7e:d3:01:
a5:07:88:9a:ba:e8:e1:7f:26:90:8f:41:a6:57:34:
df:df:f2:a2:69:c8:97:92:5e:c4:84:c0:2c:a3:f2:
08:50:da:92:97:da:d7:3c:07:45:15:35:59:02:6c:
67:fa:93:c5:08:70:b4:55:2f:69:a8:fe:c3:7b:7f:
b5:8a:bb:fe:23:7c:a3:2b:52:f1:32:3a:0d:06:9a:
1b:be:7c:57:97:a3:59:5a:96:d0:96:a9:aa:b8:60:
e8:60:3d:ba:0f:f5:ae:6d:61:aa:07:88:70:0b:01:
4d:11:5b:a5:c6:fe:35:c0:b2:e6:2f:9c:af:f0:09:
50:99:8a:05:bb:c0:15:b4:0a:48:c1:97:1a:30:71:
45:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:85:DD:FE:14:A6:C3:AE:28:BA:E6:50:57:7F:29:B7:44:4A:31:E5
X509v3 Authority Key Identifier:
keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5a:c6:5d:0b:5f:d5:bb:50:fb:ac:a4:92:3d:06:9c:c0:52:
80:e8:3a:2b:3f:82:5f:17:3d:18:62:60:7a:26:36:12:b3:63:
d0:43:1d:ac:d9:b2:74:7b:6d:24:fc:48:7a:f4:ae:5b:de:3d:
78:1b:a6:94:af:15:b8:24:2d:fb:14:e0:1d:82:94:69:30:9a:
cb:7a:9d:77:7e:bb:ec:90:55:74:1f:f8:52:41:05:68:32:62:
ba:70:ab:c4:a0:fe:79:92:0b:8a:b6:10:e6:cd:99:a0:cd:2c:
71:0e:3f:c8:ab:fc:9a:f5:fb:ae:45:67:49:15:e9:70:3e:c8:
cf:99:56:70:50:5b:39:5d:95:44:d0:b5:9a:50:f7:fb:de:33:
02:c4:48:0b:01:f1:08:5e:c7:53:93:9b:f0:8e:44:0f:d3:6e:
62:8b:6c:0c:fd:b8:ed:02:1b:f5:80:88:64:dd:ae:ab:b8:f7:
b7:8e:0b:99:20:c9:a8:0b:76:e4:b9:bc:34:dd:89:0e:17:b8:
39:0b:47:cb:22:1b:1c:48:75:97:05:03:e4:57:81:07:73:22:
bf:4a:0e:e2:15:fa:a8:33:98:5e:71:a9:26:38:28:f8:04:e7:
86:b0:18:5b:56:68:db:2a:25:4b:80:c4:73:0d:ed:0f:8b:ea:
96:e8:36:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDbVixA9RHaPbiR6+a3apMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMmMyZmVmOWM4Y2FmOGYyZjA4MjExZWYwMmMzZDBhZDM0
NzQ5MTcwHhcNMjUwNjA4MDEwMDMzWhcNMjUwNjA5MDEwMDMzWjAzMTEwLwYDVQQD
EyhiYjg1ZGRmZTE0YTZjM2FlMjhiYWU2NTA1NzdmMjliNzQ0NGEzMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7z487kzETfovKOAvwrfey1MZqzEr
Mdy8noMPh2eXJa3nth5/bIIavcMmHT2bbYdjTPmwyJOOzlQ2xXSFEgGGlZB00wJU
STK9MAsGkzRUNJOTtxTTmKNuXAGE4NtrcVZuoDWxOby24eUJTaZ0ENilSBBwsv9+
0wGlB4iauujhfyaQj0GmVzTf3/KiaciXkl7EhMAso/IIUNqSl9rXPAdFFTVZAmxn
+pPFCHC0VS9pqP7De3+1irv+I3yjK1LxMjoNBpobvnxXl6NZWpbQlqmquGDoYD26
D/WubWGqB4hwCwFNEVulxv41wLLmL5yv8AlQmYoFu8AVtApIwZcaMHFFxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuF3f4UpsOuKLrmUFd/KbdESjHlMB8GA1UdIwQY
MBaAFNwsL++cjK+PLwghHvAsPQrTR0kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0N3djc1eU1yNDh2Q0NFZThDdzlDdE5IU1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8wODUzMWItYmQ2Ni00ZmNlLWE1Njkt
ODY0NGM1ODE0YzlhLzEvM0N3djc1eU1yNDh2Q0NFZThDdzlDdE5IU1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8wODUzMWItYmQ2Ni00ZmNlLWE1NjktODY0NGM1ODE0Yzlh
LzEvM0N3djc1eU1yNDh2Q0NFZThDdzlDdE5IU1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlrGXQtf
1btQ+6ykkj0GnMBSgOg6Kz+CXxc9GGJgeiY2ErNj0EMdrNmydHttJPxIevSuW949
eBumlK8VuCQt+xTgHYKUaTCay3qdd3677JBVdB/4UkEFaDJiunCrxKD+eZILirYQ
5s2ZoM0scQ4/yKv8mvX7rkVnSRXpcD7Iz5lWcFBbOV2VRNC1mlD3+94zAsRICwHx
CF7HU5Ob8I5ED9NuYotsDP247QIb9YCIZN2uq7j3t44LmSDJqAt25Lm8NN2JDhe4
OQtHyyIbHEh1lwUD5FeBB3Miv0oO4hX6qDOYXnGpJjgo+ATnhrAYW1Zo2yolS4DE
cw3tD4vqlug2XQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:14:30 2025 by rpki-client