Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft (raw, json)
Hash identifier: B5MTR9zdhkBDOSuVKr3u7HuHbHUfLe3AMFQVatBPuek=
Subject key identifier: CF:EF:7B:7F:44:B2:61:71:93:2D:EF:77:3A:AB:1F:3A:32:79:E3:2F
Authority key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Certificate issuer: /CN=dc4f90a93dc9427855644903cb70c1f74b931786
Certificate serial: 0197537E07C3D6BD4A2D4B3831F804F6CAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
Manifest number: 0386
Signing time: Mon 09 Jun 2025 07:00:57 +0000
Manifest this update: Mon 09 Jun 2025 07:00:57 +0000
Manifest next update: Tue 10 Jun 2025 07:00:57 +0000
Files and hashes: 1: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl (hash: G4cACxTHbcYfcQeIKtZT2Jcwt9l7qU5QMwgzsVWoGJE=)
2: PT68lLdfHWq61L0p7mbOXLRwHhw.roa (hash: A4keDsv/7uOGmjAx+h6C5RlssIOEsmTqNcUP9OgH66s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7e:07:c3:d6:bd:4a:2d:4b:38:31:f8:04:f6:ca:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Validity
Not Before: Jun 9 07:00:57 2025 GMT
Not After : Jun 10 07:00:57 2025 GMT
Subject: CN=cfef7b7f44b26171932def773aab1f3a3279e32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:3f:60:f4:1b:6f:26:b5:89:2e:e4:5c:4c:
a2:24:aa:4c:dd:28:6c:01:59:ef:e9:f4:4c:66:fd:
90:f1:52:a9:2a:81:57:aa:fd:7e:ef:2c:82:83:0d:
db:c6:64:ad:5f:8a:df:3f:a8:29:a9:13:c1:1d:bc:
c1:06:16:76:29:64:1f:33:55:da:6f:22:32:83:f2:
e7:f1:d5:b7:16:69:48:c6:f5:b0:54:48:51:0d:11:
86:f9:b4:3e:d0:6e:86:d6:32:72:97:fd:e6:dc:3e:
90:e5:99:cf:b3:bf:0d:17:3e:7f:58:54:16:df:b3:
ee:fd:d3:bf:af:62:ea:3c:d6:b9:6f:18:87:7d:86:
a0:9a:4c:92:cd:00:11:4e:6a:77:ce:96:18:39:77:
9e:36:54:e8:63:01:50:2d:bd:d4:6c:d1:bf:26:f7:
28:3d:e7:56:45:db:f2:37:3d:7a:a1:0a:d3:ec:bc:
f8:e4:79:da:1a:a5:fa:75:c3:e1:bb:4d:bc:11:47:
54:2b:87:67:0d:d8:2a:fe:7c:03:f4:25:e6:67:4a:
7e:1c:b7:25:b3:24:34:3c:e6:15:d8:10:e6:b3:72:
49:65:f9:90:1e:c6:7a:ff:9c:d1:55:3f:86:b0:0c:
22:f6:cc:83:1c:91:7d:2b:ca:c2:06:c3:0b:b7:20:
d0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EF:7B:7F:44:B2:61:71:93:2D:EF:77:3A:AB:1F:3A:32:79:E3:2F
X509v3 Authority Key Identifier:
keyid:DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:13:75:b3:3f:48:ce:6c:61:51:d1:b2:c7:86:c8:76:05:da:
4d:23:5e:d3:8e:1c:cb:ff:d0:40:f0:b6:f6:f7:53:eb:15:32:
28:c5:a2:32:9c:0f:d8:a1:dc:86:cd:83:c5:c7:53:26:57:c8:
6a:a5:d1:a1:b4:c4:93:88:87:55:2d:94:53:f1:02:78:06:7a:
7e:a5:3b:30:e1:ec:8c:64:8f:e3:3d:26:6c:70:0e:6d:ff:5c:
ee:1a:52:dd:91:a0:f1:d1:cc:ac:4b:08:52:fc:62:75:10:0a:
99:c7:e7:43:5b:b2:b8:81:f1:c1:67:1e:4b:a6:39:69:f8:e2:
4d:b7:06:3c:83:fd:2a:6b:1f:ac:94:07:25:84:23:aa:69:89:
04:cd:a2:69:96:93:70:ae:d8:c7:2e:40:d7:4a:be:45:81:74:
60:72:e8:32:c1:84:f4:28:49:92:46:d2:b6:5a:65:29:ab:a6:
7a:33:6e:86:c2:4c:08:34:88:19:2a:7a:cd:67:ed:42:c3:b9:
e3:bc:5b:4b:2a:42:1f:f4:9e:f1:c0:27:6b:b6:ee:e4:a0:5a:
95:8d:0e:3f:dc:5b:ef:2e:a3:e4:73:8e:55:e7:d4:0c:47:c3:
78:8f:44:d4:2b:78:d3:04:6d:4e:46:9a:5c:d5:8c:fb:a1:d2:
d0:81:20:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTfgfD1r1KLUs4MfgE9sqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGY5MGE5M2RjOTQyNzg1NTY0NDkwM2NiNzBjMWY3NGI5
MzE3ODYwHhcNMjUwNjA5MDcwMDU3WhcNMjUwNjEwMDcwMDU3WjAzMTEwLwYDVQQD
EyhjZmVmN2I3ZjQ0YjI2MTcxOTMyZGVmNzczYWFiMWYzYTMyNzllMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FE/YPQbbya1iS7kXEyiJKpM3Shs
AVnv6fRMZv2Q8VKpKoFXqv1+7yyCgw3bxmStX4rfP6gpqRPBHbzBBhZ2KWQfM1Xa
byIyg/Ln8dW3FmlIxvWwVEhRDRGG+bQ+0G6G1jJyl/3m3D6Q5ZnPs78NFz5/WFQW
37Pu/dO/r2LqPNa5bxiHfYagmkySzQARTmp3zpYYOXeeNlToYwFQLb3UbNG/Jvco
PedWRdvyNz16oQrT7Lz45HnaGqX6dcPhu028EUdUK4dnDdgq/nwD9CXmZ0p+HLcl
syQ0POYV2BDms3JJZfmQHsZ6/5zRVT+GsAwi9syDHJF9K8rCBsMLtyDQvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/ve39EsmFxky3vdzqrHzoyeeMvMB8GA1UdIwQY
MBaAFNxPkKk9yUJ4VWRJA8twwfdLkxeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUt
NjMxNzdmYjE5YWJlLzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yMzgwMDItN2RjYy00NGFjLTg2NDUtNjMxNzdmYjE5YWJl
LzEvM0UtUXFUM0pRbmhWWkVrRHkzREI5MHVURjRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBN1sz9I
zmxhUdGyx4bIdgXaTSNe044cy//QQPC29vdT6xUyKMWiMpwP2KHchs2DxcdTJlfI
aqXRobTEk4iHVS2UU/ECeAZ6fqU7MOHsjGSP4z0mbHAObf9c7hpS3ZGg8dHMrEsI
UvxidRAKmcfnQ1uyuIHxwWceS6Y5afjiTbcGPIP9KmsfrJQHJYQjqmmJBM2iaZaT
cK7Yxy5A10q+RYF0YHLoMsGE9ChJkkbStlplKaumejNuhsJMCDSIGSp6zWftQsO5
47xbSypCH/Se8cAna7bu5KBalY0OP9xb7y6j5HOOVefUDEfDeI9E1Ct40wRtTkaa
XNWM+6HS0IEgkg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:54:51 2025 by rpki-client