Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
File: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft (raw, json)
Hash identifier: x5OnDypXqL+xERAPxDRKzyKv4lRBi34WPgZefG3W/18=
Subject key identifier: 81:67:9E:47:0B:91:98:31:86:A0:7A:AC:69:39:81:7F:BB:E0:08:E6
Authority key identifier: DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
Certificate issuer: /CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Certificate serial: 01974B8DC0A21FAE2A675DE62C9DDC084F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
Manifest number: 0BD9
Signing time: Sat 07 Jun 2025 18:01:10 +0000
Manifest this update: Sat 07 Jun 2025 18:01:10 +0000
Manifest next update: Sun 08 Jun 2025 18:01:10 +0000
Files and hashes: 1: 3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl (hash: lS4Ymv4trBCZRKmqeydVWu2LuOj43hnmbjSo0O6FyTY=)
2: bJQvsBvbQPoYZP2_LHbwvNkWsqI.roa (hash: 6bSavq+Amxtx/G0AW8vYM/flHBEJUHj3DU6R3v4xOug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:c0:a2:1f:ae:2a:67:5d:e6:2c:9d:dc:08:4f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa552601c477c52bfce4a88dbabe1b7cd72e19
Validity
Not Before: Jun 7 18:01:10 2025 GMT
Not After : Jun 8 18:01:10 2025 GMT
Subject: CN=81679e470b91983186a07aac6939817fbbe008e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:da:92:f6:77:c2:25:37:9f:7e:8e:33:63:
13:7d:b8:85:39:4a:58:9f:90:58:b9:82:bd:7e:25:
4c:27:0b:69:7d:8a:19:a5:81:24:6d:17:dc:43:91:
1b:35:2a:60:ac:7d:fe:49:6c:6b:5f:a7:14:fa:6b:
be:7c:db:39:e8:75:d4:e8:74:6a:f1:d2:b2:5b:ac:
4e:bf:dc:fa:81:00:6d:89:ac:09:6d:0e:bc:e0:70:
ee:0b:59:d6:91:b5:80:16:9c:a7:8d:a9:a2:55:fb:
18:81:c9:b8:68:61:e3:6b:41:f9:66:3e:96:e3:2e:
3f:7e:53:37:09:81:b8:4c:e9:ce:f6:e8:c3:c2:9f:
f6:3d:68:7e:e8:c9:aa:dd:78:cc:7a:33:81:8d:bc:
ac:0c:0b:c8:4f:9d:10:c4:1f:0e:2f:f9:a7:6a:48:
36:a2:2b:e0:4f:52:97:0f:92:78:45:e9:e9:93:d3:
3c:45:23:74:61:c7:b4:8a:0a:ad:c3:98:42:02:d9:
7f:77:7d:ec:65:2c:99:a0:57:b5:c7:24:fd:aa:30:
2d:81:c5:4c:46:91:99:66:38:4d:da:df:ef:28:28:
b6:9a:aa:45:ac:40:56:ce:b8:64:a6:f4:9b:b2:10:
5a:ba:a7:52:de:07:3f:71:49:21:a1:a2:a0:3d:31:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:67:9E:47:0B:91:98:31:86:A0:7A:AC:69:39:81:7F:BB:E0:08:E6
X509v3 Authority Key Identifier:
keyid:DC:FA:55:26:01:C4:77:C5:2B:FC:E4:A8:8D:BA:BE:1B:7C:D7:2E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PpVJgHEd8Ur_OSojbq-G3zXLhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/75e8c5-cbd0-41d6-a0bd-47c63cdffd08/1/3PpVJgHEd8Ur_OSojbq-G3zXLhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3c:c5:40:f8:8a:b1:82:8f:13:70:74:5c:47:42:54:fa:a6:
70:df:cf:0f:60:de:8b:d6:01:28:69:57:ed:8d:f1:b5:a3:8f:
35:bb:a8:c0:c0:db:f3:14:77:8b:d2:f5:a0:96:09:aa:8f:18:
02:da:db:a0:9c:c7:a0:b6:7f:9b:ca:a3:ce:04:b9:a6:35:78:
41:5a:f9:64:b5:cc:9b:b6:68:ff:b5:d4:8f:58:cc:0a:fa:46:
2d:62:71:51:ca:24:ae:d6:cb:99:54:a0:90:8a:fb:22:ae:f0:
15:83:33:71:bf:b9:bd:16:77:31:df:ac:a0:63:8c:1f:d9:78:
b0:5f:a7:76:f6:a1:29:b6:06:48:1a:16:2c:7c:7d:dd:05:53:
35:8c:2d:4d:d8:c2:96:52:32:6f:27:5a:e7:ba:e6:8d:76:b1:
76:6a:46:de:c4:ea:5e:7a:63:99:eb:c3:a8:b2:64:04:ee:ca:
db:b7:ba:33:ab:52:cc:7b:0b:d7:fb:6f:67:12:d9:de:fb:a7:
ca:59:7f:1c:70:ee:b6:bb:d6:73:12:33:e0:01:23:80:7a:9d:
fc:3c:fa:0e:89:a5:b2:b7:87:e6:9b:64:5f:7b:6f:8d:33:02:
59:24:f8:37:22:d8:3d:48:dd:72:c5:c3:19:df:75:f0:89:2d:
7d:6a:73:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjcCiH64qZ13mLJ3cCE8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmE1NTI2MDFjNDc3YzUyYmZjZTRhODhkYmFiZTFiN2Nk
NzJlMTkwHhcNMjUwNjA3MTgwMTEwWhcNMjUwNjA4MTgwMTEwWjAzMTEwLwYDVQQD
Eyg4MTY3OWU0NzBiOTE5ODMxODZhMDdhYWM2OTM5ODE3ZmJiZTAwOGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYLakvZ3wiU3n36OM2MTfbiFOUpY
n5BYuYK9fiVMJwtpfYoZpYEkbRfcQ5EbNSpgrH3+SWxrX6cU+mu+fNs56HXU6HRq
8dKyW6xOv9z6gQBtiawJbQ684HDuC1nWkbWAFpynjamiVfsYgcm4aGHja0H5Zj6W
4y4/flM3CYG4TOnO9ujDwp/2PWh+6Mmq3XjMejOBjbysDAvIT50QxB8OL/mnakg2
oivgT1KXD5J4Renpk9M8RSN0Yce0igqtw5hCAtl/d33sZSyZoFe1xyT9qjAtgcVM
RpGZZjhN2t/vKCi2mqpFrEBWzrhkpvSbshBauqdS3gc/cUkhoaKgPTEH8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFnnkcLkZgxhqB6rGk5gX+74AjmMB8GA1UdIwQY
MBaAFNz6VSYBxHfFK/zkqI26vht81y4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BwVkpnSEVkOFVyX09Tb2picS1HM3pYTGhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NWU4YzUtY2JkMC00MWQ2LWEwYmQt
NDdjNjNjZGZmZDA4LzEvM1BwVkpnSEVkOFVyX09Tb2picS1HM3pYTGhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83NWU4YzUtY2JkMC00MWQ2LWEwYmQtNDdjNjNjZGZmZDA4
LzEvM1BwVkpnSEVkOFVyX09Tb2picS1HM3pYTGhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDzFQPiK
sYKPE3B0XEdCVPqmcN/PD2Dei9YBKGlX7Y3xtaOPNbuowMDb8xR3i9L1oJYJqo8Y
AtrboJzHoLZ/m8qjzgS5pjV4QVr5ZLXMm7Zo/7XUj1jMCvpGLWJxUcokrtbLmVSg
kIr7Iq7wFYMzcb+5vRZ3Md+soGOMH9l4sF+ndvahKbYGSBoWLHx93QVTNYwtTdjC
llIybyda57rmjXaxdmpG3sTqXnpjmevDqLJkBO7K27e6M6tSzHsL1/tvZxLZ3vun
yll/HHDutrvWcxIz4AEjgHqd/Dz6DomlsreH5ptkX3tvjTMCWST4NyLYPUjdcsXD
Gd918IktfWpzkQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:05 2025 by rpki-client