Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json)
Hash identifier: ek5cFvCDAnk3itdoOf+3uxCkPOkBc196xiRcCkmeNNQ=
Subject key identifier: 44:39:04:28:19:75:ED:28:BE:39:C0:05:74:3F:07:A9:87:51:44:5B
Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Certificate serial: 019779AFC2316CF9C37C4E85D4E70C08A0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
Manifest number: 053E
Signing time: Mon 16 Jun 2025 17:00:50 +0000
Manifest this update: Mon 16 Jun 2025 17:00:50 +0000
Manifest next update: Tue 17 Jun 2025 17:00:50 +0000
Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: ZmNY3+Ftrgk8BJ22I3lAE1l4dgl2eejF9j6NJUueqHI=)
2: Q6We2_Kzknmf_FU65X_ThS9Li9U.roa (hash: T5kdvis2FcaJDZX7ZiymCfqr46qyRqmHtR1xf7wekhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:c2:31:6c:f9:c3:7c:4e:85:d4:e7:0c:08:a0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Validity
Not Before: Jun 16 17:00:50 2025 GMT
Not After : Jun 17 17:00:50 2025 GMT
Subject: CN=443904281975ed28be39c005743f07a98751445b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a6:2f:da:62:4e:15:0e:64:63:06:75:4a:56:
e7:e4:e6:83:77:78:e0:b0:00:2c:91:a7:b1:ca:f6:
f6:a5:cb:cb:29:6b:31:31:fc:43:49:fa:f0:8c:54:
95:42:ad:c7:13:f8:ad:5d:74:ed:45:9c:b4:ae:f2:
d9:ce:cd:cc:42:88:27:93:76:c2:22:4b:78:ec:c9:
75:34:c7:2c:da:2c:77:8d:04:cc:d8:8d:51:8a:30:
8c:e1:d4:9b:57:a8:cd:3c:73:48:f1:60:3a:2f:61:
7a:49:f1:14:fc:99:16:67:3d:22:c8:4e:32:a3:7b:
84:9a:54:de:ab:38:cb:15:71:30:a8:ce:cc:6a:d1:
c5:ac:f7:24:02:9d:ad:be:81:eb:ac:d3:50:5c:ee:
a4:66:12:b7:05:6c:49:94:d4:0e:95:df:a3:d3:5c:
72:9d:85:02:fb:5b:81:a0:8b:5c:70:52:a4:cc:dd:
17:02:5d:ec:a9:21:fb:60:20:ac:66:84:55:ed:2f:
24:a5:da:83:c3:75:16:70:63:40:ae:17:a9:87:3f:
8f:2f:b8:ec:b3:44:2f:03:37:32:c5:a9:39:87:15:
93:d0:b6:50:f7:5b:12:11:3d:87:c7:dd:b7:c0:58:
d7:36:db:fc:f9:6a:ee:cf:00:7f:3b:b3:a2:cb:15:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:39:04:28:19:75:ED:28:BE:39:C0:05:74:3F:07:A9:87:51:44:5B
X509v3 Authority Key Identifier:
keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:79:f5:0d:31:23:6a:fa:ae:aa:36:72:d2:a9:fa:f6:97:ee:
2f:4f:a3:ae:3a:79:50:78:1d:77:13:0b:2d:30:bb:8d:d2:10:
33:bd:e1:36:d7:e1:21:eb:d1:ee:ab:65:c4:c6:0b:56:5c:22:
18:5e:b5:df:06:f3:cc:14:a9:d2:1b:19:bd:1e:5a:c0:91:c3:
a1:23:a3:84:fe:e2:ce:6a:bf:da:a0:da:ef:23:cd:09:29:d7:
52:97:bc:7c:ba:22:6a:96:4d:8a:48:87:34:05:69:3d:4d:b9:
0c:41:02:a0:b8:a2:86:b2:95:f3:3d:0c:b7:ab:35:8c:44:d0:
db:23:cb:ff:a5:75:67:b8:80:d1:0c:80:e3:7a:7c:6e:01:be:
0d:17:da:fd:8c:c4:71:3c:2f:89:2a:e2:31:cf:a8:72:b2:ec:
da:08:ee:18:e4:45:b8:80:71:a4:0a:43:b1:a3:d0:de:3f:cc:
79:72:f0:16:aa:b9:f9:25:a9:fc:ba:6e:72:0a:89:3d:29:64:
d2:f7:b7:e2:8c:5d:08:7c:ff:4a:bb:fd:41:2f:04:fe:73:5b:
ab:cc:18:d4:e5:32:53:ce:30:74:5e:39:bc:23:a2:14:97:55:
3d:53:49:a7:ad:c0:6a:79:c4:5b:c7:d5:84:36:c4:16:1e:5a:
13:82:11:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5r8IxbPnDfE6F1OcMCKChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGI0YTE4YTdlMTUxYTM3ZGE1ZTRjY2RhYTllN2RiZDg4
ZTlkOTMwHhcNMjUwNjE2MTcwMDUwWhcNMjUwNjE3MTcwMDUwWjAzMTEwLwYDVQQD
Eyg0NDM5MDQyODE5NzVlZDI4YmUzOWMwMDU3NDNmMDdhOTg3NTE0NDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aYv2mJOFQ5kYwZ1Slbn5OaDd3jg
sAAskaexyvb2pcvLKWsxMfxDSfrwjFSVQq3HE/itXXTtRZy0rvLZzs3MQognk3bC
Ikt47Ml1NMcs2ix3jQTM2I1RijCM4dSbV6jNPHNI8WA6L2F6SfEU/JkWZz0iyE4y
o3uEmlTeqzjLFXEwqM7MatHFrPckAp2tvoHrrNNQXO6kZhK3BWxJlNQOld+j01xy
nYUC+1uBoItccFKkzN0XAl3sqSH7YCCsZoRV7S8kpdqDw3UWcGNArhephz+PL7js
s0QvAzcyxak5hxWT0LZQ91sSET2Hx923wFjXNtv8+WruzwB/O7OiyxVXawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQ5BCgZde0ovjnABXQ/B6mHUURbMB8GA1UdIwQY
MBaAFNxLShin4VGjfaXkzNqp59vYjp2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUt
M2RkMjkzZjc0ZTVlLzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUtM2RkMjkzZjc0ZTVl
LzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnn1DTEj
avquqjZy0qn69pfuL0+jrjp5UHgddxMLLTC7jdIQM73hNtfhIevR7qtlxMYLVlwi
GF613wbzzBSp0hsZvR5awJHDoSOjhP7izmq/2qDa7yPNCSnXUpe8fLoiapZNikiH
NAVpPU25DEECoLiihrKV8z0Mt6s1jETQ2yPL/6V1Z7iA0QyA43p8bgG+DRfa/YzE
cTwviSriMc+ocrLs2gjuGORFuIBxpApDsaPQ3j/MeXLwFqq5+SWp/LpucgqJPSlk
0ve34oxdCHz/Srv9QS8E/nNbq8wY1OUyU84wdF45vCOiFJdVPVNJp63AannEW8fV
hDbEFh5aE4IREA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:36:44 2025 by rpki-client