Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
File: MT3NGHEiZlBFhpdnM8ofkvYmH14.mft (raw, json)
Hash identifier: rL2CaqvkSDeAQf2PdXlkkZgIZahV2KZtvMcklbfuW3E=
Subject key identifier: FB:A1:1D:D7:F7:0F:BA:DE:2A:49:30:C1:2D:66:04:34:26:3C:43:F8
Authority key identifier: 31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E
Certificate issuer: /CN=313dcd18712266504586976733ca1f92f6261f5e
Certificate serial: 019773097710D226B05DA647190137AF6344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
Manifest number: 13BD
Signing time: Sun 15 Jun 2025 10:01:29 +0000
Manifest this update: Sun 15 Jun 2025 10:01:29 +0000
Manifest next update: Mon 16 Jun 2025 10:01:29 +0000
Files and hashes: 1: MT3NGHEiZlBFhpdnM8ofkvYmH14.crl (hash: cc45meL56Owhmd5VntTF9/LtH+B5OVhAME0IAt+hNiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:09:77:10:d2:26:b0:5d:a6:47:19:01:37:af:63:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313dcd18712266504586976733ca1f92f6261f5e
Validity
Not Before: Jun 15 10:01:29 2025 GMT
Not After : Jun 16 10:01:29 2025 GMT
Subject: CN=fba11dd7f70fbade2a4930c12d660434263c43f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:7c:74:b2:61:5f:fc:13:03:f7:ef:10:62:
59:51:67:7c:66:c5:30:12:6e:bf:87:72:ff:ad:03:
32:63:7b:8c:09:d4:39:18:bc:b2:92:9f:48:f1:ca:
cf:42:27:18:23:d8:cc:b9:48:c4:25:05:da:b2:d3:
a5:7c:8b:30:c7:cc:39:e5:f7:7d:23:5a:09:b6:01:
fd:00:e6:7e:88:9b:78:06:41:61:64:66:0d:36:4b:
f8:12:db:32:0a:cf:19:72:83:18:c3:7d:80:b4:f7:
a2:3d:50:dd:47:56:99:98:e5:c7:83:a4:5a:c1:52:
32:14:df:39:f2:c4:ad:be:df:ae:92:09:95:8d:6b:
76:ad:5f:f7:c3:cd:59:b4:99:1a:31:0c:45:24:a6:
f5:6d:51:50:20:f3:e1:85:1f:3e:66:04:2c:29:86:
4d:3b:d9:82:ca:53:e8:85:f8:af:89:21:b8:62:e3:
a3:03:f9:1c:07:de:37:a0:85:ca:ba:08:7e:b0:47:
bb:2a:4a:c6:69:c4:68:ad:8e:b2:1a:18:fd:cd:cc:
9a:27:7a:07:5c:3b:ba:db:8a:2d:0b:2b:65:3b:a5:
bc:d0:65:9d:50:4b:84:8f:59:0b:04:ae:35:4c:dd:
ef:30:d5:2a:57:84:d7:39:0e:2a:17:ad:0e:2e:99:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A1:1D:D7:F7:0F:BA:DE:2A:49:30:C1:2D:66:04:34:26:3C:43:F8
X509v3 Authority Key Identifier:
keyid:31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:20:d3:75:7a:e2:7f:1b:7d:d1:36:b6:7e:fa:2e:7b:b1:c2:
1e:62:ab:aa:74:99:67:ed:0c:20:ab:91:65:db:e6:ac:26:5d:
67:6a:43:7d:6c:a7:7f:e8:eb:56:48:cf:9d:d5:01:a2:8d:cd:
6e:d9:28:23:ef:48:b4:2b:a9:72:23:6a:89:49:44:7b:88:bb:
90:cc:85:79:43:a9:e1:62:a9:6e:ed:28:ed:19:9e:a6:ca:ee:
39:63:46:fc:80:a9:57:b0:3e:6d:37:b1:e3:44:96:9c:52:7b:
83:96:b3:1f:f7:f6:07:08:36:c0:6b:01:38:8a:ca:1e:6b:f0:
d2:3e:67:29:c2:6f:d8:1b:f5:ff:b2:3d:7f:b5:e5:3c:0e:e9:
f4:2d:92:ff:ec:60:f0:ee:b8:a9:e0:78:e7:da:67:90:1e:e5:
39:5c:d7:6b:e0:df:6d:6d:19:b4:2a:8d:43:44:a9:0d:d6:ea:
e2:63:5e:cf:d2:be:1c:55:66:ab:70:22:1c:59:c8:a9:e3:df:
71:92:0c:34:be:1e:72:75:e0:10:b5:95:15:e4:6e:1b:54:35:
77:37:f6:f1:c6:62:9c:7f:ac:04:a2:06:d8:61:32:76:3e:b3:
68:7b:c1:06:16:0f:09:f1:14:83:68:d3:f9:a8:d6:d0:82:26:
09:f5:d4:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdzCXcQ0iawXaZHGQE3r2NEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxM2RjZDE4NzEyMjY2NTA0NTg2OTc2NzMzY2ExZjkyZjYy
NjFmNWUwHhcNMjUwNjE1MTAwMTI5WhcNMjUwNjE2MTAwMTI5WjAzMTEwLwYDVQQD
EyhmYmExMWRkN2Y3MGZiYWRlMmE0OTMwYzEyZDY2MDQzNDI2M2M0M2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSh8dLJhX/wTA/fvEGJZUWd8ZsUw
Em6/h3L/rQMyY3uMCdQ5GLyykp9I8crPQicYI9jMuUjEJQXastOlfIswx8w55fd9
I1oJtgH9AOZ+iJt4BkFhZGYNNkv4EtsyCs8ZcoMYw32AtPeiPVDdR1aZmOXHg6Ra
wVIyFN858sStvt+ukgmVjWt2rV/3w81ZtJkaMQxFJKb1bVFQIPPhhR8+ZgQsKYZN
O9mCylPohfiviSG4YuOjA/kcB943oIXKugh+sEe7KkrGacRorY6yGhj9zcyaJ3oH
XDu624otCytlO6W80GWdUEuEj1kLBK41TN3vMNUqV4TXOQ4qF60OLpm2qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuhHdf3D7reKkkwwS1mBDQmPEP4MB8GA1UdIwQY
MBaAFDE9zRhxImZQRYaXZzPKH5L2Jh9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVQzTkdIRWlabEJGaHBkbk04b2ZrdlltSDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9iOWVjZjktM2JhOC00N2U0LTg5NTQt
YzQxNWE2OGFmMGRkLzEvTVQzTkdIRWlabEJGaHBkbk04b2ZrdlltSDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9iOWVjZjktM2JhOC00N2U0LTg5NTQtYzQxNWE2OGFmMGRk
LzEvTVQzTkdIRWlabEJGaHBkbk04b2ZrdlltSDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmiDTdXri
fxt90Ta2fvoue7HCHmKrqnSZZ+0MIKuRZdvmrCZdZ2pDfWynf+jrVkjPndUBoo3N
btkoI+9ItCupciNqiUlEe4i7kMyFeUOp4WKpbu0o7RmepsruOWNG/ICpV7A+bTex
40SWnFJ7g5azH/f2Bwg2wGsBOIrKHmvw0j5nKcJv2Bv1/7I9f7XlPA7p9C2S/+xg
8O64qeB459pnkB7lOVzXa+DfbW0ZtCqNQ0SpDdbq4mNez9K+HFVmq3AiHFnIqePf
cZIMNL4ecnXgELWVFeRuG1Q1dzf28cZinH+sBKIG2GEydj6zaHvBBhYPCfEUg2jT
+ajW0IImCfXUXw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:56:24 2025 by rpki-client