Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: SyJDFdGf2Z/tfXnRkZwxkFxBglx3OkSExV4S2enbZtA=
Subject key identifier: E3:8C:5B:1C:4C:6E:AE:14:6D:2F:96:C7:67:F1:BC:38:3E:E0:B1:44
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 01976C2B63AABB5495AB218B1AEF283226E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 1596
Signing time: Sat 14 Jun 2025 02:01:12 +0000
Manifest this update: Sat 14 Jun 2025 02:01:12 +0000
Manifest next update: Sun 15 Jun 2025 02:01:12 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: mHC0WsyMT9yyJ1KWMZpfByvSkUJuQ8Qq4t3SZpuJyNc=)
2: cTvIsND0rcbhO2LRnW_ioplG7i0.roa (hash: cEDaT4nTfiZsrwarP2rDKx77YlDRn3t6MrTdDfbMfn0=)
3: ejCuuXb3IPaAQbLGykjSnhsrUI0.roa (hash: 2O/6jwQ1UqJYAgAcDjt8a/MDPHZ138YPWORfwXR/3iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:63:aa:bb:54:95:ab:21:8b:1a:ef:28:32:26:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Jun 14 02:01:12 2025 GMT
Not After : Jun 15 02:01:12 2025 GMT
Subject: CN=e38c5b1c4c6eae146d2f96c767f1bc383ee0b144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6a:0d:a5:17:f0:59:b1:4a:2a:67:15:72:2b:
b5:de:a6:1f:de:62:38:15:66:69:f5:ea:b7:41:d1:
75:d0:a4:08:e7:3a:fc:cc:1a:76:35:a7:f7:f0:d6:
05:87:dd:d9:b5:31:af:7c:f0:a2:84:8e:05:e7:d3:
56:56:17:31:b0:f9:01:46:24:85:f5:f3:81:85:d5:
f0:78:9e:4e:78:8b:78:76:74:3a:74:d3:41:e7:d4:
e2:54:e0:bf:8a:e7:97:8f:6a:0a:2c:2d:76:8c:97:
69:58:77:da:f8:d1:7b:3b:ca:fb:4d:31:d9:0e:cd:
05:10:dc:d2:f2:c9:c0:2b:ab:49:d6:c5:27:83:3e:
3b:6f:11:db:6f:ae:0f:91:55:5d:08:74:d6:20:64:
97:8d:fb:40:df:ea:51:52:01:89:c8:62:10:f5:6e:
a2:34:86:28:1c:1c:25:22:7f:bf:31:78:db:82:e7:
6b:e3:bd:6e:e5:2d:10:55:b8:0c:b9:6a:cf:3d:05:
90:4a:2b:65:a2:76:73:8c:6b:13:45:db:0b:86:01:
76:23:81:d2:4d:43:6d:48:f9:89:7b:65:10:8a:85:
b8:55:f8:d0:f2:f1:17:0f:a2:07:a3:f0:0f:ea:0a:
06:a4:ce:59:2a:9e:07:f4:75:e7:12:01:c3:78:7c:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8C:5B:1C:4C:6E:AE:14:6D:2F:96:C7:67:F1:BC:38:3E:E0:B1:44
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:50:ff:93:00:6d:a6:7c:3c:89:96:5f:04:ad:ac:2f:d9:fd:
f6:87:10:08:3c:21:b7:4d:d9:b5:9f:a1:d7:ab:99:5c:53:eb:
8f:00:db:8a:1e:0c:64:5e:68:98:7c:3f:c2:b3:b5:8a:e6:50:
d3:2c:98:2b:58:d4:ea:c8:40:30:7d:b4:16:6c:9f:23:b5:45:
fa:0c:58:b5:8c:07:54:c4:b0:c9:c7:50:98:d9:99:f1:e6:d9:
69:45:92:0c:c7:a0:0e:9b:a4:ea:88:c2:05:7e:a2:38:84:98:
4e:87:c5:fc:46:a6:4b:1e:e1:d6:8a:90:22:fe:a7:47:3b:1b:
03:81:b5:37:22:37:69:a9:8d:68:a9:16:d2:2a:20:42:94:73:
26:55:57:89:6e:ea:d4:67:04:79:90:2e:7b:76:b6:5c:df:df:
61:b1:15:8b:97:bc:10:71:97:6b:e9:25:88:3c:a4:fe:5c:c7:
4e:6d:c2:7b:11:94:95:15:b4:69:26:9f:8b:5c:15:5c:30:17:
2e:63:6f:12:70:cc:fe:76:4e:75:c6:06:e0:fe:52:30:23:7e:
0b:c1:04:63:49:2c:ae:86:e0:57:c4:4b:31:da:07:e9:15:c9:
3f:d9:54:33:89:b0:0b:fa:41:26:05:c7:37:12:7a:dd:91:e9:
3d:7f:39:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsK2Oqu1SVqyGLGu8oMibpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMjdiOTM5OTM0YTJjYzIwNmZmYmE2YmNlOWM5MGZkY2Jh
MzljNzEwHhcNMjUwNjE0MDIwMTEyWhcNMjUwNjE1MDIwMTEyWjAzMTEwLwYDVQQD
EyhlMzhjNWIxYzRjNmVhZTE0NmQyZjk2Yzc2N2YxYmMzODNlZTBiMTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWoNpRfwWbFKKmcVciu13qYf3mI4
FWZp9eq3QdF10KQI5zr8zBp2Naf38NYFh93ZtTGvfPCihI4F59NWVhcxsPkBRiSF
9fOBhdXweJ5OeIt4dnQ6dNNB59TiVOC/iueXj2oKLC12jJdpWHfa+NF7O8r7TTHZ
Ds0FENzS8snAK6tJ1sUngz47bxHbb64PkVVdCHTWIGSXjftA3+pRUgGJyGIQ9W6i
NIYoHBwlIn+/MXjbgudr471u5S0QVbgMuWrPPQWQSitlonZzjGsTRdsLhgF2I4HS
TUNtSPmJe2UQioW4VfjQ8vEXD6IHo/AP6goGpM5ZKp4H9HXnEgHDeHwiWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOMWxxMbq4UbS+Wx2fxvDg+4LFEMB8GA1UdIwQY
MBaAFN8nuTmTSizCBv+6a86ckP3Lo5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0Njgt
NmVkNTRkM2ZlNGY0LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0NjgtNmVkNTRkM2ZlNGY0
LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1D/kwBt
pnw8iZZfBK2sL9n99ocQCDwht03ZtZ+h16uZXFPrjwDbih4MZF5omHw/wrO1iuZQ
0yyYK1jU6shAMH20FmyfI7VF+gxYtYwHVMSwycdQmNmZ8ebZaUWSDMegDpuk6ojC
BX6iOISYTofF/EamSx7h1oqQIv6nRzsbA4G1NyI3aamNaKkW0iogQpRzJlVXiW7q
1GcEeZAue3a2XN/fYbEVi5e8EHGXa+kliDyk/lzHTm3CexGUlRW0aSafi1wVXDAX
LmNvEnDM/nZOdcYG4P5SMCN+C8EEY0ksrobgV8RLMdoH6RXJP9lUM4mwC/pBJgXH
NxJ63ZHpPX855g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:09:12 2025 by rpki-client