Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
File: 3D56OUu_G77Efz-7aaGJ-KOx0FY.mft (raw, json)
Hash identifier: FIWMtdzi4968vY4glhwEiB5e104KSQmcajCWRN4mWLk=
Subject key identifier: 68:EF:D6:29:0B:C5:94:55:5C:2C:18:0A:5B:6C:18:E1:AE:79:A4:58
Authority key identifier: DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
Certificate issuer: /CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Certificate serial: 01976D3DC7E8ACC658E0A13B88B687C5C8CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
Manifest number: 083A
Signing time: Sat 14 Jun 2025 07:00:54 +0000
Manifest this update: Sat 14 Jun 2025 07:00:54 +0000
Manifest next update: Sun 15 Jun 2025 07:00:54 +0000
Files and hashes: 1: 3D56OUu_G77Efz-7aaGJ-KOx0FY.crl (hash: vMw3kfjc80gfa2R5/kYD6AEfsqN5XTH8cGrex50E2vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:c7:e8:ac:c6:58:e0:a1:3b:88:b6:87:c5:c8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Validity
Not Before: Jun 14 07:00:54 2025 GMT
Not After : Jun 15 07:00:54 2025 GMT
Subject: CN=68efd6290bc594555c2c180a5b6c18e1ae79a458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d1:22:17:4c:9d:8d:8b:cd:83:ac:b8:ac:fe:
8f:d1:51:74:88:4b:3e:7f:fc:d0:1f:ad:62:e8:bd:
f9:5a:e2:b5:6e:ef:09:c5:0e:0c:79:18:2a:e1:88:
81:de:f4:f6:fc:6a:92:a4:16:77:75:6d:71:c4:de:
68:f3:1d:ea:58:a6:11:6d:e8:93:e6:e0:d5:93:10:
0c:e5:c4:33:2a:cb:a1:21:fe:ad:69:59:aa:43:f0:
9a:8b:fd:e3:05:ef:1f:c1:b6:fe:92:d7:aa:25:4a:
59:3c:9f:3b:f3:d4:c8:cb:6f:7e:c5:43:72:db:cb:
f6:61:cd:11:81:a6:3b:7d:10:d1:df:7a:39:dc:ac:
db:94:94:ff:2e:5e:eb:be:5f:90:b9:13:4e:db:67:
6f:3a:d9:59:a4:99:ca:21:34:86:95:bb:1c:3e:c6:
42:0a:fb:ac:b7:ee:24:82:80:8b:80:b0:b5:69:9f:
7b:4f:d1:c2:d0:e0:57:0c:a7:8b:3d:9c:0f:a0:a6:
f9:ab:c0:58:ff:e8:61:7f:c1:b7:ef:b4:20:da:95:
46:1b:2b:42:01:e0:49:60:9d:0a:26:17:fd:48:c6:
69:5d:be:5f:8f:fb:20:02:fc:7a:af:f0:a1:91:0c:
95:64:41:2c:1e:6c:70:b0:c1:9e:93:77:c3:65:ad:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EF:D6:29:0B:C5:94:55:5C:2C:18:0A:5B:6C:18:E1:AE:79:A4:58
X509v3 Authority Key Identifier:
keyid:DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b6:b1:b6:b7:ed:0e:1a:04:f6:6e:c8:3f:31:d9:b4:35:00:
3c:4e:80:78:54:80:15:84:97:92:3b:88:cc:cd:b1:b9:3c:fc:
43:02:56:92:b3:5b:25:b2:22:c7:28:21:dc:52:c7:be:61:1d:
b2:3d:21:a8:75:15:8c:b5:52:e3:b0:99:1b:4b:7f:ae:7b:4d:
63:95:28:bb:76:e9:10:78:62:07:e4:65:6e:ce:60:92:39:09:
0b:b8:0d:80:7f:0a:1a:69:a3:1e:16:ac:3d:c0:f0:b7:1d:4f:
74:3e:6e:5d:dd:f8:73:a1:41:f8:66:7d:e4:55:a3:4a:1f:ac:
76:fb:95:41:79:c0:9b:57:7d:34:69:fa:14:2d:7c:af:6d:77:
75:a4:61:05:63:3a:40:f6:76:cb:49:b0:6c:3d:21:64:33:05:
97:86:d9:7d:ec:f5:25:64:8d:86:c4:4e:84:5c:a6:1d:8c:2e:
76:ee:e8:c9:6c:ca:f7:c6:06:11:b7:fc:4b:69:5b:18:f7:cb:
24:4c:be:9d:96:63:26:ad:cf:01:74:a9:01:4c:06:bf:7d:90:
7c:a7:fd:e9:a2:22:e9:99:0e:e8:bf:da:95:b8:de:30:b9:9f:
f2:03:f9:3c:ed:a9:c1:0c:ab:89:dd:fd:f9:a4:3f:5c:6e:39:
b2:9b:25:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPcforMZY4KE7iLaHxcjLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjM2U3YTM5NGJiZjFiYmVjNDdmM2ZiYjY5YTE4OWY4YTNi
MWQwNTYwHhcNMjUwNjE0MDcwMDU0WhcNMjUwNjE1MDcwMDU0WjAzMTEwLwYDVQQD
Eyg2OGVmZDYyOTBiYzU5NDU1NWMyYzE4MGE1YjZjMThlMWFlNzlhNDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidEiF0ydjYvNg6y4rP6P0VF0iEs+
f/zQH61i6L35WuK1bu8JxQ4MeRgq4YiB3vT2/GqSpBZ3dW1xxN5o8x3qWKYRbeiT
5uDVkxAM5cQzKsuhIf6taVmqQ/Cai/3jBe8fwbb+kteqJUpZPJ8789TIy29+xUNy
28v2Yc0RgaY7fRDR33o53KzblJT/Ll7rvl+QuRNO22dvOtlZpJnKITSGlbscPsZC
Cvust+4kgoCLgLC1aZ97T9HC0OBXDKeLPZwPoKb5q8BY/+hhf8G377Qg2pVGGytC
AeBJYJ0KJhf9SMZpXb5fj/sgAvx6r/ChkQyVZEEsHmxwsMGek3fDZa2RcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjv1ikLxZRVXCwYCltsGOGueaRYMB8GA1UdIwQY
MBaAFNw+ejlLvxu+xH8/u2mhifijsdBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Q1Nk9VdV9HNzdFZnotN2FhR0otS094MEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81YjY4NGEtZTQwOS00N2VhLTljY2It
NDRiMjFhOGJlYmZkLzEvM0Q1Nk9VdV9HNzdFZnotN2FhR0otS094MEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81YjY4NGEtZTQwOS00N2VhLTljY2ItNDRiMjFhOGJlYmZk
LzEvM0Q1Nk9VdV9HNzdFZnotN2FhR0otS094MEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFraxtrft
DhoE9m7IPzHZtDUAPE6AeFSAFYSXkjuIzM2xuTz8QwJWkrNbJbIixygh3FLHvmEd
sj0hqHUVjLVS47CZG0t/rntNY5Uou3bpEHhiB+Rlbs5gkjkJC7gNgH8KGmmjHhas
PcDwtx1PdD5uXd34c6FB+GZ95FWjSh+sdvuVQXnAm1d9NGn6FC18r213daRhBWM6
QPZ2y0mwbD0hZDMFl4bZfez1JWSNhsROhFymHYwudu7oyWzK98YGEbf8S2lbGPfL
JEy+nZZjJq3PAXSpAUwGv32QfKf96aIi6ZkO6L/albjeMLmf8gP5PO2pwQyrid39
+aQ/XG45spslVA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:42:54 2025 by rpki-client