
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft
File: x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft (raw, json)
Hash identifier: Vai0awd3OaKLdB4a4QLjg35kiobh3c4xrrohP3nA99A=
Subject key identifier: 8F:1E:6D:90:D1:5E:63:23:F0:AD:63:9F:A9:69:85:3C:6A:B4:4D:73
Authority key identifier: C7:72:9A:6E:CE:2D:0E:BE:9B:BE:5D:8D:79:62:F7:3B:DC:92:04:A9
Certificate issuer: /CN=c7729a6ece2d0ebe9bbe5d8d7962f73bdc9204a9
Certificate serial: 01976D06A601FEBF0A75A7C64B6FEDB28D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Kabs4tDr6bvl2NeWL3O9ySBKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft
Manifest number: 43
Signing time: Sat 14 Jun 2025 06:00:41 +0000
Manifest this update: Sat 14 Jun 2025 06:00:41 +0000
Manifest next update: Sun 15 Jun 2025 06:00:41 +0000
Files and hashes: 1: x3Kabs4tDr6bvl2NeWL3O9ySBKk.crl (hash: CQkBhqBOZ/OR2okTvCHW0DJSMBsYYhvUfTLIYvDo/KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Kabs4tDr6bvl2NeWL3O9ySBKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:a6:01:fe:bf:0a:75:a7:c6:4b:6f:ed:b2:8d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7729a6ece2d0ebe9bbe5d8d7962f73bdc9204a9
Validity
Not Before: Jun 14 06:00:41 2025 GMT
Not After : Jun 15 06:00:41 2025 GMT
Subject: CN=8f1e6d90d15e6323f0ad639fa969853c6ab44d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:24:ad:0e:92:8e:0b:8f:66:7f:df:e6:03:
ca:ed:c7:fd:b6:dc:3f:fe:c1:7b:d9:10:48:00:53:
5e:04:a6:57:aa:75:45:24:6d:62:8c:86:91:d1:2f:
cb:0b:29:78:22:2c:d5:91:bb:dc:cc:8e:be:82:00:
1c:4b:5a:01:97:55:10:db:7c:c7:7e:c6:6f:9b:31:
05:a9:34:a1:f6:2d:32:31:58:d1:80:e4:1b:ec:45:
3e:8a:57:f3:7a:51:95:06:8c:a9:49:67:94:21:1e:
f0:9a:5d:5a:c5:c5:09:02:2f:ca:83:00:84:c7:3b:
2a:04:72:c9:55:4b:48:c1:29:52:9a:51:20:73:c6:
9a:9c:75:98:4d:27:30:6f:3e:cf:68:1f:09:a0:c5:
87:a9:2b:e0:eb:e9:88:38:3e:d5:d6:82:a2:cf:85:
27:4e:56:14:f8:93:ba:86:c2:3b:77:ef:3e:f8:44:
27:0d:36:cc:14:cf:87:0f:f9:92:cc:b4:2e:8e:d8:
b0:93:c0:4e:c1:7d:03:26:f0:dd:7a:7e:ff:d8:0a:
cb:c7:3e:34:88:b8:11:87:9e:b8:10:83:1b:ab:eb:
c1:08:80:69:8a:06:57:46:c8:75:84:36:3b:f3:31:
40:9f:39:96:43:37:ea:02:77:09:7f:03:ff:d8:bf:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1E:6D:90:D1:5E:63:23:F0:AD:63:9F:A9:69:85:3C:6A:B4:4D:73
X509v3 Authority Key Identifier:
keyid:C7:72:9A:6E:CE:2D:0E:BE:9B:BE:5D:8D:79:62:F7:3B:DC:92:04:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Kabs4tDr6bvl2NeWL3O9ySBKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/1c9754-32e9-4186-a691-dc3651ccf9ae/1/x3Kabs4tDr6bvl2NeWL3O9ySBKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:da:38:50:4d:c2:ef:d6:e5:14:88:58:c6:05:41:11:16:17:
2d:d1:1e:d2:a0:7a:68:ab:0e:f0:67:87:7f:8b:f8:d9:cb:53:
32:29:fb:2a:ff:cb:71:74:77:f7:d4:c5:1f:b5:32:ef:34:04:
3a:8a:f9:ff:1b:09:1b:11:75:2d:00:33:c0:51:39:94:d1:34:
ac:9e:19:e2:a8:53:17:b3:e4:1b:d3:46:bc:de:43:d3:7d:de:
37:98:67:8e:63:f1:e7:d5:45:f9:5f:cf:e3:c6:2d:fd:dc:2a:
9b:e3:8a:5a:bf:e4:b7:38:0f:75:ef:28:7d:74:e3:a1:c8:fb:
4a:43:3c:70:27:28:e5:42:00:6f:1c:3d:4b:28:58:9f:f1:6d:
dd:73:a2:87:dd:c7:66:06:c7:44:61:ac:b0:bd:26:ed:b2:82:
4e:06:39:66:6f:93:8c:04:e6:4d:ac:ba:e4:65:77:c8:7b:c5:
4d:7c:e7:63:b6:29:76:b0:eb:89:a2:e1:14:9f:d6:78:c0:4a:
2a:10:72:2c:8d:8c:e9:8f:5b:81:8a:06:4b:ad:30:a0:b1:47:
bd:37:d3:9e:5d:4c:4e:61:7e:22:5c:ac:8f:aa:27:00:80:20:
8c:28:97:ba:ab:2f:a5:fd:bd:cc:36:d4:ff:1e:58:3d:c2:1a:
38:47:cf:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBqYB/r8KdafGS2/tso1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzI5YTZlY2UyZDBlYmU5YmJlNWQ4ZDc5NjJmNzNiZGM5
MjA0YTkwHhcNMjUwNjE0MDYwMDQxWhcNMjUwNjE1MDYwMDQxWjAzMTEwLwYDVQQD
Eyg4ZjFlNmQ5MGQxNWU2MzIzZjBhZDYzOWZhOTY5ODUzYzZhYjQ0ZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBQkrQ6SjguPZn/f5gPK7cf9ttw/
/sF72RBIAFNeBKZXqnVFJG1ijIaR0S/LCyl4IizVkbvczI6+ggAcS1oBl1UQ23zH
fsZvmzEFqTSh9i0yMVjRgOQb7EU+ilfzelGVBoypSWeUIR7wml1axcUJAi/KgwCE
xzsqBHLJVUtIwSlSmlEgc8aanHWYTScwbz7PaB8JoMWHqSvg6+mIOD7V1oKiz4Un
TlYU+JO6hsI7d+8++EQnDTbMFM+HD/mSzLQujtiwk8BOwX0DJvDden7/2ArLxz40
iLgRh564EIMbq+vBCIBpigZXRsh1hDY78zFAnzmWQzfqAncJfwP/2L/GhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8ebZDRXmMj8K1jn6lphTxqtE1zMB8GA1UdIwQY
MBaAFMdymm7OLQ6+m75djXli9zvckgSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNLYWJzNHREcjZidmwyTmVXTDNPOXlTQktrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8xYzk3NTQtMzJlOS00MTg2LWE2OTEt
ZGMzNjUxY2NmOWFlLzEveDNLYWJzNHREcjZidmwyTmVXTDNPOXlTQktrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8xYzk3NTQtMzJlOS00MTg2LWE2OTEtZGMzNjUxY2NmOWFl
LzEveDNLYWJzNHREcjZidmwyTmVXTDNPOXlTQktrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNo4UE3C
79blFIhYxgVBERYXLdEe0qB6aKsO8GeHf4v42ctTMin7Kv/LcXR399TFH7Uy7zQE
Oor5/xsJGxF1LQAzwFE5lNE0rJ4Z4qhTF7PkG9NGvN5D033eN5hnjmPx59VF+V/P
48Yt/dwqm+OKWr/ktzgPde8ofXTjocj7SkM8cCco5UIAbxw9SyhYn/Ft3XOih93H
ZgbHRGGssL0m7bKCTgY5Zm+TjATmTay65GV3yHvFTXznY7YpdrDriaLhFJ/WeMBK
KhByLI2M6Y9bgYoGS60woLFHvTfTnl1MTmF+Ilysj6onAIAgjCiXuqsvpf29zDbU
/x5YPcIaOEfPlw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:29:04 2025 by rpki-client