Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
File: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json)
Hash identifier: mKqFBPLnIBP0qNnlCZaQtvJ1ns7WcF9oJOqubKnZKd4=
Subject key identifier: 35:25:04:48:2C:35:8B:2A:05:98:CB:6C:B5:77:3F:9F:70:F0:62:8F
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial: 01976CCFD77BC93DB30278542157F36D1AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
Manifest number: 10EA
Signing time: Sat 14 Jun 2025 05:00:49 +0000
Manifest this update: Sat 14 Jun 2025 05:00:49 +0000
Manifest next update: Sun 15 Jun 2025 05:00:49 +0000
Files and hashes: 1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: sNve/JO1jdUbrZM8G3If3i6UC6YUJ71OUzbQ8bi03u4=)
2: iVs53h_YZF7aBqVA1FOf0up1OVA.roa (hash: UW0lfLNzDTQsdkpmCT+L1fh8JEZx2jiYpIhhq1q1Nsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:d7:7b:c9:3d:b3:02:78:54:21:57:f3:6d:1a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
Validity
Not Before: Jun 14 05:00:49 2025 GMT
Not After : Jun 15 05:00:49 2025 GMT
Subject: CN=352504482c358b2a0598cb6cb5773f9f70f0628f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:64:1d:e7:f5:4d:24:f3:b0:26:fe:48:5f:8f:
87:0f:83:1f:c7:0c:61:ba:de:40:9c:cb:4a:4a:0c:
bb:2b:ac:e2:ab:42:53:11:55:cc:a9:fb:71:d8:05:
d8:ea:40:b8:ef:c5:2a:d2:e0:7f:0c:a6:a0:5c:b4:
be:13:e2:d7:f3:19:95:5f:65:a9:29:b1:2d:4b:2d:
d6:d6:09:67:fd:a6:73:7d:fe:5b:52:73:10:d2:80:
41:f6:31:5d:f7:b8:a0:23:45:e4:bd:06:8c:25:c5:
6f:ec:ea:88:e2:f3:2f:af:63:10:a8:db:04:59:21:
81:99:01:32:b6:16:6e:9d:e6:06:df:e4:f7:98:b0:
03:e1:80:5a:a8:39:8c:e7:12:a0:85:5f:b4:2d:85:
29:4a:85:10:59:fa:e3:07:83:be:5b:0e:49:cf:a5:
c1:61:9e:56:c9:53:54:12:6c:a5:46:62:f6:96:ab:
fb:ed:41:a2:57:de:de:04:a4:dd:d7:7c:84:44:d1:
63:48:3c:3a:ac:df:06:b1:c2:af:ea:3f:10:41:ba:
e0:6f:b9:90:b9:16:1d:b4:99:b4:ab:8c:1c:5a:f4:
18:c1:4e:4c:d4:7a:79:57:ef:f6:52:2a:58:57:a9:
7e:e9:53:36:ac:c5:f7:73:c5:5b:44:97:24:86:b4:
b6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:25:04:48:2C:35:8B:2A:05:98:CB:6C:B5:77:3F:9F:70:F0:62:8F
X509v3 Authority Key Identifier:
keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:fd:b6:9f:70:cb:88:90:9d:f7:11:ef:6b:3c:6c:39:34:21:
19:d3:4f:32:e4:17:75:f7:91:6c:67:7f:4c:c4:33:17:3c:02:
2d:c2:4f:18:cb:0c:62:91:26:cf:f2:06:f2:b3:fe:2c:bd:b5:
f4:81:fa:a9:6f:e5:f0:4d:b9:c0:fc:73:3e:bf:02:66:12:0a:
cd:71:a3:02:95:2e:b0:8b:f4:85:61:22:43:fa:8b:b2:4a:c3:
4f:ff:74:09:43:69:e8:4d:ee:58:84:25:70:d1:ba:97:94:b7:
de:fc:3e:de:74:ad:26:e5:0a:14:24:be:0b:65:5c:77:9d:5e:
0f:cb:e8:ed:0a:22:ff:19:e0:f3:1f:1d:49:57:fb:93:cd:73:
cc:e1:a4:65:22:39:a1:28:24:d6:c2:d2:0e:2f:3d:01:c2:3e:
44:0e:65:84:45:04:66:18:39:48:10:f3:c4:11:34:cc:66:c2:
3f:7f:c8:42:b3:ef:bf:09:33:fd:41:f9:72:15:ac:0b:50:42:
32:c2:50:14:cd:14:b6:cc:36:1d:de:b5:2f:8b:ee:f6:64:b0:
48:fe:e3:b6:75:aa:cb:5d:de:f3:2e:b4:b6:2e:c6:68:9c:00:
14:fc:20:29:bd:16:ea:e8:33:7b:11:18:41:65:2e:5b:98:d8:
4a:d1:08:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz9d7yT2zAnhUIVfzbRqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmE4Njg2M2M1NTg2NTcwMDYzNGUxMTM1ZTYxN2U0MDc5
YWY4YjkwHhcNMjUwNjE0MDUwMDQ5WhcNMjUwNjE1MDUwMDQ5WjAzMTEwLwYDVQQD
EygzNTI1MDQ0ODJjMzU4YjJhMDU5OGNiNmNiNTc3M2Y5ZjcwZjA2MjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WQd5/VNJPOwJv5IX4+HD4Mfxwxh
ut5AnMtKSgy7K6ziq0JTEVXMqftx2AXY6kC478Uq0uB/DKagXLS+E+LX8xmVX2Wp
KbEtSy3W1gln/aZzff5bUnMQ0oBB9jFd97igI0XkvQaMJcVv7OqI4vMvr2MQqNsE
WSGBmQEythZuneYG3+T3mLAD4YBaqDmM5xKghV+0LYUpSoUQWfrjB4O+Ww5Jz6XB
YZ5WyVNUEmylRmL2lqv77UGiV97eBKTd13yERNFjSDw6rN8GscKv6j8QQbrgb7mQ
uRYdtJm0q4wcWvQYwU5M1Hp5V+/2UipYV6l+6VM2rMX3c8VbRJckhrS2UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUlBEgsNYsqBZjLbLV3P59w8GKPMB8GA1UdIwQY
MBaAFNz6hoY8VYZXAGNOETXmF+QHmvi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MDc2YTItMjk1Zi00NWVjLWI3Yzgt
YzVjOWM2ODliNzQ1LzEvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83MDc2YTItMjk1Zi00NWVjLWI3YzgtYzVjOWM2ODliNzQ1
LzEvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyP22n3DL
iJCd9xHvazxsOTQhGdNPMuQXdfeRbGd/TMQzFzwCLcJPGMsMYpEmz/IG8rP+LL21
9IH6qW/l8E25wPxzPr8CZhIKzXGjApUusIv0hWEiQ/qLskrDT/90CUNp6E3uWIQl
cNG6l5S33vw+3nStJuUKFCS+C2Vcd51eD8vo7Qoi/xng8x8dSVf7k81zzOGkZSI5
oSgk1sLSDi89AcI+RA5lhEUEZhg5SBDzxBE0zGbCP3/IQrPvvwkz/UH5chWsC1BC
MsJQFM0Utsw2Hd61L4vu9mSwSP7jtnWqy13e8y60ti7GaJwAFPwgKb0W6ugzexEY
QWUuW5jYStEI7Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:03:39 2025 by rpki-client