Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier: k1BLIirQSwkUpRqWZ2oCanDFHCfvRYA6YJAOzQk8YRE=
Subject key identifier: 27:5D:45:7E:E9:AB:F3:BA:00:AA:5C:37:C3:26:3A:6B:CA:03:B0:6E
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 01976C61B6570CE60E9AC341E157613792F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number: 1105
Signing time: Sat 14 Jun 2025 03:00:32 +0000
Manifest this update: Sat 14 Jun 2025 03:00:32 +0000
Manifest next update: Sun 15 Jun 2025 03:00:32 +0000
Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: 8mPxCyTNHi9yL41LPrwOcxvsshAQJoxVYJe47M+/eT0=)
2: RNkRhX3yK-TkHlh9YWWsykby_Dc.roa (hash: vp+4Wych+XwTPbr9Bjf9hawO/Jnhv86eVFw3KntPsww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:b6:57:0c:e6:0e:9a:c3:41:e1:57:61:37:92:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Jun 14 03:00:32 2025 GMT
Not After : Jun 15 03:00:32 2025 GMT
Subject: CN=275d457ee9abf3ba00aa5c37c3263a6bca03b06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:60:9b:ba:6b:3a:fe:d8:06:62:3c:81:52:
e9:40:8c:51:be:71:b7:3f:3c:29:46:15:38:78:06:
f2:a7:da:51:4a:c6:51:83:ed:7e:d7:24:e8:34:13:
0f:d6:b1:64:e5:68:6d:42:76:50:f0:0c:0f:1a:7e:
6f:7e:b7:9c:57:59:fc:32:28:07:75:5d:54:8f:6a:
df:52:c6:32:f2:94:9a:b7:ab:81:aa:02:62:c0:26:
94:fc:b8:d9:ee:99:da:b6:d8:4a:60:1c:a7:e0:eb:
12:58:82:20:7a:bf:e4:2f:37:11:71:99:5f:dd:37:
b6:36:b9:3d:d6:b9:6a:1a:44:4e:39:56:a9:70:7d:
d4:5d:4a:fc:76:c1:4f:55:12:a3:d7:fd:76:96:d4:
83:99:37:08:9c:4d:38:1f:7c:a5:aa:14:e0:5d:03:
59:37:05:79:45:7b:e0:d9:ac:54:66:63:08:90:b7:
1d:0b:f9:83:c9:2b:73:e4:6b:7a:7a:90:5f:2c:8c:
7a:b8:8c:c8:c1:a0:a3:db:38:65:b4:f5:dc:f2:1a:
47:95:3d:cf:86:08:b3:92:55:1d:29:87:f9:c5:c4:
f3:9f:41:c6:8f:19:ef:6c:6c:40:5c:93:6b:7e:00:
9e:bd:32:da:d7:f9:07:1c:11:ab:37:07:98:2b:40:
46:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5D:45:7E:E9:AB:F3:BA:00:AA:5C:37:C3:26:3A:6B:CA:03:B0:6E
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0b:d8:4b:d8:a8:33:93:ed:49:96:44:ed:fe:2b:57:e7:4e:
f8:eb:65:6d:d1:80:e4:8d:fc:59:f9:91:ef:6b:15:23:06:14:
e9:e3:31:5f:70:53:0c:42:67:cb:c3:59:df:36:46:90:28:b3:
49:8d:e8:ff:cd:35:8f:e1:c3:06:85:ea:d3:03:65:cc:a0:b9:
2a:f6:2e:06:97:84:64:29:e8:04:f1:40:50:fe:bc:23:1c:61:
7a:6a:e9:d8:24:d1:62:81:af:4e:be:d2:5a:22:cc:0e:ca:98:
17:54:63:d7:f7:7a:1d:b3:45:11:a5:cb:a9:7e:35:0d:3d:43:
89:5c:4e:c9:f0:6e:93:f5:19:a6:95:ff:5d:e4:b1:40:24:f5:
8c:f0:14:20:ff:41:21:f5:b0:ce:5b:0c:4f:0d:ea:ee:85:14:
9c:8c:97:ec:3e:be:27:c4:7f:29:d2:6a:ec:15:25:1d:2a:f2:
fd:f3:f0:61:48:7f:e3:39:72:2e:ea:14:f6:98:24:73:9e:b6:
9d:44:e4:c0:c1:d0:f0:0e:e4:77:38:58:8b:7e:ca:7a:95:65:
ea:cb:36:88:27:86:4c:ae:32:a0:cc:65:e1:1e:4c:17:af:ff:
70:c8:35:8a:0a:0e:fd:3f:ba:69:b8:7b:ef:5f:d8:e2:b3:6c:
b0:ac:8f:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYbZXDOYOmsNB4VdhN5L3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZGY5YTY3MWJjZjE3ODljMWI1YWMzNjMwYzc0MWJlNTYw
ZGFkYTAwHhcNMjUwNjE0MDMwMDMyWhcNMjUwNjE1MDMwMDMyWjAzMTEwLwYDVQQD
EygyNzVkNDU3ZWU5YWJmM2JhMDBhYTVjMzdjMzI2M2E2YmNhMDNiMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNlgm7prOv7YBmI8gVLpQIxRvnG3
PzwpRhU4eAbyp9pRSsZRg+1+1yToNBMP1rFk5WhtQnZQ8AwPGn5vfrecV1n8MigH
dV1Uj2rfUsYy8pSat6uBqgJiwCaU/LjZ7pnatthKYByn4OsSWIIger/kLzcRcZlf
3Te2Nrk91rlqGkROOVapcH3UXUr8dsFPVRKj1/12ltSDmTcInE04H3ylqhTgXQNZ
NwV5RXvg2axUZmMIkLcdC/mDyStz5Gt6epBfLIx6uIzIwaCj2zhltPXc8hpHlT3P
hgizklUdKYf5xcTzn0HGjxnvbGxAXJNrfgCevTLa1/kHHBGrNweYK0BG8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCddRX7pq/O6AKpcN8MmOmvKA7BuMB8GA1UdIwQY
MBaAFN7fmmcbzxeJwbWsNjDHQb5WDa2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iYjEzOTYtOWMwNS00ZTE3LWJiYzUt
Nzc2NjA1MDFjNDc4LzEvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iYjEzOTYtOWMwNS00ZTE3LWJiYzUtNzc2NjA1MDFjNDc4
LzEvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgvYS9io
M5PtSZZE7f4rV+dO+OtlbdGA5I38WfmR72sVIwYU6eMxX3BTDEJny8NZ3zZGkCiz
SY3o/801j+HDBoXq0wNlzKC5KvYuBpeEZCnoBPFAUP68Ixxhemrp2CTRYoGvTr7S
WiLMDsqYF1Rj1/d6HbNFEaXLqX41DT1DiVxOyfBuk/UZppX/XeSxQCT1jPAUIP9B
IfWwzlsMTw3q7oUUnIyX7D6+J8R/KdJq7BUlHSry/fPwYUh/4zlyLuoU9pgkc562
nUTkwMHQ8A7kdzhYi37KepVl6ss2iCeGTK4yoMxl4R5MF6//cMg1igoO/T+6abh7
71/Y4rNssKyP3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:07:22 2025 by rpki-client