Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft
File: 3XzvizrZIDFjCqyiJqntebpgVYY.mft (raw, json)
Hash identifier: b1uieViH7zUs1eMVtfkKNSS427xI7qVEdRGRMYldqKM=
Subject key identifier: 9E:38:45:99:B9:AB:CA:F5:AC:A5:53:6F:A6:BC:DD:2A:2B:96:51:6E
Authority key identifier: DD:7C:EF:8B:3A:D9:20:31:63:0A:AC:A2:26:A9:ED:79:BA:60:55:86
Certificate issuer: /CN=dd7cef8b3ad92031630aaca226a9ed79ba605586
Certificate serial: 019768851A9805A711D280ABC41F35BAD4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XzvizrZIDFjCqyiJqntebpgVYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft
Manifest number: F3
Signing time: Fri 13 Jun 2025 09:00:42 +0000
Manifest this update: Fri 13 Jun 2025 09:00:42 +0000
Manifest next update: Sat 14 Jun 2025 09:00:42 +0000
Files and hashes: 1: 3XzvizrZIDFjCqyiJqntebpgVYY.crl (hash: yOhJ8poOwyf9J3cpheIzxG6tAfCEv1sdMiHca8qwvTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XzvizrZIDFjCqyiJqntebpgVYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:1a:98:05:a7:11:d2:80:ab:c4:1f:35:ba:d4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd7cef8b3ad92031630aaca226a9ed79ba605586
Validity
Not Before: Jun 13 09:00:42 2025 GMT
Not After : Jun 14 09:00:42 2025 GMT
Subject: CN=9e384599b9abcaf5aca5536fa6bcdd2a2b96516e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:33:81:8d:50:96:68:2e:74:00:58:e8:90:da:
03:37:4a:f6:53:88:e8:ca:b1:5e:f7:77:df:e3:a5:
4e:a0:c0:30:cf:00:bc:0a:fc:18:45:8e:65:9b:5b:
95:86:25:af:cf:29:26:21:ff:6a:f3:04:31:b2:fb:
2d:b5:e4:46:26:21:a8:89:81:d4:49:3f:43:8b:b7:
31:4c:99:17:f3:61:a3:d7:2f:06:7a:8b:47:22:e7:
31:47:19:32:b1:47:cd:04:2d:ed:a5:20:99:f9:8d:
ea:2d:f6:fd:a0:4f:21:d0:a0:28:fb:7b:c4:5d:cf:
60:ae:c7:99:a2:13:e9:7b:01:77:a3:d4:8b:b4:82:
2c:ec:9a:e4:5f:e2:0b:f1:aa:24:d0:68:be:e9:92:
a7:3f:b9:ce:36:b4:24:b7:45:23:8b:b3:c4:ed:60:
f7:8c:4a:fc:ec:55:a2:c2:b4:35:8f:17:e1:c0:56:
ef:74:c6:98:96:c1:05:38:9a:04:aa:22:77:a7:15:
9a:d9:4e:3b:35:16:45:a9:03:6b:45:79:e5:b2:5e:
1b:02:f1:93:8a:31:f4:e6:6d:f4:fe:7a:f7:a3:7f:
2a:85:1f:c6:2d:ec:44:80:7e:3c:f1:eb:05:52:dc:
1a:fd:61:a8:5e:85:ae:a3:14:7e:f1:b6:ce:ae:4f:
77:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:38:45:99:B9:AB:CA:F5:AC:A5:53:6F:A6:BC:DD:2A:2B:96:51:6E
X509v3 Authority Key Identifier:
keyid:DD:7C:EF:8B:3A:D9:20:31:63:0A:AC:A2:26:A9:ED:79:BA:60:55:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XzvizrZIDFjCqyiJqntebpgVYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5e:28:cb:18:35:31:1a:fa:75:42:3d:56:77:b2:41:16:50:
27:98:51:fc:86:d9:e1:63:5d:24:ed:57:81:c5:69:41:94:b8:
42:13:25:36:49:a5:77:aa:75:62:b1:bb:e7:8d:52:ae:6f:64:
ee:eb:a9:87:aa:0b:1d:eb:40:54:54:31:90:87:ce:d0:8a:4c:
53:28:fd:10:19:5d:a4:74:72:5e:58:cb:9c:f0:2d:d7:9d:e8:
f6:37:d4:b4:cb:35:fd:8f:a9:7f:d7:a0:85:3e:b5:99:2d:4a:
ad:4a:8b:d3:55:db:65:a6:01:84:d3:7e:31:dc:63:ba:34:56:
fc:16:32:49:3e:3f:36:72:b3:e0:e1:28:5c:b0:a9:3d:d9:ac:
3a:d6:30:de:50:75:ca:08:1d:2d:b2:dd:de:84:f1:75:6f:c1:
7d:40:91:24:91:5f:8b:9d:14:6d:6a:03:95:fd:68:d3:58:cb:
07:50:1f:63:76:e1:a5:8f:c1:d0:2f:f3:d0:f5:3c:fe:2d:90:
cc:86:9e:1f:3c:97:95:fc:90:1c:f2:ad:98:2b:a3:f9:b8:09:
5d:5d:48:f4:ee:84:00:1d:74:e5:32:c8:08:03:97:9e:57:c7:
ad:ec:86:3a:4a:11:d1:eb:e0:f7:d8:ec:77:0b:fd:08:63:37:
be:44:5a:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohRqYBacR0oCrxB81utS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkN2NlZjhiM2FkOTIwMzE2MzBhYWNhMjI2YTllZDc5YmE2
MDU1ODYwHhcNMjUwNjEzMDkwMDQyWhcNMjUwNjE0MDkwMDQyWjAzMTEwLwYDVQQD
Eyg5ZTM4NDU5OWI5YWJjYWY1YWNhNTUzNmZhNmJjZGQyYTJiOTY1MTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zOBjVCWaC50AFjokNoDN0r2U4jo
yrFe93ff46VOoMAwzwC8CvwYRY5lm1uVhiWvzykmIf9q8wQxsvstteRGJiGoiYHU
ST9Di7cxTJkX82Gj1y8GeotHIucxRxkysUfNBC3tpSCZ+Y3qLfb9oE8h0KAo+3vE
Xc9grseZohPpewF3o9SLtIIs7JrkX+IL8aok0Gi+6ZKnP7nONrQkt0Uji7PE7WD3
jEr87FWiwrQ1jxfhwFbvdMaYlsEFOJoEqiJ3pxWa2U47NRZFqQNrRXnlsl4bAvGT
ijH05m30/nr3o38qhR/GLexEgH488esFUtwa/WGoXoWuoxR+8bbOrk93XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ44RZm5q8r1rKVTb6a83SorllFuMB8GA1UdIwQY
MBaAFN1874s62SAxYwqsoiap7Xm6YFWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1h6dml6clpJREZqQ3F5aUpxbnRlYnBnVllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xZDk4YjAtNGE0ZC00MTkwLWJkODUt
MzcyZjY1ZDk5YTlmLzEvM1h6dml6clpJREZqQ3F5aUpxbnRlYnBnVllZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xZDk4YjAtNGE0ZC00MTkwLWJkODUtMzcyZjY1ZDk5YTlm
LzEvM1h6dml6clpJREZqQ3F5aUpxbnRlYnBnVllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAil4oyxg1
MRr6dUI9VneyQRZQJ5hR/IbZ4WNdJO1XgcVpQZS4QhMlNkmld6p1YrG7541Srm9k
7uuph6oLHetAVFQxkIfO0IpMUyj9EBldpHRyXljLnPAt153o9jfUtMs1/Y+pf9eg
hT61mS1KrUqL01XbZaYBhNN+MdxjujRW/BYyST4/NnKz4OEoXLCpPdmsOtYw3lB1
yggdLbLd3oTxdW/BfUCRJJFfi50UbWoDlf1o01jLB1AfY3bhpY/B0C/z0PU8/i2Q
zIaeHzyXlfyQHPKtmCuj+bgJXV1I9O6EAB105TLICAOXnlfHreyGOkoR0evg99js
dwv9CGM3vkRaUQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:51 2025 by rpki-client