Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
File: 3dya0lC4XNOZSUZbZoGy8d8U1qM.mft (raw, json)
Hash identifier: /Vfr1zWRubjpOkn1V8Y8EsR6gpu+92KHcsJJSyXa/M4=
Subject key identifier: 72:E5:1E:9F:BA:45:2D:53:E9:76:DD:89:34:E6:D7:02:93:A9:44:0E
Authority key identifier: DD:DC:9A:D2:50:B8:5C:D3:99:49:46:5B:66:81:B2:F1:DF:14:D6:A3
Certificate issuer: /CN=dddc9ad250b85cd39949465b6681b2f1df14d6a3
Certificate serial: 01976FD13113A30C81DDA701D23212619D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
Manifest number: 0476
Signing time: Sat 14 Jun 2025 19:01:09 +0000
Manifest this update: Sat 14 Jun 2025 19:01:09 +0000
Manifest next update: Sun 15 Jun 2025 19:01:09 +0000
Files and hashes: 1: 3dya0lC4XNOZSUZbZoGy8d8U1qM.crl (hash: WrMwhxZMLhUdDHmJ8acbDPAxU2xfDVVjW0Z63azDa0o=)
2: dA9DZPAABtlejc0G0adjQxYBv5c.roa (hash: 3UVeFl3N3ODI+QVLphkmL5y9dyL4Gw+YagDr/4SW4gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:31:13:a3:0c:81:dd:a7:01:d2:32:12:61:9d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dddc9ad250b85cd39949465b6681b2f1df14d6a3
Validity
Not Before: Jun 14 19:01:09 2025 GMT
Not After : Jun 15 19:01:09 2025 GMT
Subject: CN=72e51e9fba452d53e976dd8934e6d70293a9440e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:3d:a8:ba:c4:4a:69:a3:58:f9:4e:38:c9:
67:4f:44:2b:55:bd:62:5e:d4:cf:9b:0a:d6:4a:a3:
ec:3d:6e:34:a9:0d:6a:b7:cf:33:9e:a6:57:b4:9a:
70:39:68:95:fa:fb:ad:d1:3e:f2:2a:cd:21:95:70:
2d:b8:2f:23:ce:66:be:73:74:dc:5e:fd:4c:93:b5:
8e:38:ff:41:91:17:ed:24:e9:de:6a:ab:3e:36:b6:
37:ab:8c:57:69:76:ef:e5:7f:75:97:03:14:99:25:
3b:e0:c7:28:c9:84:1e:44:c3:da:1f:d2:95:dd:cb:
83:00:68:c2:d6:85:8a:c9:e3:97:fe:84:ef:27:7a:
5b:35:7c:d2:f6:b2:4a:f5:d3:b7:c9:62:48:9b:2f:
9d:af:60:29:84:2b:ff:67:f0:91:43:06:1f:72:54:
6d:48:7e:bd:06:0e:f4:eb:66:d4:d9:ce:54:04:05:
6e:bc:c1:9e:34:93:18:9b:28:73:6b:cf:8e:51:8d:
7a:a4:de:2b:e9:44:a2:02:c6:ef:bc:5f:2a:ea:f3:
5a:62:1a:3d:a8:95:f1:09:2f:7f:7c:bf:7c:14:05:
b1:29:cd:77:d8:6b:33:90:d8:e9:da:72:61:0b:a5:
c2:4d:07:e4:38:7a:52:0a:ed:bb:c8:44:09:62:20:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E5:1E:9F:BA:45:2D:53:E9:76:DD:89:34:E6:D7:02:93:A9:44:0E
X509v3 Authority Key Identifier:
keyid:DD:DC:9A:D2:50:B8:5C:D3:99:49:46:5B:66:81:B2:F1:DF:14:D6:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dya0lC4XNOZSUZbZoGy8d8U1qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/5bf948-977b-4b0e-b8e7-0d4318ca8c55/1/3dya0lC4XNOZSUZbZoGy8d8U1qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:22:2a:a4:88:b3:6d:d9:bb:de:f4:8c:c9:c0:37:ca:f5:a0:
95:91:ca:08:98:19:51:b6:1b:6a:50:d5:e7:41:10:35:6b:af:
4b:a2:b7:f0:77:f4:f6:f6:c9:86:a6:33:f7:e4:f9:0d:42:35:
e4:c5:f3:e8:ea:75:63:4c:7b:62:52:c0:40:4b:49:07:1f:54:
44:96:70:14:01:dd:51:0d:fe:d1:3d:81:db:89:92:33:a6:52:
31:1a:17:24:9d:14:ad:6c:4c:fd:b5:d6:f0:de:51:3e:32:43:
b3:fd:e0:d0:11:8e:e2:46:55:d8:ac:b2:8c:90:97:fb:bf:df:
f9:02:b7:64:4c:32:1d:a5:24:e5:89:3d:6e:82:7f:a3:ee:18:
d4:42:52:81:7b:42:48:05:07:d0:f3:42:a8:a6:3b:b7:2b:6a:
ac:1d:9e:72:0a:80:90:8c:9e:d5:df:1b:9d:35:ab:af:86:01:
1b:52:36:ee:2c:34:c3:a7:85:a9:32:0c:2a:48:ae:f7:02:b7:
67:6f:9b:5f:3b:10:33:93:36:e7:bc:8d:8e:b4:53:83:5e:c2:
63:0a:a9:a1:a6:57:79:77:e6:9c:16:8b:92:c2:70:7a:22:79:
ae:29:07:07:1b:88:92:c0:a6:94:be:ed:ad:94:81:65:07:79:
fa:88:03:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0TETowyB3acB0jISYZ2PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZGM5YWQyNTBiODVjZDM5OTQ5NDY1YjY2ODFiMmYxZGYx
NGQ2YTMwHhcNMjUwNjE0MTkwMTA5WhcNMjUwNjE1MTkwMTA5WjAzMTEwLwYDVQQD
Eyg3MmU1MWU5ZmJhNDUyZDUzZTk3NmRkODkzNGU2ZDcwMjkzYTk0NDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEE9qLrESmmjWPlOOMlnT0QrVb1i
XtTPmwrWSqPsPW40qQ1qt88znqZXtJpwOWiV+vut0T7yKs0hlXAtuC8jzma+c3Tc
Xv1Mk7WOOP9BkRftJOneaqs+NrY3q4xXaXbv5X91lwMUmSU74McoyYQeRMPaH9KV
3cuDAGjC1oWKyeOX/oTvJ3pbNXzS9rJK9dO3yWJImy+dr2AphCv/Z/CRQwYfclRt
SH69Bg7062bU2c5UBAVuvMGeNJMYmyhza8+OUY16pN4r6USiAsbvvF8q6vNaYho9
qJXxCS9/fL98FAWxKc132GszkNjp2nJhC6XCTQfkOHpSCu27yEQJYiC1qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLlHp+6RS1T6XbdiTTm1wKTqUQOMB8GA1UdIwQY
MBaAFN3cmtJQuFzTmUlGW2aBsvHfFNajMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2R5YTBsQzRYTk9aU1VaYlpvR3k4ZDhVMXFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81YmY5NDgtOTc3Yi00YjBlLWI4ZTct
MGQ0MzE4Y2E4YzU1LzEvM2R5YTBsQzRYTk9aU1VaYlpvR3k4ZDhVMXFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81YmY5NDgtOTc3Yi00YjBlLWI4ZTctMGQ0MzE4Y2E4YzU1
LzEvM2R5YTBsQzRYTk9aU1VaYlpvR3k4ZDhVMXFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSIqpIiz
bdm73vSMycA3yvWglZHKCJgZUbYbalDV50EQNWuvS6K38Hf09vbJhqYz9+T5DUI1
5MXz6Op1Y0x7YlLAQEtJBx9URJZwFAHdUQ3+0T2B24mSM6ZSMRoXJJ0UrWxM/bXW
8N5RPjJDs/3g0BGO4kZV2KyyjJCX+7/f+QK3ZEwyHaUk5Yk9boJ/o+4Y1EJSgXtC
SAUH0PNCqKY7tytqrB2ecgqAkIye1d8bnTWrr4YBG1I27iw0w6eFqTIMKkiu9wK3
Z2+bXzsQM5M257yNjrRTg17CYwqpoaZXeXfmnBaLksJweiJ5rikHBxuIksCmlL7t
rZSBZQd5+ogDKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:17:54 2025 by rpki-client