Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
File: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft (raw, json)
Hash identifier: eL2h/s3dZbjAhumKEgkJnykoy4ixvr0vlKRGJSSgEwQ=
Subject key identifier: EF:CE:23:2E:C1:61:A3:00:21:55:C7:7C:CF:E8:3E:55:C0:CF:B2:C1
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 019768BBE7A06AC3FDC3A9DC2D14BE8A6EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
Manifest number: 14E8
Signing time: Fri 13 Jun 2025 10:00:34 +0000
Manifest this update: Fri 13 Jun 2025 10:00:34 +0000
Manifest next update: Sat 14 Jun 2025 10:00:34 +0000
Files and hashes: 1: 1-7jWzqH7wT1n-L8XkfK1kEabKfA.roa (hash: qrQpcX8LTv3WT8M/1yXwPjm8/udCR9jmZNcZtjA7oMg=)
2: 3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl (hash: n1y9xCoMovdX8C45EbmCUYL8swXhbNZDPAVCmv5nCek=)
3: kSKdo2q0O6OXBsJw6ZYyr7eJXbs.roa (hash: IDSSisdvZb6ZBfLMmbXOfW59dICKAwsuQknOYmnY4dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:e7:a0:6a:c3:fd:c3:a9:dc:2d:14:be:8a:6e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Jun 13 10:00:34 2025 GMT
Not After : Jun 14 10:00:34 2025 GMT
Subject: CN=efce232ec161a3002155c77ccfe83e55c0cfb2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:20:f7:25:c4:d6:a4:e6:38:b1:96:a3:6e:f9:
56:5c:5e:ca:e9:da:c6:96:b6:25:68:ad:a0:9e:e2:
2b:74:08:0f:28:36:b7:12:84:d7:31:9e:9d:62:f0:
5a:33:fa:a4:0d:3f:f9:33:15:a2:85:77:63:24:2e:
8b:91:81:1b:4e:f0:ad:dd:7b:d7:5c:2c:a9:1a:b8:
8f:df:ac:d1:e3:4d:93:9a:63:2c:2a:59:e1:17:e1:
1e:cb:13:83:90:45:06:71:c0:e7:13:72:9a:d8:df:
6d:b5:a9:e0:7d:6c:95:0c:70:62:13:c8:2d:d8:d0:
05:de:9f:ef:98:d9:32:90:9a:1f:b0:d7:d5:0d:97:
20:e8:02:9d:ea:36:2e:65:4d:48:df:bc:fb:24:64:
b5:0c:14:69:32:e0:35:97:2b:bc:92:98:93:fc:9b:
3f:84:7c:f1:05:8c:37:2e:f3:71:5c:89:cb:e0:2d:
0a:99:98:90:2e:6c:da:86:6b:3a:f7:0c:c2:08:ff:
db:da:d4:ed:ca:5d:d9:ed:4a:c9:f1:5c:a4:8e:9b:
2d:21:5f:97:0a:bf:a7:7a:9f:b7:70:9a:e7:6a:70:
38:db:bc:6b:69:99:85:95:38:65:31:f0:3c:1e:85:
93:5f:d4:ca:cf:8e:bb:09:f7:9b:1c:22:b1:aa:a0:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CE:23:2E:C1:61:A3:00:21:55:C7:7C:CF:E8:3E:55:C0:CF:B2:C1
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:87:42:a2:5f:ac:51:9b:ca:0d:e8:a3:a9:12:91:d5:73:99:
88:5d:59:d1:07:d6:9e:f3:96:af:b6:88:c9:35:dd:23:51:d5:
6b:d8:85:08:67:3d:4e:27:6f:41:46:97:89:4e:4d:05:1e:23:
23:c9:54:18:b6:8f:7e:5c:01:08:ae:f4:2e:62:0f:cc:40:d1:
3c:a8:e9:a8:a2:07:6f:a8:71:c3:1c:58:7c:d4:03:fd:cd:a4:
1b:d2:2a:fb:10:e1:a2:08:32:e3:04:11:02:6b:ca:f7:ec:0d:
12:1a:7e:d7:fc:9d:d3:f8:49:03:9f:4c:7d:47:40:b4:8c:71:
04:af:94:24:e7:3a:43:7c:d8:f9:15:c4:ac:83:6c:2b:de:57:
e5:4a:93:a2:3c:65:8a:4a:7f:44:1f:fa:79:26:5e:3f:99:66:
c9:c9:34:bd:bf:cc:83:60:3d:73:3c:0d:dd:99:be:ce:ce:dc:
19:94:f9:a5:e3:5e:d1:36:fe:b3:7f:e4:ad:5e:e5:1a:f6:49:
ef:2b:d0:73:ef:7b:39:cc:27:ef:56:c1:8b:b7:89:01:00:02:
bf:13:3b:04:6e:31:21:d3:d6:5b:5f:31:57:14:06:70:2b:c2:
3e:6e:89:5d:90:54:52:80:48:b9:d9:12:94:35:55:06:65:8b:
7f:6b:00:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdou+egasP9w6ncLRS+im6+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYmNhYjQ4NTk1MzZjZjk5NjU5NmVmMTlkMmE2NDYxMWQw
MzZmZTQwHhcNMjUwNjEzMTAwMDM0WhcNMjUwNjE0MTAwMDM0WjAzMTEwLwYDVQQD
EyhlZmNlMjMyZWMxNjFhMzAwMjE1NWM3N2NjZmU4M2U1NWMwY2ZiMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SD3JcTWpOY4sZajbvlWXF7K6drG
lrYlaK2gnuIrdAgPKDa3EoTXMZ6dYvBaM/qkDT/5MxWihXdjJC6LkYEbTvCt3XvX
XCypGriP36zR402TmmMsKlnhF+EeyxODkEUGccDnE3Ka2N9ttangfWyVDHBiE8gt
2NAF3p/vmNkykJofsNfVDZcg6AKd6jYuZU1I37z7JGS1DBRpMuA1lyu8kpiT/Js/
hHzxBYw3LvNxXInL4C0KmZiQLmzahms69wzCCP/b2tTtyl3Z7UrJ8VykjpstIV+X
Cr+nep+3cJrnanA427xraZmFlThlMfA8HoWTX9TKz467CfebHCKxqqArbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/OIy7BYaMAIVXHfM/oPlXAz7LBMB8GA1UdIwQY
MBaAFNy8q0hZU2z5lllu8Z0qZGEdA2/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTIt
MjY2ZmUyNzM3YjhmLzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jYTkyNzQtM2E5NC00ZjFhLWJlZTItMjY2ZmUyNzM3Yjhm
LzEvM0x5clNGbFRiUG1XV1c3eG5TcGtZUjBEYi1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYdCol+s
UZvKDeijqRKR1XOZiF1Z0QfWnvOWr7aIyTXdI1HVa9iFCGc9TidvQUaXiU5NBR4j
I8lUGLaPflwBCK70LmIPzEDRPKjpqKIHb6hxwxxYfNQD/c2kG9Iq+xDhoggy4wQR
AmvK9+wNEhp+1/yd0/hJA59MfUdAtIxxBK+UJOc6Q3zY+RXErINsK95X5UqTojxl
ikp/RB/6eSZeP5lmyck0vb/Mg2A9czwN3Zm+zs7cGZT5peNe0Tb+s3/krV7lGvZJ
7yvQc+97Ocwn71bBi7eJAQACvxM7BG4xIdPWW18xVxQGcCvCPm6JXZBUUoBIudkS
lDVVBmWLf2sAzw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:14 2025 by rpki-client