Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File: 3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier: 6I56aNUEWeGLkjZbN6eX7m2DjqB0H1xfqpsi+TCnjf8=
Subject key identifier: A6:59:23:5B:4B:E9:66:CB:E3:51:C7:46:A9:F6:30:24:8F:15:8C:14
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer: /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial: 01976F99C1CBA463BBB6A82557408AC85289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number: 0A06
Signing time: Sat 14 Jun 2025 18:00:36 +0000
Manifest this update: Sat 14 Jun 2025 18:00:36 +0000
Manifest next update: Sun 15 Jun 2025 18:00:36 +0000
Files and hashes: 1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: FPC3Czz/NY4+z9RBqme6i5xpNQqQ9V4aF6LiTgFHGwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:c1:cb:a4:63:bb:b6:a8:25:57:40:8a:c8:52:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Validity
Not Before: Jun 14 18:00:36 2025 GMT
Not After : Jun 15 18:00:36 2025 GMT
Subject: CN=a659235b4be966cbe351c746a9f630248f158c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:30:12:f2:9a:42:0e:7a:b6:99:b0:0c:38:c2:
5d:43:45:89:98:6e:0a:63:2e:e9:96:dd:89:5b:9e:
fd:da:43:01:c2:64:39:0b:4a:db:bf:9e:5f:64:42:
ad:45:36:cf:ef:92:fe:e1:55:35:7d:20:bd:58:30:
3c:bf:52:56:d4:39:cc:8c:27:78:f5:34:b4:49:ce:
75:24:5f:45:c3:0a:16:22:2b:0b:19:c1:67:d3:79:
bf:b4:34:dc:a8:c0:2b:60:e6:6e:7c:73:38:54:d8:
62:72:e6:0b:aa:98:c0:80:4f:16:e8:8e:c0:8c:23:
fe:25:a1:1b:15:26:32:f8:3c:b3:fd:44:02:96:58:
00:e9:87:f0:e5:3a:51:87:aa:da:73:51:2e:a1:45:
fd:00:86:f2:61:c4:aa:30:b3:60:e5:42:14:a8:19:
e6:d2:62:31:72:f3:8a:ae:14:05:5d:b4:d3:e7:ad:
2d:c3:c9:f7:15:ff:2d:3c:25:ec:b7:87:d8:ab:89:
af:18:4b:cc:1c:1f:66:3b:a3:9c:7a:ba:f7:0a:87:
a5:af:41:f9:88:e9:ce:02:0a:53:1b:56:82:56:94:
27:55:6f:57:f9:e9:be:08:3e:da:48:ef:10:06:d3:
18:f5:41:b5:33:3e:81:94:1c:c6:54:9c:f1:1a:b9:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:59:23:5B:4B:E9:66:CB:E3:51:C7:46:A9:F6:30:24:8F:15:8C:14
X509v3 Authority Key Identifier:
keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:89:9a:11:83:41:a0:e7:f0:3b:9c:75:f9:56:ef:df:f6:7b:
1a:38:a6:01:b7:86:31:66:b6:07:d0:ca:71:f4:3d:86:66:d4:
9d:1b:4c:15:20:8d:f4:ea:41:dc:28:76:7f:62:f8:3b:25:79:
60:01:8a:77:a0:7e:bb:39:83:24:67:fd:0b:ac:e4:a4:04:2d:
62:99:30:94:6b:87:b9:a4:22:ab:a2:0c:8b:f2:f9:54:98:93:
d0:c3:5c:b7:4a:4d:f7:6a:ba:7f:a8:9c:a9:0f:e1:31:fc:7f:
17:59:bd:ec:70:69:7e:fe:a4:25:0a:c0:e8:95:d5:47:de:ea:
5a:28:f2:7c:24:5b:93:3d:4a:52:dc:1c:8b:d0:09:aa:0a:42:
ca:35:c8:8c:26:11:6d:dc:25:bc:a7:69:fa:0e:94:ca:01:fa:
fa:6e:de:29:e3:4c:e9:08:71:0f:25:5e:58:14:5d:56:ea:1b:
18:63:da:b2:87:00:fd:70:97:fd:be:99:e4:ee:7f:ed:ef:47:
a0:57:a0:22:fa:fd:d6:35:ce:8e:91:c8:29:dd:8b:4c:39:30:
23:46:f8:6f:69:7b:75:d2:9a:b1:50:54:de:71:d4:89:5f:92:
e4:31:40:e7:77:33:fb:f8:10:6a:d4:c5:1c:63:2d:64:1e:4c:
cc:b2:a3:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmcHLpGO7tqglV0CKyFKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNTdhMWY5YzEyMWM5YzJiNmY5NGQzOGE3NWZiZmRjYzU0
ZGYwNWIwHhcNMjUwNjE0MTgwMDM2WhcNMjUwNjE1MTgwMDM2WjAzMTEwLwYDVQQD
EyhhNjU5MjM1YjRiZTk2NmNiZTM1MWM3NDZhOWY2MzAyNDhmMTU4YzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTAS8ppCDnq2mbAMOMJdQ0WJmG4K
Yy7plt2JW5792kMBwmQ5C0rbv55fZEKtRTbP75L+4VU1fSC9WDA8v1JW1DnMjCd4
9TS0Sc51JF9FwwoWIisLGcFn03m/tDTcqMArYOZufHM4VNhicuYLqpjAgE8W6I7A
jCP+JaEbFSYy+Dyz/UQCllgA6Yfw5TpRh6rac1EuoUX9AIbyYcSqMLNg5UIUqBnm
0mIxcvOKrhQFXbTT560tw8n3Ff8tPCXst4fYq4mvGEvMHB9mO6Ocerr3Coelr0H5
iOnOAgpTG1aCVpQnVW9X+em+CD7aSO8QBtMY9UG1Mz6BlBzGVJzxGrkL3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZZI1tL6WbL41HHRqn2MCSPFYwUMB8GA1UdIwQY
MBaAFNxXofnBIcnCtvlNOKdfv9zFTfBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZTY3NjUtODZlMi00MDEwLThmOGUt
ZGQxMTNjNjk4ZDEyLzEvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wZTY3NjUtODZlMi00MDEwLThmOGUtZGQxMTNjNjk4ZDEy
LzEvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATImaEYNB
oOfwO5x1+Vbv3/Z7GjimAbeGMWa2B9DKcfQ9hmbUnRtMFSCN9OpB3Ch2f2L4OyV5
YAGKd6B+uzmDJGf9C6zkpAQtYpkwlGuHuaQiq6IMi/L5VJiT0MNct0pN92q6f6ic
qQ/hMfx/F1m97HBpfv6kJQrA6JXVR97qWijyfCRbkz1KUtwci9AJqgpCyjXIjCYR
bdwlvKdp+g6UygH6+m7eKeNM6QhxDyVeWBRdVuobGGPasocA/XCX/b6Z5O5/7e9H
oFegIvr91jXOjpHIKd2LTDkwI0b4b2l7ddKasVBU3nHUiV+S5DFA53cz+/gQatTF
HGMtZB5MzLKjDw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:59:28 2025 by rpki-client