Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
File: 3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json)
Hash identifier: UqSYGD77gYEqjlSJ9IN0n3zCR89iDyqgZSBlF2Ct43g=
Subject key identifier: EC:FE:40:75:DA:B1:6E:B6:70:44:BE:8C:06:90:B2:18:CB:90:C4:4C
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 0197857CA362A4D67D80A92B220A66810F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
Manifest number: 0503
Signing time: Thu 19 Jun 2025 00:00:27 +0000
Manifest this update: Thu 19 Jun 2025 00:00:27 +0000
Manifest next update: Fri 20 Jun 2025 00:00:27 +0000
Files and hashes: 1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: e1zJbm4D/8cgihwc0SmivfhJSxuCy7Q0TFebYkFsxkI=)
2: S2et9u3-k4c1RbSQYpZyfZKneKE.roa (hash: Ha/+fD6TOAGH3fDS11rGJPIxFiX3z4IR9RxVgbeKPDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:7c:a3:62:a4:d6:7d:80:a9:2b:22:0a:66:81:0f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: Jun 19 00:00:27 2025 GMT
Not After : Jun 20 00:00:27 2025 GMT
Subject: CN=ecfe4075dab16eb67044be8c0690b218cb90c44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fd:87:a8:00:cc:de:9a:ea:a1:50:a2:82:b5:
ae:14:27:6d:cd:ae:17:9e:35:85:cb:5c:31:3e:5d:
9b:85:00:fa:0d:36:ce:26:0b:fd:68:67:c2:65:56:
3a:63:fc:0e:d7:3a:a1:7e:f2:3f:37:c2:b0:93:32:
e2:99:99:5b:5e:68:5b:c1:43:d4:af:5e:40:c2:0c:
97:9e:bd:10:b1:eb:07:17:67:78:a2:c0:b8:bb:f8:
60:af:7c:a8:ce:cb:61:a7:b4:30:b9:9c:39:9a:93:
84:6c:d2:7c:e0:08:d5:10:60:c6:32:e4:59:74:f9:
c5:a6:f1:b5:20:b0:86:be:6f:22:90:f5:98:bb:5a:
38:ea:cc:69:5c:6b:7b:f8:ea:1d:70:b5:fe:a6:18:
fa:8c:8b:d7:96:43:64:da:35:dd:b2:cf:63:48:01:
f7:b6:bd:26:1f:df:7d:74:47:c8:6f:9d:24:42:34:
01:85:dc:19:f8:ab:9c:4f:d7:cf:34:37:f1:9a:77:
30:4d:4b:54:0b:52:05:11:a8:a1:ad:dd:07:2c:5e:
b0:34:26:30:14:6f:c9:9c:45:2a:86:94:e6:4d:07:
05:7a:33:fe:22:6f:30:cf:91:b1:ac:ee:eb:47:2b:
4a:1c:d9:b2:ee:51:22:47:36:b7:9e:f9:74:f2:b7:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FE:40:75:DA:B1:6E:B6:70:44:BE:8C:06:90:B2:18:CB:90:C4:4C
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:36:4f:93:2f:f3:3a:ba:9a:65:c1:cf:ae:0c:16:29:de:10:
f0:17:b8:1d:57:89:37:e4:ea:9c:7c:a8:b3:fd:b1:67:c5:29:
30:86:b5:b4:8f:9f:f8:22:25:32:8f:8a:b3:e4:f1:a1:93:44:
f1:c1:4c:32:c9:86:27:77:c7:20:ef:d8:7b:9e:aa:1f:da:69:
7a:97:85:d2:2c:8f:eb:09:33:eb:49:ef:95:af:ca:f2:68:d3:
3d:a4:42:95:fc:48:37:bf:9b:d4:69:7b:71:14:ff:85:90:fb:
f1:48:f4:73:c1:da:98:15:13:32:8e:8e:0a:57:49:19:af:7a:
f9:20:e8:27:d9:f9:aa:48:62:19:2e:74:be:0b:71:63:08:d4:
83:5f:73:4b:26:fd:29:aa:a5:85:a1:4c:ea:29:6d:5c:b5:aa:
b6:2d:ac:90:c1:1f:cf:25:4f:9e:ec:f9:15:bf:9d:19:68:be:
ad:45:7f:c4:91:9c:2e:a6:dd:40:c4:7b:14:93:43:94:e4:06:
05:1a:39:66:6c:7f:66:1b:90:a0:6f:d7:1a:7e:12:ed:9a:c9:
78:e9:21:ff:62:a1:9b:4c:82:e9:4a:8f:3f:a0:fb:b9:7f:41:
30:16:e4:b9:69:3b:16:5c:c1:e7:b9:eb:55:ce:c0:0e:c5:fd:
19:d2:84:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeFfKNipNZ9gKkrIgpmgQ90MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTgyNzA3YzQ0NGMzMTA2NGIxODk5YzU5N2U5ZWZkNzM0
MzhmOTIwHhcNMjUwNjE5MDAwMDI3WhcNMjUwNjIwMDAwMDI3WjAzMTEwLwYDVQQD
EyhlY2ZlNDA3NWRhYjE2ZWI2NzA0NGJlOGMwNjkwYjIxOGNiOTBjNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf2HqADM3prqoVCigrWuFCdtza4X
njWFy1wxPl2bhQD6DTbOJgv9aGfCZVY6Y/wO1zqhfvI/N8KwkzLimZlbXmhbwUPU
r15AwgyXnr0QsesHF2d4osC4u/hgr3yozsthp7QwuZw5mpOEbNJ84AjVEGDGMuRZ
dPnFpvG1ILCGvm8ikPWYu1o46sxpXGt7+OodcLX+phj6jIvXlkNk2jXdss9jSAH3
tr0mH999dEfIb50kQjQBhdwZ+KucT9fPNDfxmncwTUtUC1IFEaihrd0HLF6wNCYw
FG/JnEUqhpTmTQcFejP+Im8wz5GxrO7rRytKHNmy7lEiRza3nvl08rdkHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOz+QHXasW62cES+jAaQshjLkMRMMB8GA1UdIwQY
MBaAFN4YJwfERMMQZLGJnFl+nv1zQ4+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hnbkI4UkV3eEJrc1ltY1dYNmVfWE5EajVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zYmYzMDEtZDE4OS00NzVkLTk1ZGMt
ZWFhZTNkZThhYjU4LzEvM2hnbkI4UkV3eEJrc1ltY1dYNmVfWE5EajVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zYmYzMDEtZDE4OS00NzVkLTk1ZGMtZWFhZTNkZThhYjU4
LzEvM2hnbkI4UkV3eEJrc1ltY1dYNmVfWE5EajVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzZPky/z
OrqaZcHPrgwWKd4Q8Be4HVeJN+TqnHyos/2xZ8UpMIa1tI+f+CIlMo+Ks+TxoZNE
8cFMMsmGJ3fHIO/Ye56qH9ppepeF0iyP6wkz60nvla/K8mjTPaRClfxIN7+b1Gl7
cRT/hZD78Uj0c8HamBUTMo6OCldJGa96+SDoJ9n5qkhiGS50vgtxYwjUg19zSyb9
KaqlhaFM6iltXLWqti2skMEfzyVPnuz5Fb+dGWi+rUV/xJGcLqbdQMR7FJNDlOQG
BRo5Zmx/ZhuQoG/XGn4S7ZrJeOkh/2Khm0yC6UqPP6D7uX9BMBbkuWk7FlzB57nr
Vc7ADsX9GdKEGg==
-----END CERTIFICATE-----
Generated at Thu Jun 19 07:12:54 2025 by rpki-client