Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
File: r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json)
Hash identifier: FUJQDGHSC/cj3dQ2KPodzNEm9x0IYFn0lxupL7p3vzY=
Subject key identifier: 0F:59:5C:4A:FC:00:1F:48:21:70:AD:D8:76:58:D7:09:9F:FD:C8:A2
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial: 01965613279CA210F4DDE717A2D3D65FA7A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
Manifest number: 1507
Signing time: Mon 21 Apr 2025 02:00:17 +0000
Manifest this update: Mon 21 Apr 2025 02:00:17 +0000
Manifest next update: Tue 22 Apr 2025 02:00:17 +0000
Files and hashes: 1: N9sOXFw97UnrkSQWGmd4QE2g0Pc.roa (hash: FcVUr7Wqd51Nq1eKBFPb0ZOL/WKLNXNrrGtgMRztb2M=)
2: p6HHOYDEee_YFxcXEQQw4tj_loo.roa (hash: XVgmeoKKw2smz01W8p65Y0a7sBeyS3+sdPmsdrroyxo=)
3: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: nMoLDtAIDbaxR2UvqaOUHaaOnn+QFFMIz5Zs3OyZnms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:27:9c:a2:10:f4:dd:e7:17:a2:d3:d6:5f:a7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Validity
Not Before: Apr 21 02:00:17 2025 GMT
Not After : Apr 22 02:00:17 2025 GMT
Subject: CN=0f595c4afc001f482170add87658d7099ffdc8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e3:0a:46:95:4b:9d:d8:bf:d6:36:d6:3a:22:
6c:06:52:c7:f2:46:cb:21:5a:c8:bf:3b:4c:28:49:
18:ad:51:8c:38:9c:16:c7:2e:e2:f5:e1:f9:5b:63:
50:88:02:4a:f3:35:f2:28:06:2a:13:08:55:1d:b2:
5e:b3:da:fa:9d:e1:be:c6:2b:ae:dc:b6:8b:3f:b8:
55:b9:60:6e:c9:38:08:44:55:9e:ae:d5:c5:46:c9:
f7:03:02:e2:ef:51:e6:80:41:6d:99:07:2f:d9:e0:
2c:c4:ce:ca:78:51:84:4f:5f:66:b0:a4:fa:56:21:
6e:f9:6e:94:3e:87:73:5f:ea:0f:78:fd:30:71:d2:
de:19:e4:80:86:51:c1:54:0c:cf:91:25:fb:81:fb:
2f:e7:2f:46:27:af:65:be:18:c2:d5:ed:ba:4c:a7:
69:07:2d:ac:ed:dd:a4:23:d2:aa:ce:1d:2c:ce:16:
5d:46:75:1a:3e:95:f7:32:b7:d2:13:39:7b:e5:59:
9a:4c:d1:6f:24:9f:2b:ab:58:97:ac:6c:32:fe:ca:
9f:45:e4:6e:cd:f6:51:08:50:b1:ff:28:6b:84:f2:
55:bf:cd:d3:c0:e6:90:60:f0:c7:10:14:0f:40:75:
e7:54:8b:1e:24:9b:26:66:8c:93:84:03:61:97:8d:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:59:5C:4A:FC:00:1F:48:21:70:AD:D8:76:58:D7:09:9F:FD:C8:A2
X509v3 Authority Key Identifier:
keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:13:70:e7:bf:2b:86:94:eb:10:b5:e4:5f:a2:65:02:10:f0:
8b:1c:1c:bf:71:81:3d:93:d8:da:cc:51:cd:57:6d:c4:ea:33:
1f:64:59:84:be:c0:68:89:03:d6:e6:57:08:ea:1b:9b:2b:5a:
c8:ee:4e:3a:33:79:40:d5:d6:1b:fc:7f:f2:2e:7c:de:7e:58:
da:4b:ae:4f:86:52:2b:23:6b:03:92:19:fd:35:f2:ff:6f:1d:
bf:a8:69:e3:70:68:82:f9:5c:67:e7:b6:ad:e2:3d:97:0a:16:
2a:37:93:75:fa:b9:5b:c9:69:8d:5b:f8:ae:29:9a:a5:f4:9c:
9b:c2:67:1d:ab:92:d9:86:94:a8:4d:e0:1f:48:b1:4b:c8:c8:
6e:2f:2e:ea:17:bc:cb:4e:b9:38:e6:87:99:5d:7a:d2:6f:19:
b4:b6:5d:df:25:93:b1:d7:f6:82:0a:16:a9:a6:bb:0c:5b:c2:
82:cc:be:5e:51:4e:90:74:21:5e:95:56:f5:2b:95:0e:ed:dd:
ce:79:ca:9e:69:e8:22:b5:78:3a:e9:4d:0f:b7:84:d1:26:91:
11:3b:cb:c3:51:bb:c1:75:7e:ab:b1:43:e2:10:e2:ef:4b:40:
28:53:14:5c:11:b3:7d:74:be:a2:a1:2d:3d:40:7b:f5:bc:41:
21:06:91:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWEyecohD03ecXotPWX6egMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzNmZjFlYzU1ZjQ5Mjk2ZGQ3MzQwMzlmYTAyODRjYzQw
MGViMjYwHhcNMjUwNDIxMDIwMDE3WhcNMjUwNDIyMDIwMDE3WjAzMTEwLwYDVQQD
EygwZjU5NWM0YWZjMDAxZjQ4MjE3MGFkZDg3NjU4ZDcwOTlmZmRjOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+MKRpVLndi/1jbWOiJsBlLH8kbL
IVrIvztMKEkYrVGMOJwWxy7i9eH5W2NQiAJK8zXyKAYqEwhVHbJes9r6neG+xiuu
3LaLP7hVuWBuyTgIRFWertXFRsn3AwLi71HmgEFtmQcv2eAsxM7KeFGET19msKT6
ViFu+W6UPodzX+oPeP0wcdLeGeSAhlHBVAzPkSX7gfsv5y9GJ69lvhjC1e26TKdp
By2s7d2kI9Kqzh0szhZdRnUaPpX3MrfSEzl75VmaTNFvJJ8rq1iXrGwy/sqfReRu
zfZRCFCx/yhrhPJVv83TwOaQYPDHEBQPQHXnVIseJJsmZoyThANhl41BdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9ZXEr8AB9IIXCt2HZY1wmf/ciiMB8GA1UdIwQY
MBaAFK9z/x7FX0kpbdc0A5+gKEzEAOsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZWE1ODEtNWNkZS00NTc0LWJhMGEt
MmM2MmRlN2IzZTQ1LzEvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jZWE1ODEtNWNkZS00NTc0LWJhMGEtMmM2MmRlN2IzZTQ1
LzEvcjNQX0hzVmZTU2x0MXpRRG42QW9UTVFBNnlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxNw578r
hpTrELXkX6JlAhDwixwcv3GBPZPY2sxRzVdtxOozH2RZhL7AaIkD1uZXCOobmyta
yO5OOjN5QNXWG/x/8i583n5Y2kuuT4ZSKyNrA5IZ/TXy/28dv6hp43BogvlcZ+e2
reI9lwoWKjeTdfq5W8lpjVv4rimapfScm8JnHauS2YaUqE3gH0ixS8jIbi8u6he8
y065OOaHmV160m8ZtLZd3yWTsdf2ggoWqaa7DFvCgsy+XlFOkHQhXpVW9SuVDu3d
znnKnmnoIrV4OulND7eE0SaRETvLw1G7wXV+q7FD4hDi70tAKFMUXBGzfXS+oqEt
PUB79bxBIQaRIA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:00:26 2025 by rpki-client