Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
File: I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft (raw, json)
Hash identifier: zuD9/wGnF+fHCpWXw+R3SlWCjFFboKiDWv0GBQuTrfs=
Subject key identifier: 26:71:FA:DF:B5:0B:3B:52:70:61:FB:90:00:CC:5B:3F:F6:7E:6C:5E
Authority key identifier: 23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
Certificate issuer: /CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Certificate serial: 019658020F9C088342C7A78AB38FC9E1EE60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
Manifest number: 1454
Signing time: Mon 21 Apr 2025 11:00:52 +0000
Manifest this update: Mon 21 Apr 2025 11:00:52 +0000
Manifest next update: Tue 22 Apr 2025 11:00:52 +0000
Files and hashes: 1: I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl (hash: seDKqrR29CNZlU4hve4wQxOO9uG+G/jvXaFjsh6GVaM=)
2: ytASscQl-jcvF2Td7QzFghuuoNE.roa (hash: H19QKz9GlVTgCFc+7rr/9vdcrrvYDR0hpeCGpVF7EE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:02:0f:9c:08:83:42:c7:a7:8a:b3:8f:c9:e1:ee:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Validity
Not Before: Apr 21 11:00:52 2025 GMT
Not After : Apr 22 11:00:52 2025 GMT
Subject: CN=2671fadfb50b3b527061fb9000cc5b3ff67e6c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:17:e3:ca:14:92:5a:f0:57:81:46:d2:e0:ba:
fc:d8:c2:7b:21:f1:0e:26:1a:4a:f3:dd:63:7f:01:
c2:e7:d9:57:0b:0c:2f:d6:02:a1:0c:50:b7:79:0f:
cf:6e:ed:4e:18:72:35:3a:3f:da:f9:4f:1f:a5:00:
d3:cd:d6:2e:de:82:88:de:29:28:24:1a:12:7e:5a:
00:c4:a8:69:f5:2e:ea:22:05:42:4b:70:ed:a0:22:
14:cd:6c:bc:0d:ee:b4:e8:e5:03:0d:ba:bb:75:b8:
92:0b:04:46:0b:67:b5:db:d8:b9:6a:76:da:6c:25:
52:3d:99:70:8c:dc:5d:94:5f:d2:36:55:74:82:23:
d3:a1:72:51:38:20:62:c1:b5:88:41:ae:ef:e1:88:
9d:ec:f6:d4:1e:13:96:68:e3:a5:cb:a0:f7:d5:6c:
8a:c5:60:6f:aa:de:70:0d:c2:31:64:c9:be:26:c9:
3f:74:d8:20:f7:d5:85:53:eb:a5:66:7e:82:b0:94:
3d:27:d2:dc:94:72:dc:9d:c9:ab:72:ab:2f:22:8d:
d7:e0:de:26:e8:66:8e:e0:4a:51:bd:87:17:b6:b1:
41:a2:65:38:00:9d:eb:fc:f0:b3:69:57:50:cc:c1:
d7:ca:11:7a:44:e0:9b:3a:82:3c:33:f4:0d:b1:20:
00:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:71:FA:DF:B5:0B:3B:52:70:61:FB:90:00:CC:5B:3F:F6:7E:6C:5E
X509v3 Authority Key Identifier:
keyid:23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1f:2e:32:8c:00:f8:2f:a4:65:a6:df:b9:6e:eb:27:57:4d:
2e:e3:ff:cc:71:f0:00:2b:dd:fb:9a:d0:3b:ff:8a:ef:e9:0b:
9c:6b:7a:a5:59:2d:21:c2:fe:13:ee:35:b8:a7:af:aa:7c:eb:
b7:75:d9:0b:74:41:62:29:39:c5:c8:b8:72:e0:76:f2:c4:b2:
70:b4:18:93:79:45:a2:17:b3:38:a4:5c:38:69:b2:3c:6d:1f:
3a:bb:0b:fd:d8:17:1a:03:84:22:21:9c:e3:28:ce:32:b0:fd:
94:99:82:e4:40:1a:0a:71:9c:c3:3d:36:cf:e1:8a:96:67:a0:
e2:41:a7:1b:ed:69:85:38:fd:e3:de:76:49:2c:cc:d3:91:87:
1b:4a:25:56:f7:99:23:17:70:e4:03:ef:05:00:1e:e0:5f:3e:
7c:27:ba:b2:c4:fc:63:df:c0:86:db:33:85:f3:79:3b:77:6d:
8c:31:5d:7c:19:32:ff:2b:bf:0f:a7:2d:3a:fc:41:c9:65:61:
c2:e0:f1:47:30:ef:8a:6c:e3:c5:da:f1:3e:7c:4b:3a:fa:9f:
0f:3c:50:0f:8b:a8:83:7b:e2:fe:f8:8e:00:7c:96:38:59:ce:
96:ee:1b:78:df:40:e7:3d:e6:3a:72:02:3d:82:84:0c:f0:69:
1c:b4:c7:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYAg+cCINCx6eKs4/J4e5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2IyYjUwYmYwYzE4YTUzMWU2ZGIxNTY2N2JlN2VkNzZi
YjI4MjEwHhcNMjUwNDIxMTEwMDUyWhcNMjUwNDIyMTEwMDUyWjAzMTEwLwYDVQQD
EygyNjcxZmFkZmI1MGIzYjUyNzA2MWZiOTAwMGNjNWIzZmY2N2U2YzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBfjyhSSWvBXgUbS4Lr82MJ7IfEO
JhpK891jfwHC59lXCwwv1gKhDFC3eQ/Pbu1OGHI1Oj/a+U8fpQDTzdYu3oKI3iko
JBoSfloAxKhp9S7qIgVCS3DtoCIUzWy8De606OUDDbq7dbiSCwRGC2e129i5anba
bCVSPZlwjNxdlF/SNlV0giPToXJROCBiwbWIQa7v4Yid7PbUHhOWaOOly6D31WyK
xWBvqt5wDcIxZMm+Jsk/dNgg99WFU+ulZn6CsJQ9J9LclHLcncmrcqsvIo3X4N4m
6GaO4EpRvYcXtrFBomU4AJ3r/PCzaVdQzMHXyhF6ROCbOoI8M/QNsSAAGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZx+t+1CztScGH7kADMWz/2fmxeMB8GA1UdIwQY
MBaAFCN7K1C/DBilMebbFWZ75+12uyghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTNzclVMOE1HS1V4NXRzVlpudm43WGE3S0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8zZDZkNTEtM2Q1Ny00M2E4LWI2N2Yt
YjYxNWRmN2ZjZTllLzEvSTNzclVMOE1HS1V4NXRzVlpudm43WGE3S0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8zZDZkNTEtM2Q1Ny00M2E4LWI2N2YtYjYxNWRmN2ZjZTll
LzEvSTNzclVMOE1HS1V4NXRzVlpudm43WGE3S0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkx8uMowA
+C+kZabfuW7rJ1dNLuP/zHHwACvd+5rQO/+K7+kLnGt6pVktIcL+E+41uKevqnzr
t3XZC3RBYik5xci4cuB28sSycLQYk3lFohezOKRcOGmyPG0fOrsL/dgXGgOEIiGc
4yjOMrD9lJmC5EAaCnGcwz02z+GKlmeg4kGnG+1phTj94952SSzM05GHG0olVveZ
Ixdw5APvBQAe4F8+fCe6ssT8Y9/AhtszhfN5O3dtjDFdfBky/yu/D6ctOvxByWVh
wuDxRzDvimzjxdrxPnxLOvqfDzxQD4uog3vi/viOAHyWOFnOlu4beN9A5z3mOnIC
PYKEDPBpHLTH9A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:15 2025 by rpki-client