Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
File: s3fRc_TqOk-bJT7lLrnugUaxDj4.mft (raw, json)
Hash identifier: hls7855EpgxzmeUwUdIm+ikorIiTAYVUK+1NcLRGpTs=
Subject key identifier: 1E:E4:99:0F:A3:54:9E:C4:65:03:6E:48:C7:51:6B:EB:E4:50:05:A5
Authority key identifier: B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
Certificate issuer: /CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Certificate serial: 01965349E53A64486E957302F7A93CDEC01E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
Manifest number: 1135
Signing time: Sun 20 Apr 2025 13:01:13 +0000
Manifest this update: Sun 20 Apr 2025 13:01:13 +0000
Manifest next update: Mon 21 Apr 2025 13:01:13 +0000
Files and hashes: 1: s3fRc_TqOk-bJT7lLrnugUaxDj4.crl (hash: qDvkN+zeME9zTgrYNt0KxMegOeEJlYGkxrKoTSxDIlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:e5:3a:64:48:6e:95:73:02:f7:a9:3c:de:c0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Validity
Not Before: Apr 20 13:01:13 2025 GMT
Not After : Apr 21 13:01:13 2025 GMT
Subject: CN=1ee4990fa3549ec465036e48c7516bebe45005a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:1f:e0:bf:29:3a:32:5a:03:10:b2:5a:2e:
4f:e7:ce:b8:69:20:8c:49:3d:78:3f:d3:8d:f0:4a:
0e:26:cd:7f:2b:1f:a4:70:3b:d7:c5:21:fb:c3:b3:
c5:49:9b:09:2b:6a:17:43:dd:bf:96:e7:0e:5b:36:
70:23:09:cb:77:c6:ba:ef:30:6b:ad:4d:ce:84:cd:
41:23:de:9f:18:20:30:ca:e6:ed:92:d9:71:fe:cd:
87:8c:f0:7d:79:dc:c9:47:8b:30:77:69:95:bc:c1:
ca:8a:bd:23:c2:d9:da:25:4b:07:32:44:6e:c6:36:
c1:50:d4:5a:9f:e5:02:b7:5b:f4:cc:ea:f5:29:c0:
ae:4c:de:6d:6c:01:2f:77:c2:dc:12:56:af:7b:20:
e7:c2:b1:0a:19:1b:34:61:5a:a2:51:af:d6:98:0a:
77:5f:21:8e:1f:e6:62:8f:1e:d3:e7:65:af:b8:a3:
b9:de:ac:84:8f:41:00:f1:9e:98:d5:6e:5f:a9:41:
85:0c:1e:39:00:35:3c:93:1e:a8:d6:bc:db:13:25:
da:e2:38:48:b6:34:ba:07:f7:de:89:32:4c:25:3f:
f3:2b:ee:a8:07:38:36:8a:8e:cc:5e:eb:4d:d8:49:
fe:5b:d4:0e:46:98:97:90:cb:dc:13:94:27:84:ef:
5b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E4:99:0F:A3:54:9E:C4:65:03:6E:48:C7:51:6B:EB:E4:50:05:A5
X509v3 Authority Key Identifier:
keyid:B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3e:29:4e:85:bc:c6:d2:5b:88:dc:11:cf:92:e2:55:33:1a:
d6:96:73:60:39:0f:31:81:e3:6e:24:07:50:45:20:07:2d:fa:
11:fe:f4:03:d4:fb:6f:2b:6c:03:af:20:9c:5f:98:f0:de:22:
7a:9d:af:c1:4d:5c:f7:cf:3b:4c:5b:f0:38:1c:be:55:21:89:
69:9b:d6:68:26:94:be:b7:90:74:5e:d5:a1:03:37:1d:98:65:
47:75:f0:34:fe:1e:ad:42:f6:65:b4:8b:5b:4e:ff:24:9a:ae:
ae:19:65:80:46:0c:03:c2:9e:bd:57:43:26:d9:c7:d2:31:7d:
14:23:b9:38:da:32:f7:ad:b2:69:be:30:f2:63:7f:03:61:2d:
97:ad:67:8f:83:e4:04:63:a2:ed:7a:43:99:ac:ad:1d:f4:8f:
15:dd:46:10:bc:4c:45:6d:22:50:7f:ff:3e:9d:c9:15:f4:95:
7c:13:03:ee:89:24:d1:be:4c:5a:66:f4:93:70:77:94:0b:e9:
36:e1:a5:6d:dc:91:aa:51:84:ea:53:90:de:be:20:f9:ed:d0:
03:bd:a6:a9:15:83:a3:d7:5e:51:3f:d0:e1:b2:b7:5e:7a:2a:
41:0c:9d:c6:c8:20:3c:e8:ca:dc:64:6f:2e:57:54:9e:17:26:
73:df:34:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSeU6ZEhulXMC96k83sAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNzdkMTczZjRlYTNhNGY5YjI1M2VlNTJlYjllZTgxNDZi
MTBlM2UwHhcNMjUwNDIwMTMwMTEzWhcNMjUwNDIxMTMwMTEzWjAzMTEwLwYDVQQD
EygxZWU0OTkwZmEzNTQ5ZWM0NjUwMzZlNDhjNzUxNmJlYmU0NTAwNWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HYf4L8pOjJaAxCyWi5P5864aSCM
ST14P9ON8EoOJs1/Kx+kcDvXxSH7w7PFSZsJK2oXQ92/lucOWzZwIwnLd8a67zBr
rU3OhM1BI96fGCAwyubtktlx/s2HjPB9edzJR4swd2mVvMHKir0jwtnaJUsHMkRu
xjbBUNRan+UCt1v0zOr1KcCuTN5tbAEvd8LcElaveyDnwrEKGRs0YVqiUa/WmAp3
XyGOH+Zijx7T52WvuKO53qyEj0EA8Z6Y1W5fqUGFDB45ADU8kx6o1rzbEyXa4jhI
tjS6B/feiTJMJT/zK+6oBzg2io7MXutN2En+W9QORpiXkMvcE5QnhO9b3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7kmQ+jVJ7EZQNuSMdRa+vkUAWlMB8GA1UdIwQY
MBaAFLN30XP06jpPmyU+5S657oFGsQ4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczNmUmNfVHFPay1iSlQ3bExybnVnVWF4RGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wZTIxNDYtOTc4YS00MzlmLTk1NzAt
Nzk2MDk4NWQzNWEzLzEvczNmUmNfVHFPay1iSlQ3bExybnVnVWF4RGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8wZTIxNDYtOTc4YS00MzlmLTk1NzAtNzk2MDk4NWQzNWEz
LzEvczNmUmNfVHFPay1iSlQ3bExybnVnVWF4RGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPj4pToW8
xtJbiNwRz5LiVTMa1pZzYDkPMYHjbiQHUEUgBy36Ef70A9T7bytsA68gnF+Y8N4i
ep2vwU1c9887TFvwOBy+VSGJaZvWaCaUvreQdF7VoQM3HZhlR3XwNP4erUL2ZbSL
W07/JJqurhllgEYMA8KevVdDJtnH0jF9FCO5ONoy962yab4w8mN/A2Etl61nj4Pk
BGOi7XpDmaytHfSPFd1GELxMRW0iUH//Pp3JFfSVfBMD7okk0b5MWmb0k3B3lAvp
NuGlbdyRqlGE6lOQ3r4g+e3QA72mqRWDo9deUT/Q4bK3XnoqQQydxsggPOjK3GRv
LldUnhcmc980qA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:28:06 2025 by rpki-client