Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
File: 3KLzDk5paSsbT-zrrpH9VgS97JM.mft (raw, json)
Hash identifier: SKwR5SOoCvM1RrGgcCY5RIYSi45G3wZ7S5gWC6E6W0c=
Subject key identifier: D7:01:C6:FB:C3:0F:39:FC:DF:F1:47:2A:7A:A6:D8:C0:A8:A0:75:0F
Authority key identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
Certificate issuer: /CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Certificate serial: 019659156070C114258E19630DD01C605EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
Manifest number: 04B9
Signing time: Mon 21 Apr 2025 16:01:35 +0000
Manifest this update: Mon 21 Apr 2025 16:01:35 +0000
Manifest next update: Tue 22 Apr 2025 16:01:35 +0000
Files and hashes: 1: 3KLzDk5paSsbT-zrrpH9VgS97JM.crl (hash: mqB9vpZseewgZ1GjUuBS2gneusljR1EzNuDu9oU65M8=)
2: AJoKV4qloK-gv346yQRe9jE_1Lc.roa (hash: cy9XY0oo3u/4Yi8UZQJSoFS5/DHP0ILoCjdTHcKoQDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:60:70:c1:14:25:8e:19:63:0d:d0:1c:60:5e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Validity
Not Before: Apr 21 16:01:35 2025 GMT
Not After : Apr 22 16:01:35 2025 GMT
Subject: CN=d701c6fbc30f39fcdff1472a7aa6d8c0a8a0750f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:23:7c:61:9f:ed:7c:11:d3:e1:e7:3d:96:
a0:05:0c:61:1e:57:da:ed:3f:51:24:10:6c:a0:a6:
71:8a:eb:6a:81:d1:e6:dd:22:a4:ef:32:7f:6e:c8:
1a:17:eb:e0:33:e1:65:29:4f:e2:89:0a:b0:32:fb:
0a:40:16:dc:1d:54:9c:64:fb:65:50:a4:ae:77:13:
af:f7:f8:79:09:93:53:ea:31:79:f2:d6:49:c3:66:
6a:56:48:1b:db:d8:d5:2e:33:64:6c:9c:74:08:13:
28:fc:e6:6e:a1:52:06:14:96:63:9c:c9:60:74:d6:
94:13:07:08:44:fa:fd:de:3c:70:e0:4a:42:42:12:
5b:b7:74:12:99:0d:92:16:98:ff:19:e8:35:7a:52:
2f:8b:9f:66:f0:64:58:3a:18:d3:11:c0:2c:27:85:
54:90:f0:dc:5d:0e:e9:86:5f:ad:c4:6f:60:f9:e2:
40:8e:2d:11:d3:c8:87:ab:d3:70:10:56:80:9f:76:
9e:ad:a5:03:17:32:da:27:7d:01:f4:02:7f:29:fd:
ee:0e:ab:b8:45:8d:57:05:7b:ea:bd:ca:8b:35:52:
1e:19:47:f9:4b:aa:91:84:dd:b4:10:bf:f9:b1:c7:
ac:b5:a8:e7:b9:16:70:5e:a0:c1:d7:10:07:7e:25:
40:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:01:C6:FB:C3:0F:39:FC:DF:F1:47:2A:7A:A6:D8:C0:A8:A0:75:0F
X509v3 Authority Key Identifier:
keyid:DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b0:66:1f:f4:be:b5:2e:f9:cd:30:da:c1:0c:8a:ec:00:b2:
43:fc:a9:57:65:65:ae:e5:9f:be:e9:10:a9:77:f0:c3:8e:d0:
9f:8b:c7:ad:c3:52:7d:ce:a8:24:cb:4d:4b:b5:f9:10:d6:5a:
d3:6a:af:03:2f:a9:35:fa:f6:38:f7:2d:08:50:7c:09:b1:74:
57:e9:db:11:03:33:6b:b9:78:3c:fe:c5:e5:8e:db:a5:d9:d7:
82:4c:05:48:fe:37:4e:a5:f0:1d:c4:88:46:1d:69:7d:a9:c5:
8f:c5:09:c1:6c:dc:b1:d2:f1:e8:97:6e:22:c5:52:5f:d0:f0:
ac:31:fe:6e:76:a7:6a:de:22:e0:78:00:3c:b4:22:2c:64:82:
7f:11:cb:99:50:16:8c:4f:32:f9:41:d4:35:6c:5a:3b:b7:9c:
03:18:d9:6e:d6:b6:37:5a:fc:9b:75:4f:a4:94:d2:d1:65:2d:
97:20:07:14:70:c4:33:cd:85:33:9b:3c:60:d3:c2:61:14:6e:
04:2f:b3:21:8d:5a:72:c6:c4:b9:df:68:01:88:98:dd:63:17:
bb:e7:cb:7f:5e:69:1e:f0:b4:9c:9a:26:42:83:80:69:45:98:
56:d8:6c:71:8e:80:c7:ab:f6:8b:bd:50:93:d4:61:b9:a1:f9:
14:41:cd:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFWBwwRQljhljDdAcYF7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTJmMzBlNGU2OTY5MmIxYjRmZWNlYmFlOTFmZDU2MDRi
ZGVjOTMwHhcNMjUwNDIxMTYwMTM1WhcNMjUwNDIyMTYwMTM1WjAzMTEwLwYDVQQD
EyhkNzAxYzZmYmMzMGYzOWZjZGZmMTQ3MmE3YWE2ZDhjMGE4YTA3NTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz0jfGGf7XwR0+HnPZagBQxhHlfa
7T9RJBBsoKZxiutqgdHm3SKk7zJ/bsgaF+vgM+FlKU/iiQqwMvsKQBbcHVScZPtl
UKSudxOv9/h5CZNT6jF58tZJw2ZqVkgb29jVLjNkbJx0CBMo/OZuoVIGFJZjnMlg
dNaUEwcIRPr93jxw4EpCQhJbt3QSmQ2SFpj/Geg1elIvi59m8GRYOhjTEcAsJ4VU
kPDcXQ7phl+txG9g+eJAji0R08iHq9NwEFaAn3aeraUDFzLaJ30B9AJ/Kf3uDqu4
RY1XBXvqvcqLNVIeGUf5S6qRhN20EL/5scestajnuRZwXqDB1xAHfiVAbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcBxvvDDzn83/FHKnqm2MCooHUPMB8GA1UdIwQY
MBaAFNyi8w5OaWkrG0/s666R/VYEveyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tMekRrNXBhU3NiVC16cnJwSDlWZ1M5N0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wMzY1NDktNDVkMC00NTY1LTgyOGYt
ZWIzZTc4NWQ5MDk3LzEvM0tMekRrNXBhU3NiVC16cnJwSDlWZ1M5N0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wMzY1NDktNDVkMC00NTY1LTgyOGYtZWIzZTc4NWQ5MDk3
LzEvM0tMekRrNXBhU3NiVC16cnJwSDlWZ1M5N0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrBmH/S+
tS75zTDawQyK7ACyQ/ypV2VlruWfvukQqXfww47Qn4vHrcNSfc6oJMtNS7X5ENZa
02qvAy+pNfr2OPctCFB8CbF0V+nbEQMza7l4PP7F5Y7bpdnXgkwFSP43TqXwHcSI
Rh1pfanFj8UJwWzcsdLx6JduIsVSX9DwrDH+bnanat4i4HgAPLQiLGSCfxHLmVAW
jE8y+UHUNWxaO7ecAxjZbta2N1r8m3VPpJTS0WUtlyAHFHDEM82FM5s8YNPCYRRu
BC+zIY1acsbEud9oAYiY3WMXu+fLf15pHvC0nJomQoOAaUWYVthscY6Ax6v2i71Q
k9RhuaH5FEHNiA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:17:54 2025 by rpki-client