Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: d/GESiPVlwBlMXiz4PkCUFex+KNc72trnl4ApaU16UY=
Subject key identifier: 13:E0:C9:0B:15:DB:7D:FC:43:D8:1F:FA:3B:7C:AC:DE:7E:B3:9D:46
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 019652DB389DECF54CB5F0973178710CA4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 11:00:20 +0000
Manifest this update: Sun 20 Apr 2025 11:00:20 +0000
Manifest next update: Mon 21 Apr 2025 11:00:20 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: cjkl9fZQs6VX+RWYJvSIJTkl4n9cjil5kfic/Qg8xiU=)
2: TWCQBg2-t-jrjyzWp02-IpHykDE.roa (hash: OzxPmG/iv0ZxRaIlS2kwO8RCX9n3cTZki/wmozkxxLc=)
3: w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa (hash: 5XUytb4Y6hE0gSnX9zthe9SyxMsKZ/nIOoxPG8EDHcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:38:9d:ec:f5:4c:b5:f0:97:31:78:71:0c:a4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Apr 20 11:00:20 2025 GMT
Not After : Apr 21 11:00:20 2025 GMT
Subject: CN=13e0c90b15db7dfc43d81ffa3b7cacde7eb39d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d8:8d:62:05:7e:2a:4b:24:b1:31:ea:ca:aa:
45:38:6e:ee:9c:d1:97:62:15:89:5d:b4:99:da:88:
26:80:4e:f8:23:38:82:af:2e:bc:16:8c:2c:75:b0:
80:f8:9d:21:e5:7a:8c:b7:33:60:ea:40:1d:33:8a:
d8:4a:b0:2c:fc:59:cd:3c:85:94:fc:cf:b7:fc:12:
3c:c7:3a:be:97:c5:24:35:89:80:5f:cf:5e:a7:63:
df:e9:a6:ae:16:6c:bd:22:0d:ce:73:9e:7f:26:c9:
4a:ef:c7:35:31:85:99:54:07:18:fc:70:0a:a0:fc:
51:39:ae:78:0e:6c:26:b4:d4:0b:f5:fc:2c:13:ff:
8c:0c:ed:99:56:62:1e:30:36:5d:19:ba:80:50:79:
1e:fa:c4:80:56:12:4e:df:17:ba:22:cf:d0:39:b4:
10:b8:bd:ac:5f:ed:70:ea:76:d2:dc:68:fa:82:7f:
4c:ab:cd:b7:af:a1:7d:01:b4:83:37:31:a3:8c:9c:
34:9f:29:98:b2:67:e5:d0:5e:65:21:d5:ff:74:65:
8c:d3:fa:2e:c3:48:fc:97:28:62:3c:bf:47:52:1c:
32:f7:54:36:a6:61:92:e7:ce:db:81:06:f0:04:2f:
bc:6f:63:c6:62:b6:e1:53:45:65:24:9c:c5:80:fa:
fd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E0:C9:0B:15:DB:7D:FC:43:D8:1F:FA:3B:7C:AC:DE:7E:B3:9D:46
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:97:c7:f4:9e:46:15:bf:c2:10:38:ae:ca:e2:61:12:2f:13:
9d:74:67:d6:2e:dc:54:ef:f7:ed:e0:79:43:8b:97:cd:7a:13:
11:bd:4c:a8:18:12:de:4e:8a:b0:12:c6:2a:90:95:88:60:45:
88:13:42:4e:9b:8e:ef:64:3a:62:cb:e4:fd:34:6d:41:e8:40:
5c:09:7d:2b:a2:13:0a:71:24:5e:c1:3c:30:75:ce:80:c1:88:
ee:77:49:84:13:f6:71:ad:5b:1e:bc:f2:bf:2a:7c:04:76:77:
c6:27:21:0f:0a:7c:9c:30:02:cc:4c:e3:f7:9d:9b:9d:3d:a3:
a7:bc:be:d9:b9:af:85:b7:eb:ad:27:77:36:ed:0d:13:e5:ec:
05:10:8a:1e:f2:22:2c:9d:3d:d5:51:d9:85:1f:d9:c0:10:08:
a4:1f:93:c4:5a:b9:25:46:8d:a9:d7:ca:81:5d:6c:bf:16:a5:
71:78:21:81:23:87:08:cb:bd:40:90:ea:cd:cd:4e:02:78:bb:
38:31:ad:7f:36:c7:3c:0a:e1:38:58:e3:1b:d3:b6:a4:9b:06:
f3:5e:25:5c:1c:a9:ca:80:19:21:79:0d:06:95:b0:73:f7:7c:
2e:70:58:e6:e8:c1:56:b7:72:1a:9a:2b:f8:ca:29:29:dc:36:
ac:a7:04:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZS2zid7PVMtfCXMXhxDKS6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWU0YjA0NzFhNjE4NzJjNDA0MTQyZTFmOTBmNTA3NGYw
ZDZmMTUwHhcNMjUwNDIwMTEwMDIwWhcNMjUwNDIxMTEwMDIwWjAzMTEwLwYDVQQD
EygxM2UwYzkwYjE1ZGI3ZGZjNDNkODFmZmEzYjdjYWNkZTdlYjM5ZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+diNYgV+KksksTHqyqpFOG7unNGX
YhWJXbSZ2ogmgE74IziCry68FowsdbCA+J0h5XqMtzNg6kAdM4rYSrAs/FnNPIWU
/M+3/BI8xzq+l8UkNYmAX89ep2Pf6aauFmy9Ig3Oc55/JslK78c1MYWZVAcY/HAK
oPxROa54DmwmtNQL9fwsE/+MDO2ZVmIeMDZdGbqAUHke+sSAVhJO3xe6Is/QObQQ
uL2sX+1w6nbS3Gj6gn9Mq823r6F9AbSDNzGjjJw0nymYsmfl0F5lIdX/dGWM0/ou
w0j8lyhiPL9HUhwy91Q2pmGS587bgQbwBC+8b2PGYrbhU0VlJJzFgPr96QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPgyQsV2338Q9gf+jt8rN5+s51GMB8GA1UdIwQY
MBaAFNyuSwRxphhyxAQULh+Q9QdPDW8VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi82N2Y5YTctYTZlOC00MjZlLWJhYzQt
NGI2OGIxNWQzMDFhLzEvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi82N2Y5YTctYTZlOC00MjZlLWJhYzQtNGI2OGIxNWQzMDFh
LzEvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZfH9J5G
Fb/CEDiuyuJhEi8TnXRn1i7cVO/37eB5Q4uXzXoTEb1MqBgS3k6KsBLGKpCViGBF
iBNCTpuO72Q6Ysvk/TRtQehAXAl9K6ITCnEkXsE8MHXOgMGI7ndJhBP2ca1bHrzy
vyp8BHZ3xichDwp8nDACzEzj952bnT2jp7y+2bmvhbfrrSd3Nu0NE+XsBRCKHvIi
LJ091VHZhR/ZwBAIpB+TxFq5JUaNqdfKgV1svxalcXghgSOHCMu9QJDqzc1OAni7
ODGtfzbHPArhOFjjG9O2pJsG814lXBypyoAZIXkNBpWwc/d8LnBY5ujBVrdyGpor
+MopKdw2rKcE7w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:03 2025 by rpki-client