Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
File: 3BsrDhzng-t6Ljk__dEoxqnAIjk.mft (raw, json)
Hash identifier: PQXSn7Hjcs8VdmVqA5PMQvp7tJ9zdF+OhgdtWMhlQyE=
Subject key identifier: 47:2B:FC:23:5B:AB:CA:41:51:B5:D4:CB:F3:BE:4B:AE:11:5B:3A:39
Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Certificate serial: 0196545C0E509B9602E630BAAB9AA32C8FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
Manifest number: 0256
Signing time: Sun 20 Apr 2025 18:00:41 +0000
Manifest this update: Sun 20 Apr 2025 18:00:41 +0000
Manifest next update: Mon 21 Apr 2025 18:00:41 +0000
Files and hashes: 1: 3BsrDhzng-t6Ljk__dEoxqnAIjk.crl (hash: 0a6n+zX00kMe1y/Z3XazL23tvpi60NXwusnmvuYGE+A=)
2: b4tFKCMFhyngaw1LlIGrAjikYiE.roa (hash: zlYQxGhdtm2zm501rwjVL8YUyfYWJBRUvSyMolHaDtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:0e:50:9b:96:02:e6:30:ba:ab:9a:a3:2c:8f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Validity
Not Before: Apr 20 18:00:41 2025 GMT
Not After : Apr 21 18:00:41 2025 GMT
Subject: CN=472bfc235babca4151b5d4cbf3be4bae115b3a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:39:5b:55:63:6f:4c:5a:31:ab:8f:b4:6b:
0f:bb:fd:d4:d1:55:b5:78:f1:e7:07:6c:a2:92:6e:
a0:e1:82:06:62:46:27:00:a5:62:e3:dc:c1:72:ce:
f6:31:19:c9:f8:fc:99:4c:13:95:34:2d:a2:14:e7:
08:15:ac:4e:99:dd:6a:65:c8:e2:45:fa:04:f6:62:
e3:a3:9d:e6:2e:9b:88:fc:d0:d2:77:0e:0e:2e:43:
c1:fa:bc:4a:c0:35:40:e1:1d:13:0a:76:c7:47:17:
73:d8:6c:d3:99:a1:f9:38:89:82:a0:e6:b4:0d:34:
39:0b:41:c1:b2:37:ae:a0:77:da:e4:d3:4c:1b:de:
22:95:f5:db:4e:c5:82:70:c2:e5:43:d6:d5:b5:ff:
16:8e:d9:ea:25:64:d6:4b:19:99:e2:3b:59:be:fc:
46:2e:30:43:92:c9:17:64:bb:87:06:1f:18:99:17:
0d:b6:36:f9:16:f4:76:d1:8c:a7:07:bd:4a:dd:e5:
9b:60:54:80:40:11:a0:c6:a5:ab:ae:62:73:ff:ec:
5f:5f:6d:0f:63:f5:95:5c:5f:0d:c9:96:d6:8e:21:
57:12:f2:0a:c7:12:5f:77:bb:e1:c9:cc:7b:6f:58:
26:9c:1d:66:26:c3:7e:b9:67:ef:b0:66:ab:cf:fd:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2B:FC:23:5B:AB:CA:41:51:B5:D4:CB:F3:BE:4B:AE:11:5B:3A:39
X509v3 Authority Key Identifier:
keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:98:a7:bf:e7:17:3a:fb:11:cf:bd:fb:02:f4:54:84:08:a7:
f9:c0:66:e8:1d:51:7d:06:2c:52:7f:07:a0:07:fb:e0:f2:89:
d8:fd:02:12:6a:5b:1a:3c:5c:65:b6:e8:42:77:fa:0f:57:88:
42:50:e3:fc:e2:36:25:01:e6:1e:81:87:61:6e:a6:f0:4d:7f:
83:51:58:bc:87:c2:a4:91:d9:63:d5:ec:48:e4:fb:5c:56:42:
0c:c9:f6:1b:14:1b:4b:4f:1c:0b:ba:e7:eb:5b:59:e9:e0:3e:
b1:e1:84:99:32:d7:b9:7b:79:5d:25:d7:28:45:31:88:c4:f1:
b0:95:00:aa:45:34:df:1f:97:a3:28:04:2f:54:d6:85:db:20:
8c:80:ee:1f:c6:04:a7:0c:37:63:1b:87:b7:4a:00:33:ca:06:
cf:88:ba:7d:c5:fc:e0:06:95:37:26:e3:16:1b:bc:3e:67:11:
10:6a:1a:e4:95:39:75:32:df:71:4b:c2:d2:8c:c2:05:8d:70:
4b:61:9c:5d:0b:2b:ac:31:21:c6:1d:9b:f1:9e:2b:5f:e9:e1:
67:6d:80:b9:e7:f6:d3:74:b9:78:8e:21:aa:5d:d1:70:01:76:
63:bb:49:cc:18:ea:12:94:bc:16:ff:ea:49:a2:53:38:a4:78:
17:2b:e1:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUXA5Qm5YC5jC6q5qjLI+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMWIyYjBlMWNlNzgzZWI3YTJlMzkzZmZkZDEyOGM2YTlj
MDIyMzkwHhcNMjUwNDIwMTgwMDQxWhcNMjUwNDIxMTgwMDQxWjAzMTEwLwYDVQQD
Eyg0NzJiZmMyMzViYWJjYTQxNTFiNWQ0Y2JmM2JlNGJhZTExNWIzYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDs5W1Vjb0xaMauPtGsPu/3U0VW1
ePHnB2yikm6g4YIGYkYnAKVi49zBcs72MRnJ+PyZTBOVNC2iFOcIFaxOmd1qZcji
RfoE9mLjo53mLpuI/NDSdw4OLkPB+rxKwDVA4R0TCnbHRxdz2GzTmaH5OImCoOa0
DTQ5C0HBsjeuoHfa5NNMG94ilfXbTsWCcMLlQ9bVtf8WjtnqJWTWSxmZ4jtZvvxG
LjBDkskXZLuHBh8YmRcNtjb5FvR20YynB71K3eWbYFSAQBGgxqWrrmJz/+xfX20P
Y/WVXF8NyZbWjiFXEvIKxxJfd7vhycx7b1gmnB1mJsN+uWfvsGarz/15iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcr/CNbq8pBUbXUy/O+S64RWzo5MB8GA1UdIwQY
MBaAFNwbKw4c54Prei45P/3RKMapwCI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wMjFmODMtYjM3Yy00Zjg0LTljOWUt
YWRmZTdlNzNkZmVlLzEvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8wMjFmODMtYjM3Yy00Zjg0LTljOWUtYWRmZTdlNzNkZmVl
LzEvM0JzckRoem5nLXQ2TGprX19kRW94cW5BSWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZinv+cX
OvsRz737AvRUhAin+cBm6B1RfQYsUn8HoAf74PKJ2P0CEmpbGjxcZbboQnf6D1eI
QlDj/OI2JQHmHoGHYW6m8E1/g1FYvIfCpJHZY9XsSOT7XFZCDMn2GxQbS08cC7rn
61tZ6eA+seGEmTLXuXt5XSXXKEUxiMTxsJUAqkU03x+XoygEL1TWhdsgjIDuH8YE
pww3YxuHt0oAM8oGz4i6fcX84AaVNybjFhu8PmcREGoa5JU5dTLfcUvC0ozCBY1w
S2GcXQsrrDEhxh2b8Z4rX+nhZ22Auef203S5eI4hql3RcAF2Y7tJzBjqEpS8Fv/q
SaJTOKR4FyvhBA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:11:28 2025 by rpki-client