Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft
File: r3P0pUFxjY8uAl4GGQalvyfOPJE.mft (raw, json)
Hash identifier: rd3M8/8wov/TnphRorZ0ZGmmA233KXaP7TrA6xDGyxk=
Subject key identifier: 59:0E:46:D2:58:7B:48:AA:8D:97:80:5C:CA:06:CE:F8:36:18:98:54
Authority key identifier: AF:73:F4:A5:41:71:8D:8F:2E:02:5E:06:19:06:A5:BF:27:CE:3C:91
Certificate issuer: /CN=af73f4a541718d8f2e025e061906a5bf27ce3c91
Certificate serial: 01965C8373B6A2F0FD221894DEF8BF3CFB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P0pUFxjY8uAl4GGQalvyfOPJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft
Manifest number: 0B
Signing time: Tue 22 Apr 2025 08:00:40 +0000
Manifest this update: Tue 22 Apr 2025 08:00:40 +0000
Manifest next update: Wed 23 Apr 2025 08:00:40 +0000
Files and hashes: 1: r3P0pUFxjY8uAl4GGQalvyfOPJE.crl (hash: 7qOzdQJb5Q7094tTmneagLCYWl+eprAPztoMPcCXBY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P0pUFxjY8uAl4GGQalvyfOPJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:83:73:b6:a2:f0:fd:22:18:94:de:f8:bf:3c:fb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73f4a541718d8f2e025e061906a5bf27ce3c91
Validity
Not Before: Apr 22 08:00:40 2025 GMT
Not After : Apr 23 08:00:40 2025 GMT
Subject: CN=590e46d2587b48aa8d97805cca06cef836189854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:76:38:55:77:b9:fb:87:2c:36:94:db:a1:
5c:dc:83:73:8a:c1:eb:9e:e5:ea:50:a4:4b:74:64:
7d:96:62:a1:d3:eb:7f:2a:31:49:24:94:eb:2e:79:
91:11:82:63:a9:7a:ac:93:63:12:b7:c1:20:6b:e0:
74:08:e0:e9:29:18:41:7b:7f:36:a0:44:f1:ec:9b:
5d:ab:e6:7d:78:ca:3b:62:a7:f8:a8:b2:99:90:b2:
e3:ce:5f:49:90:e1:01:cc:a9:da:c5:d9:f2:68:8d:
2b:ee:5c:01:12:bc:13:66:06:b7:cb:66:da:91:8c:
21:98:95:3b:7c:88:8a:05:36:36:06:a8:1f:3e:c7:
7e:f5:0a:3a:c7:f7:76:7a:6d:ac:25:2e:19:65:a1:
a6:30:7f:4c:d9:28:cf:e5:87:93:6a:43:81:fc:31:
08:5d:0d:67:e9:3f:d7:3e:23:c5:71:bf:1f:db:d2:
b2:c2:4d:d3:3a:13:9b:d7:67:6a:60:0c:51:31:15:
c6:ad:73:74:5b:09:71:5e:ec:29:7b:9d:5c:0e:88:
ff:af:a0:56:9e:06:04:8d:f6:e9:96:ff:3d:13:07:
69:ae:73:80:5b:2f:c7:b8:74:cf:2f:84:49:08:da:
ee:63:25:a4:a9:da:74:b0:0f:01:10:4f:3a:1f:e2:
2c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0E:46:D2:58:7B:48:AA:8D:97:80:5C:CA:06:CE:F8:36:18:98:54
X509v3 Authority Key Identifier:
keyid:AF:73:F4:A5:41:71:8D:8F:2E:02:5E:06:19:06:A5:BF:27:CE:3C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P0pUFxjY8uAl4GGQalvyfOPJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:88:5b:e5:63:65:0f:1b:fc:2a:20:08:a7:15:27:8c:c0:61:
cb:98:bc:6a:17:ca:a5:fc:1e:cd:cf:6d:6d:c7:be:34:37:a7:
1a:a2:5c:cb:d9:ae:90:97:56:7b:4a:e6:53:c2:8e:b6:3d:1e:
11:85:cd:db:21:a6:60:1e:c7:9d:07:53:09:b6:c4:79:95:01:
5e:8e:d3:e6:61:c1:32:41:a0:32:d7:58:a0:3b:c5:f7:e2:d5:
22:87:8f:a4:85:31:c6:44:24:57:00:c4:da:8e:b6:19:62:bf:
07:9a:73:66:a6:b1:0c:b0:94:24:e1:e0:d8:15:43:b7:76:cc:
e9:42:9e:5f:de:7d:35:a8:9f:51:af:83:40:fb:a7:1c:a4:b0:
d6:54:4f:27:5b:42:95:a5:44:d9:48:ae:20:f2:39:00:a0:89:
ab:7d:9d:3d:30:5f:ee:a6:b3:3b:28:5e:34:c3:a4:9d:db:81:
16:f0:fa:ad:6e:64:d3:ba:a8:7a:9a:b6:ca:10:11:46:51:4c:
19:39:ca:f9:a4:f7:d2:64:6e:22:e0:e2:ac:e4:75:45:2a:06:
6c:0d:3e:46:e3:e0:c6:ec:7c:25:cd:ca:d4:30:f1:1d:fe:ee:
f8:17:02:ed:af:d5:f0:f7:0e:5b:2b:49:fd:8e:1a:7b:4c:fc:
05:d9:6a:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcg3O2ovD9IhiU3vi/PPs/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzNmNGE1NDE3MThkOGYyZTAyNWUwNjE5MDZhNWJmMjdj
ZTNjOTEwHhcNMjUwNDIyMDgwMDQwWhcNMjUwNDIzMDgwMDQwWjAzMTEwLwYDVQQD
Eyg1OTBlNDZkMjU4N2I0OGFhOGQ5NzgwNWNjYTA2Y2VmODM2MTg5ODU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzql2OFV3ufuHLDaU26Fc3INzisHr
nuXqUKRLdGR9lmKh0+t/KjFJJJTrLnmREYJjqXqsk2MSt8Ega+B0CODpKRhBe382
oETx7Jtdq+Z9eMo7Yqf4qLKZkLLjzl9JkOEBzKnaxdnyaI0r7lwBErwTZga3y2ba
kYwhmJU7fIiKBTY2BqgfPsd+9Qo6x/d2em2sJS4ZZaGmMH9M2SjP5YeTakOB/DEI
XQ1n6T/XPiPFcb8f29Kywk3TOhOb12dqYAxRMRXGrXN0WwlxXuwpe51cDoj/r6BW
ngYEjfbplv89EwdprnOAWy/HuHTPL4RJCNruYyWkqdp0sA8BEE86H+Is8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkORtJYe0iqjZeAXMoGzvg2GJhUMB8GA1UdIwQY
MBaAFK9z9KVBcY2PLgJeBhkGpb8nzjyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNQMHBVRnhqWTh1QWw0R0dRYWx2eWZPUEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83ZDNjNzYtZThiMS00YTk0LWE4MmQt
YTEwY2NhYjk0NWU3LzEvcjNQMHBVRnhqWTh1QWw0R0dRYWx2eWZPUEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83ZDNjNzYtZThiMS00YTk0LWE4MmQtYTEwY2NhYjk0NWU3
LzEvcjNQMHBVRnhqWTh1QWw0R0dRYWx2eWZPUEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYhb5WNl
Dxv8KiAIpxUnjMBhy5i8ahfKpfwezc9tbce+NDenGqJcy9mukJdWe0rmU8KOtj0e
EYXN2yGmYB7HnQdTCbbEeZUBXo7T5mHBMkGgMtdYoDvF9+LVIoePpIUxxkQkVwDE
2o62GWK/B5pzZqaxDLCUJOHg2BVDt3bM6UKeX959NaifUa+DQPunHKSw1lRPJ1tC
laVE2UiuIPI5AKCJq32dPTBf7qazOyheNMOknduBFvD6rW5k07qoepq2yhARRlFM
GTnK+aT30mRuIuDirOR1RSoGbA0+RuPgxux8Jc3K1DDxHf7u+BcC7a/V8PcOWytJ
/Y4ae0z8BdlqNA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:09 2025 by rpki-client