Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier: AdhT8iwrAHyXLxI3qXZNAGnm82CZfpHwhPglI3Zuquc=
Subject key identifier: 32:E0:84:A7:68:E1:A6:25:02:C6:60:65:40:F5:6D:87:DA:B9:A6:BD
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 01964A4671FE84C7E8CA6A327652509BF002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number: 10AC
Signing time: Fri 18 Apr 2025 19:00:52 +0000
Manifest this update: Fri 18 Apr 2025 19:00:52 +0000
Manifest next update: Sat 19 Apr 2025 19:00:52 +0000
Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: iLykAWpmE3ijY1hcpZXE9FPYMseN8dwrsd9xdjytfSU=)
2: jrzKo-lt5J6MsHDsEMxREvgxfZ8.roa (hash: NadiGgxjhYXuzdbS81cV9tBbpe6k6vvKuOl8KjAS3hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:71:fe:84:c7:e8:ca:6a:32:76:52:50:9b:f0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: Apr 18 19:00:52 2025 GMT
Not After : Apr 19 19:00:52 2025 GMT
Subject: CN=32e084a768e1a62502c6606540f56d87dab9a6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:96:df:c1:8e:d0:85:c2:96:ce:35:0a:27:
98:b2:f9:ab:26:bf:af:b3:ef:ea:28:5b:cc:53:3e:
61:f9:98:3a:c2:cf:ca:0e:6b:b0:59:3e:69:a4:c1:
17:36:36:76:91:3a:7a:84:7f:23:c9:6f:8b:7c:2d:
cb:34:26:72:21:96:c2:39:43:0a:9a:0d:9f:dc:fe:
67:8f:99:6f:23:2b:2f:42:5e:72:9e:e2:be:54:65:
4a:f6:45:a2:58:46:f2:48:76:81:09:b3:77:b1:15:
8d:73:94:b8:18:80:df:7c:85:e4:4c:6c:c0:27:7e:
34:8d:94:2e:87:26:19:ae:a8:28:ea:e1:73:91:4b:
7e:2a:ac:49:23:8b:51:4d:41:0d:cd:70:89:37:2e:
0f:4a:99:77:d8:cf:10:6d:0d:4a:3b:96:62:95:f2:
c6:7c:f5:b1:62:2a:52:80:70:18:02:8f:99:08:99:
08:c1:b3:76:fc:b6:2b:17:74:3e:a7:b9:b4:5b:b9:
58:a4:02:90:f5:77:fc:82:c9:22:28:c1:3e:5e:ac:
31:74:7a:b7:61:51:93:91:84:67:09:a2:41:c2:9a:
5b:fa:59:9d:c4:30:1e:17:58:5d:da:80:4b:4c:69:
a1:83:e4:cd:b7:b1:f8:5a:11:a4:82:c5:2b:e3:65:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E0:84:A7:68:E1:A6:25:02:C6:60:65:40:F5:6D:87:DA:B9:A6:BD
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a9:5d:01:02:26:52:86:94:7d:82:8b:c4:ec:04:a8:7d:34:
78:86:ab:12:10:d2:89:e7:33:05:2f:c9:48:af:ab:0c:f5:c9:
98:93:30:0f:9e:f3:e1:b2:5d:47:3d:db:88:53:b9:24:f2:87:
81:af:d4:30:fa:40:1f:28:41:fe:62:df:d1:00:c8:92:42:a0:
e8:2f:84:b4:57:2a:3f:ba:a0:f9:a8:93:5d:25:a0:39:86:e2:
42:1f:ed:2c:17:46:c1:20:29:ae:70:55:ad:12:9d:20:85:4f:
a8:24:3e:01:f4:67:f9:cd:52:0a:8c:92:3e:f7:9c:56:57:da:
93:d5:44:cb:ac:63:b0:6d:9b:a4:ed:bd:de:29:a5:3e:a4:f7:
36:13:6f:1d:c0:d8:69:1b:d7:71:d1:6b:46:76:7d:1f:f5:06:
6a:ec:69:41:7a:47:41:cd:cd:da:64:1f:c7:5d:47:b7:ab:da:
2c:2c:cb:91:79:bd:78:e6:6f:f2:70:c7:87:98:c1:1c:ee:95:
b0:da:92:ca:61:64:69:40:a1:38:52:c4:6a:fe:c9:cc:c6:83:
2f:a1:b9:da:bc:f7:8e:d3:78:d6:ac:1c:95:9d:a6:c8:97:bd:
c6:d7:a8:e1:ae:df:02:57:59:4a:af:f0:8d:c0:26:62:1a:04:
7a:43:6d:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKRnH+hMfoymoydlJQm/ACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjN2Q4ZWQ5ODQ0M2RlNmM2ODhkMTc0ZjFmMDA1NWJlNGRl
MTgyYTEwHhcNMjUwNDE4MTkwMDUyWhcNMjUwNDE5MTkwMDUyWjAzMTEwLwYDVQQD
EygzMmUwODRhNzY4ZTFhNjI1MDJjNjYwNjU0MGY1NmQ4N2RhYjlhNmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7WW38GO0IXCls41CieYsvmrJr+v
s+/qKFvMUz5h+Zg6ws/KDmuwWT5ppMEXNjZ2kTp6hH8jyW+LfC3LNCZyIZbCOUMK
mg2f3P5nj5lvIysvQl5ynuK+VGVK9kWiWEbySHaBCbN3sRWNc5S4GIDffIXkTGzA
J340jZQuhyYZrqgo6uFzkUt+KqxJI4tRTUENzXCJNy4PSpl32M8QbQ1KO5ZilfLG
fPWxYipSgHAYAo+ZCJkIwbN2/LYrF3Q+p7m0W7lYpAKQ9Xf8gskiKME+XqwxdHq3
YVGTkYRnCaJBwppb+lmdxDAeF1hd2oBLTGmhg+TNt7H4WhGkgsUr42U/AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLghKdo4aYlAsZgZUD1bYfauaa9MB8GA1UdIwQY
MBaAFNx9jtmEQ95saI0XTx8AVb5N4YKhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYt
YjgwMjA1MjgzMmNmLzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYtYjgwMjA1MjgzMmNm
LzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaldAQIm
UoaUfYKLxOwEqH00eIarEhDSieczBS/JSK+rDPXJmJMwD57z4bJdRz3biFO5JPKH
ga/UMPpAHyhB/mLf0QDIkkKg6C+EtFcqP7qg+aiTXSWgOYbiQh/tLBdGwSAprnBV
rRKdIIVPqCQ+AfRn+c1SCoySPvecVlfak9VEy6xjsG2bpO293imlPqT3NhNvHcDY
aRvXcdFrRnZ9H/UGauxpQXpHQc3N2mQfx11Ht6vaLCzLkXm9eOZv8nDHh5jBHO6V
sNqSymFkaUChOFLEav7JzMaDL6G52rz3jtN41qwclZ2myJe9xteo4a7fAldZSq/w
jcAmYhoEekNtkw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:52:48 2025 by rpki-client