Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
File: 3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json)
Hash identifier: hfLEZvR6Zm3pdpbjfTF1r3Msa76zafuYrkFi5UBFyV4=
Subject key identifier: D1:31:C8:EA:E7:06:4D:F4:98:31:8F:ED:8F:E5:DC:CD:4A:E7:C8:BF
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 019612457C43EDDE7C1DE7C8F75BA6B2937F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
Manifest number: 1439
Signing time: Mon 07 Apr 2025 22:01:05 +0000
Manifest this update: Mon 07 Apr 2025 22:01:05 +0000
Manifest next update: Tue 08 Apr 2025 22:01:05 +0000
Files and hashes: 1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: h95nYJaIvrEUva9k6oM1qSs6oUQ6q+SDK0YtvIu2bs4=)
2: _o5qzwf8rZDND75xcqQc9S6k6ok.roa (hash: h8CRUtj6ko4KAv2CzgQ3rS/pQtlcU73gDhCpzytsImo=)
3: aV0HuR69hYJIPw5HwKLbzgnSUj8.roa (hash: SHFEsOqJwkOCmFGPA5WtYtOFrOaJ+2dQqhpAdP75uZE=)
4: dSNgoevWRyMUfgjNoi_GXJ4H8_k.roa (hash: mvhCiOx4Qlj1FzGtfnYTbx0VdAMMtllc6DDb99JSemU=)
5: faEiNZRiYifb0EqTXJxeRTJJP9c.roa (hash: cBxU65JI5dV7r1mACFfzIFB3UZOT4D1EEbkEettYNBs=)
6: iB-5Gh1pHVkAWY83mt70GWf7F_k.roa (hash: cjAD02BpLiwlKz0QWbmdYPtsy/2NR9/61nPXd4hWOkU=)
7: lICq0eo5P-Axsog5Hx6FXYSQY4k.roa (hash: JlcFYpOXnqLTDv9/pwm19BH50eR0rn9KZzLrCOo3RLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:45:7c:43:ed:de:7c:1d:e7:c8:f7:5b:a6:b2:93:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Apr 7 22:01:05 2025 GMT
Not After : Apr 8 22:01:05 2025 GMT
Subject: CN=d131c8eae7064df498318fed8fe5dccd4ae7c8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:08:3d:82:42:0c:5d:e5:e4:ab:f4:79:87:27:
fd:e0:33:68:08:55:a3:0c:ee:f1:d3:77:15:95:7e:
3b:93:c0:7a:6e:a2:9e:ce:df:db:b7:3a:11:81:2b:
b3:b4:5f:48:54:37:fa:fa:0e:fa:3e:06:51:d6:46:
56:7b:77:be:f5:f9:f9:49:21:f1:d4:08:42:6b:af:
55:3b:32:7f:ac:4a:07:50:d3:1e:82:64:30:86:e3:
5b:53:f4:56:be:79:fd:12:07:6d:c4:3d:fa:e0:2a:
c5:d1:52:1d:65:ba:7d:0f:29:07:c8:45:1a:e6:b1:
c9:a7:0b:1a:64:5d:e5:fa:fb:c5:cd:a6:c9:6c:67:
47:7a:13:84:5b:4a:40:6c:9d:3f:4a:ac:cf:e8:35:
97:dd:40:4d:bf:7e:d7:13:eb:95:5f:da:cc:4e:12:
10:76:19:fa:18:38:88:b3:82:7f:55:da:0f:b0:62:
1e:9b:7f:4d:91:8f:be:17:b8:a5:e4:62:31:fa:86:
33:6d:f3:1f:fd:b1:bb:08:66:f6:d6:02:0c:cc:7f:
9e:bb:a7:5c:d5:a4:c6:71:98:56:50:b1:1b:38:a1:
72:79:19:ed:bf:a7:d4:0d:53:61:c6:a2:83:33:d2:
c4:54:1b:0a:0c:4a:e0:f6:70:38:fa:67:95:91:d8:
a7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:C8:EA:E7:06:4D:F4:98:31:8F:ED:8F:E5:DC:CD:4A:E7:C8:BF
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:15:78:1b:50:ef:90:1a:c8:ed:86:9c:32:b0:e6:2c:42:cf:
a9:68:08:ce:47:4b:de:33:69:39:0c:68:c9:85:63:4f:4d:28:
cb:23:d6:77:27:e3:7d:0e:68:b7:f2:e9:38:c5:7e:10:63:73:
5f:75:9b:5e:15:2a:24:50:ff:2c:e9:73:f8:4a:b4:cf:6c:7e:
e3:21:bb:0f:c9:bb:44:79:25:c1:9d:44:a1:44:fb:35:b9:e5:
72:57:77:47:a7:4c:fd:fb:a0:aa:f4:9d:63:38:d9:92:be:d9:
5c:7c:61:40:99:51:6d:b8:de:6b:44:7a:3b:dd:e0:34:28:6c:
35:8a:2a:91:ce:5e:2b:43:07:d3:41:e0:e2:9b:90:f6:cd:94:
ae:d3:71:0b:83:a3:ab:ff:ff:44:ee:82:3f:18:09:4e:1b:93:
d1:1b:f8:23:0a:75:21:5a:5d:be:da:a1:64:82:0c:72:37:a9:
83:00:2d:af:02:8b:c2:4b:0e:e4:a0:65:6d:5f:15:3d:90:ae:
a9:f1:51:87:6c:e6:b6:cd:ff:34:7c:96:6e:4e:54:16:d2:10:
53:cf:d1:41:7f:87:e0:5b:43:5b:23:b7:7d:fa:79:ea:6c:c1:
63:80:f3:e6:de:0c:7d:b7:0a:4f:f2:e8:a8:a8:81:f3:cc:7d:
b0:46:6b:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYSRXxD7d58HefI91umspN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjUwNDA3MjIwMTA1WhcNMjUwNDA4MjIwMTA1WjAzMTEwLwYDVQQD
EyhkMTMxYzhlYWU3MDY0ZGY0OTgzMThmZWQ4ZmU1ZGNjZDRhZTdjOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wg9gkIMXeXkq/R5hyf94DNoCFWj
DO7x03cVlX47k8B6bqKezt/btzoRgSuztF9IVDf6+g76PgZR1kZWe3e+9fn5SSHx
1AhCa69VOzJ/rEoHUNMegmQwhuNbU/RWvnn9EgdtxD364CrF0VIdZbp9DykHyEUa
5rHJpwsaZF3l+vvFzabJbGdHehOEW0pAbJ0/SqzP6DWX3UBNv37XE+uVX9rMThIQ
dhn6GDiIs4J/VdoPsGIem39NkY++F7il5GIx+oYzbfMf/bG7CGb21gIMzH+eu6dc
1aTGcZhWULEbOKFyeRntv6fUDVNhxqKDM9LEVBsKDErg9nA4+meVkdinfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNExyOrnBk30mDGP7Y/l3M1K58i/MB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxV4G1Dv
kBrI7YacMrDmLELPqWgIzkdL3jNpOQxoyYVjT00oyyPWdyfjfQ5ot/LpOMV+EGNz
X3WbXhUqJFD/LOlz+Eq0z2x+4yG7D8m7RHklwZ1EoUT7Nbnlcld3R6dM/fugqvSd
YzjZkr7ZXHxhQJlRbbjea0R6O93gNChsNYoqkc5eK0MH00Hg4puQ9s2UrtNxC4Oj
q///RO6CPxgJThuT0Rv4Iwp1IVpdvtqhZIIMcjepgwAtrwKLwksO5KBlbV8VPZCu
qfFRh2zmts3/NHyWbk5UFtIQU8/RQX+H4FtDWyO3ffp56mzBY4Dz5t4MfbcKT/Lo
qKiB88x9sEZrSA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:34:08 2025 by rpki-client