Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
File: 3f2U67jLmKHb31C9zWncwpFEiJ4.mft (raw, json)
Hash identifier: mcotufSqfn/PKNxsBWko5xU5C2RzLkaANTPHePHuI68=
Subject key identifier: 6C:B0:96:12:A1:36:AB:3D:13:B3:4F:0A:4F:44:01:68:9F:1C:88:5B
Authority key identifier: DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
Certificate issuer: /CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Certificate serial: 01963F1D7B1D3A3B4524333832B2F7D3384A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
Manifest number: 0BD9
Signing time: Wed 16 Apr 2025 15:00:18 +0000
Manifest this update: Wed 16 Apr 2025 15:00:18 +0000
Manifest next update: Thu 17 Apr 2025 15:00:18 +0000
Files and hashes: 1: 3f2U67jLmKHb31C9zWncwpFEiJ4.crl (hash: Zt6rEgQpuUeb0ZlwTxeegVgBbt54xhEmUT8RtEnmwlw=)
2: yOI7tiSRDXgdskD_bs5AhIY61n8.roa (hash: jCxGB8CWsOl2EvkB0hTjOgeBy34atnE5kB7r6h+CCmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:1d:7b:1d:3a:3b:45:24:33:38:32:b2:f7:d3:38:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfd94ebb8cb98a1dbdf50bdcd69dcc29144889e
Validity
Not Before: Apr 16 15:00:18 2025 GMT
Not After : Apr 17 15:00:18 2025 GMT
Subject: CN=6cb09612a136ab3d13b34f0a4f4401689f1c885b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:8a:5a:8d:b3:43:06:4d:bc:bd:33:34:40:
e3:31:e5:a0:1b:1f:8d:f1:af:86:0e:0e:d8:c5:d7:
ce:42:87:48:7f:9b:17:f7:2f:61:18:a9:f4:86:74:
8a:ce:4a:4b:80:5f:59:12:79:48:0a:af:c1:7c:3c:
bb:39:bd:43:fc:4f:8f:39:85:4a:cd:0e:eb:ff:c9:
65:6f:2e:8b:18:40:58:9b:09:da:91:a3:f1:05:b3:
78:df:a9:b4:e7:8c:9c:95:92:db:f3:e3:9d:eb:4b:
8c:d6:6f:53:a8:11:dd:73:c0:50:55:24:0f:19:d6:
f4:af:b2:f5:5e:a7:eb:b5:fa:05:99:ab:38:88:8c:
ba:75:4b:e3:7f:f4:d0:14:16:22:16:39:b6:26:e8:
81:5c:18:93:e5:37:e7:45:37:29:d6:20:98:c4:1f:
84:f5:74:ae:ba:bb:e7:ba:d5:f7:9d:86:c3:48:32:
a5:ab:12:21:1a:c6:d8:15:f5:b5:cd:e3:5c:c1:20:
63:e8:0b:31:fe:90:03:50:db:9e:a5:d5:41:37:12:
13:af:92:49:d2:9e:0e:53:2d:04:ae:92:c6:44:82:
70:02:7c:83:e0:b4:9c:a8:d7:65:90:ec:63:8a:a7:
ba:11:e3:da:0b:6a:88:24:ca:b4:c5:0b:b6:f0:cc:
10:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B0:96:12:A1:36:AB:3D:13:B3:4F:0A:4F:44:01:68:9F:1C:88:5B
X509v3 Authority Key Identifier:
keyid:DD:FD:94:EB:B8:CB:98:A1:DB:DF:50:BD:CD:69:DC:C2:91:44:88:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f2U67jLmKHb31C9zWncwpFEiJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a6f506-6948-4cef-8548-c93c1ee898be/1/3f2U67jLmKHb31C9zWncwpFEiJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:7b:07:fb:2c:7c:49:76:b1:32:b8:f8:7f:36:2d:24:d5:3e:
f3:4b:c6:79:45:eb:af:c7:3d:70:cf:e7:ae:ca:6f:05:7e:ca:
fa:d1:97:e1:78:87:6f:04:b2:1c:a6:fe:80:df:06:bb:d3:62:
64:37:fc:d5:18:7b:12:1c:85:24:04:4d:ac:d2:e6:c7:1c:e4:
70:44:81:1b:2c:8f:ca:14:78:b3:8c:bd:42:46:dd:25:ea:d4:
88:d0:38:3a:24:7e:77:dc:2f:f4:55:68:d8:ac:3b:9e:34:e0:
8e:07:ab:33:f7:4f:37:d9:73:80:b7:d3:49:17:2e:df:e3:92:
aa:00:26:0e:15:7a:99:e1:b6:da:58:5c:3b:9c:8e:40:db:29:
ea:32:ae:e0:8b:93:ab:75:5e:fd:ca:bd:57:b3:16:66:98:ad:
31:1a:83:99:fe:7d:48:7a:2e:d7:a6:bf:0a:e0:b9:7b:51:6e:
6f:50:00:5c:60:3d:42:eb:be:23:8e:44:b9:72:bc:d3:a1:34:
37:2f:33:34:b5:31:ba:47:a2:58:a0:a2:48:66:ce:4f:83:c9:
01:de:7a:76:1b:43:9f:0d:fe:e2:88:17:9c:8f:39:88:ba:64:
82:93:06:42:fd:e5:13:0c:04:93:9a:fd:92:ce:ea:7f:3f:73:
fd:bd:53:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/HXsdOjtFJDM4MrL30zhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZmQ5NGViYjhjYjk4YTFkYmRmNTBiZGNkNjlkY2MyOTE0
NDg4OWUwHhcNMjUwNDE2MTUwMDE4WhcNMjUwNDE3MTUwMDE4WjAzMTEwLwYDVQQD
Eyg2Y2IwOTYxMmExMzZhYjNkMTNiMzRmMGE0ZjQ0MDE2ODlmMWM4ODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzByKWo2zQwZNvL0zNEDjMeWgGx+N
8a+GDg7YxdfOQodIf5sX9y9hGKn0hnSKzkpLgF9ZEnlICq/BfDy7Ob1D/E+POYVK
zQ7r/8llby6LGEBYmwnakaPxBbN436m054yclZLb8+Od60uM1m9TqBHdc8BQVSQP
Gdb0r7L1XqfrtfoFmas4iIy6dUvjf/TQFBYiFjm2JuiBXBiT5TfnRTcp1iCYxB+E
9XSuurvnutX3nYbDSDKlqxIhGsbYFfW1zeNcwSBj6Asx/pADUNuepdVBNxITr5JJ
0p4OUy0ErpLGRIJwAnyD4LScqNdlkOxjiqe6EePaC2qIJMq0xQu28MwQbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGywlhKhNqs9E7NPCk9EAWifHIhbMB8GA1UdIwQY
MBaAFN39lOu4y5ih299Qvc1p3MKRRIieMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2YyVTY3akxtS0hiMzFDOXpXbmN3cEZFaUo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hNmY1MDYtNjk0OC00Y2VmLTg1NDgt
YzkzYzFlZTg5OGJlLzEvM2YyVTY3akxtS0hiMzFDOXpXbmN3cEZFaUo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9hNmY1MDYtNjk0OC00Y2VmLTg1NDgtYzkzYzFlZTg5OGJl
LzEvM2YyVTY3akxtS0hiMzFDOXpXbmN3cEZFaUo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXsH+yx8
SXaxMrj4fzYtJNU+80vGeUXrr8c9cM/nrspvBX7K+tGX4XiHbwSyHKb+gN8Gu9Ni
ZDf81Rh7EhyFJARNrNLmxxzkcESBGyyPyhR4s4y9QkbdJerUiNA4OiR+d9wv9FVo
2Kw7njTgjgerM/dPN9lzgLfTSRcu3+OSqgAmDhV6meG22lhcO5yOQNsp6jKu4IuT
q3Ve/cq9V7MWZpitMRqDmf59SHou16a/CuC5e1Fub1AAXGA9Quu+I45EuXK806E0
Ny8zNLUxukeiWKCiSGbOT4PJAd56dhtDnw3+4ogXnI85iLpkgpMGQv3lEwwEk5r9
ks7qfz9z/b1T+w==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:04:03 2025 by rpki-client