Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier: JPRyGxd9cyTI3y2gHaRHyAFXs2bFZDRnV3nwCivz+bo=
Subject key identifier: 83:F6:89:5C:6A:DD:2C:B1:15:BD:C5:2B:E7:65:65:0B:CC:1A:A2:14
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 0196564A4798369E272C8FCB9D56C3211EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number: 0D5C
Signing time: Mon 21 Apr 2025 03:00:30 +0000
Manifest this update: Mon 21 Apr 2025 03:00:30 +0000
Manifest next update: Tue 22 Apr 2025 03:00:30 +0000
Files and hashes: 1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: v9qsn5NekYRjNA50AiCNEgTfzhX9u1wz+0+l9fY9prA=)
2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:47:98:36:9e:27:2c:8f:cb:9d:56:c3:21:1e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Apr 21 03:00:30 2025 GMT
Not After : Apr 22 03:00:30 2025 GMT
Subject: CN=83f6895c6add2cb115bdc52be765650bcc1aa214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:29:6f:60:f8:47:1a:5d:93:d8:9d:fc:42:
a0:47:57:07:f1:ff:04:d3:94:18:34:3d:c9:85:a6:
28:96:9d:6c:36:cf:1f:f1:d9:4d:b2:cb:4a:be:b1:
a4:15:e7:ce:80:91:b8:8c:8b:da:ae:ca:2b:50:ba:
96:b4:08:19:d9:5a:e4:7f:ff:fd:18:a4:65:52:25:
3b:fc:f4:52:bc:4a:69:72:ea:49:d1:a6:15:c0:43:
04:76:89:aa:7f:7d:64:54:43:d9:28:30:15:89:e5:
14:f1:03:8e:ed:a8:79:00:aa:af:20:68:4c:7c:e8:
0b:f3:7f:bb:3f:8b:1b:08:dc:1c:1a:96:fa:15:9c:
6a:85:77:f4:6a:95:12:9b:83:74:df:b4:01:ec:8c:
a8:79:ca:4a:7d:7b:2b:72:02:60:64:91:5d:75:16:
fc:fe:03:6b:1a:cd:9a:44:24:f8:2b:9b:69:84:a0:
29:7b:34:01:5c:1c:45:d0:dd:ca:73:c1:fe:87:d6:
11:ec:17:47:a1:a1:76:e2:d3:bc:a0:85:28:52:df:
31:24:b0:00:a4:39:02:c4:90:60:1c:e1:b7:fc:ca:
ca:2e:0d:a1:f7:94:16:eb:42:67:fb:0a:d1:03:67:
d9:e0:83:25:f6:85:a1:5c:25:b0:87:2c:37:62:48:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F6:89:5C:6A:DD:2C:B1:15:BD:C5:2B:E7:65:65:0B:CC:1A:A2:14
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:73:e7:c6:94:57:db:ad:90:f4:aa:11:09:e8:1b:4b:dd:c9:
90:b2:2f:96:af:e1:86:5a:0c:49:53:af:d5:94:3e:4e:cf:7a:
45:df:12:84:35:d8:fc:12:64:1a:8a:c5:dd:f2:33:ed:89:6b:
7e:34:52:48:34:1c:49:fd:f2:da:aa:f9:84:66:2e:6a:13:2a:
b3:b7:7f:d4:e7:3f:80:4d:6c:56:4e:42:e2:ec:11:0f:da:f1:
37:ba:1d:0f:e6:c9:03:93:3e:85:fa:5f:d1:d3:36:b8:14:99:
50:14:ba:82:d9:f0:eb:7c:0e:90:b5:11:a7:47:6f:9e:39:18:
82:8b:8b:95:d3:92:db:af:e6:b2:79:b4:6e:76:1a:92:9e:52:
21:58:f6:13:0c:77:b1:08:de:61:d0:85:f9:f5:27:e0:c9:e1:
16:01:c8:ad:76:99:86:f6:bc:eb:de:74:e7:ac:24:88:83:2c:
95:ab:c7:a7:93:5e:8d:9f:af:7b:c9:a4:a5:45:36:03:a3:f6:
95:00:3d:ad:1f:bd:63:69:b6:74:86:f4:19:e2:35:ad:16:eb:
bd:c2:7f:c5:c0:73:89:89:3c:e2:50:1f:08:12:39:5d:a6:60:
72:7b:5c:0b:13:8e:cb:b4:e7:4f:c7:a8:cd:2f:ca:d2:46:12:
38:8a:c6:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWSkeYNp4nLI/LnVbDIR6/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzliOTVkOGE1OGZjY2E2YTgxMmU3NzdlN2VmNjk0NTNm
OGFjOTgwHhcNMjUwNDIxMDMwMDMwWhcNMjUwNDIyMDMwMDMwWjAzMTEwLwYDVQQD
Eyg4M2Y2ODk1YzZhZGQyY2IxMTViZGM1MmJlNzY1NjUwYmNjMWFhMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqcpb2D4Rxpdk9id/EKgR1cH8f8E
05QYND3JhaYolp1sNs8f8dlNsstKvrGkFefOgJG4jIvarsorULqWtAgZ2Vrkf//9
GKRlUiU7/PRSvEppcupJ0aYVwEMEdomqf31kVEPZKDAVieUU8QOO7ah5AKqvIGhM
fOgL83+7P4sbCNwcGpb6FZxqhXf0apUSm4N037QB7IyoecpKfXsrcgJgZJFddRb8
/gNrGs2aRCT4K5tphKApezQBXBxF0N3Kc8H+h9YR7BdHoaF24tO8oIUoUt8xJLAA
pDkCxJBgHOG3/MrKLg2h95QW60Jn+wrRA2fZ4IMl9oWhXCWwhyw3YkgPRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIP2iVxq3SyxFb3FK+dlZQvMGqIUMB8GA1UdIwQY
MBaAFBd5uV2KWPzKaoEud35+9pRT+KyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYt
NDA3ZTNmZTYzOTQ1LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYtNDA3ZTNmZTYzOTQ1
LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXPnxpRX
262Q9KoRCegbS93JkLIvlq/hhloMSVOv1ZQ+Ts96Rd8ShDXY/BJkGorF3fIz7Ylr
fjRSSDQcSf3y2qr5hGYuahMqs7d/1Oc/gE1sVk5C4uwRD9rxN7odD+bJA5M+hfpf
0dM2uBSZUBS6gtnw63wOkLURp0dvnjkYgouLldOS26/msnm0bnYakp5SIVj2Ewx3
sQjeYdCF+fUn4MnhFgHIrXaZhva8695056wkiIMslavHp5NejZ+ve8mkpUU2A6P2
lQA9rR+9Y2m2dIb0GeI1rRbrvcJ/xcBziYk84lAfCBI5XaZgcntcCxOOy7TnT8eo
zS/K0kYSOIrG8w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:17 2025 by rpki-client