Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: HcoYyDKoT4Okft8/x+GCEnohJ8OcfQ46HN/+8M4ZQ78=
Subject key identifier: 44:65:A3:25:9B:65:70:49:0A:70:C7:7E:9B:2C:BB:CF:4B:CD:42:54
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 01964AEB524E184AB0EA815B81825F0504F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 0EB4
Signing time: Fri 18 Apr 2025 22:00:57 +0000
Manifest this update: Fri 18 Apr 2025 22:00:57 +0000
Manifest next update: Sat 19 Apr 2025 22:00:57 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: FlgslMtuHFZpvJDoRiNZLN4ziQonps5IihQzacFU1+Y=)
2: 6f05f7w22zRcUpz28tjM6XCdsYk.roa (hash: kl4KaLs8etslFAKNgVQw6su1C8PWL6O+HJhYp1T4Tak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:52:4e:18:4a:b0:ea:81:5b:81:82:5f:05:04:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Apr 18 22:00:57 2025 GMT
Not After : Apr 19 22:00:57 2025 GMT
Subject: CN=4465a3259b6570490a70c77e9b2cbbcf4bcd4254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:73:9d:a9:8f:4a:5a:e5:35:5b:b1:07:4a:11:
ed:a5:af:4b:19:81:0d:f5:be:18:df:74:50:04:ca:
07:d9:6e:d8:7c:b1:d2:3b:f1:c8:62:2e:78:3c:f3:
b1:dc:75:20:43:c6:61:3a:7e:bd:59:5f:2d:59:9b:
f4:b3:d8:fe:16:d4:53:b0:40:e8:d7:09:0f:65:b5:
44:78:49:3c:cd:98:a9:df:1d:6b:75:08:94:22:74:
9b:75:50:b4:e1:7e:cb:13:1d:38:7c:d9:0b:09:7b:
90:98:c8:f7:f9:a8:20:d4:b6:f3:26:bc:c5:ff:8b:
8f:11:b6:f6:38:4d:89:53:88:aa:3b:49:c1:5d:a7:
b8:60:19:4e:e3:b1:b8:72:cc:b2:38:45:e1:9c:ec:
47:1b:bd:56:ce:4f:98:dd:07:89:1f:44:e4:f0:d5:
2f:4f:c1:08:0d:a6:87:d7:64:81:27:b1:bd:ae:99:
5d:70:7a:93:33:ad:db:31:e3:2b:c6:59:9a:32:d6:
bd:40:c8:0b:46:96:aa:ab:37:ca:58:6f:fc:bc:89:
b9:46:12:ec:9e:4d:ee:1f:1f:00:f1:5b:cd:e3:7e:
3b:84:39:8a:eb:f5:53:ee:e9:c5:0a:67:3a:aa:f8:
92:7d:5a:15:97:80:f8:d1:5e:5b:7f:2f:b6:0d:bb:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:65:A3:25:9B:65:70:49:0A:70:C7:7E:9B:2C:BB:CF:4B:CD:42:54
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:67:28:50:53:d7:36:0c:92:65:13:42:88:3e:26:5e:e3:89:
ea:34:2f:a3:4d:1c:e3:0b:a1:2d:ad:27:3a:38:37:c2:36:39:
ee:ed:f5:ee:71:45:aa:a0:a7:44:ac:3e:36:ed:2f:7c:61:15:
4b:f8:22:b6:f3:5b:69:85:09:02:21:d6:c0:3c:7e:2d:5f:c7:
f4:a5:d0:cc:cd:41:7b:98:2f:84:4e:fa:f6:db:23:52:1c:bb:
6c:77:78:05:8d:a1:f4:67:f7:07:c5:69:44:cc:99:5d:45:51:
11:25:a5:ef:5a:87:b1:2c:7c:9f:fa:8e:5c:2d:b5:49:7f:3a:
ca:43:38:d4:97:89:84:9d:c7:00:89:b5:13:6a:45:48:6c:97:
46:db:b0:73:c7:95:73:05:1a:bb:4b:b0:98:fa:ba:d6:57:4a:
ec:33:86:43:c4:89:53:89:81:bd:17:f3:9e:be:75:75:5c:f4:
e8:d4:15:c3:61:ac:45:8f:de:c3:2d:fe:cc:f2:04:b5:8a:cb:
b7:9a:a0:a1:55:56:e6:71:d5:42:0c:bf:35:be:f8:b8:b7:3e:
ea:28:5f:f8:03:13:90:b0:1c:41:de:5c:9f:37:90:57:db:a6:
56:95:22:fc:e0:8c:41:59:06:56:99:53:e2:4a:c6:3b:cd:bd:
93:a3:22:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZK61JOGEqw6oFbgYJfBQTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjY2E1MjIxOTZmZDA5YmFlNzM5YjZiZDIzMjJlNWViOTBk
YTRmYjkwHhcNMjUwNDE4MjIwMDU3WhcNMjUwNDE5MjIwMDU3WjAzMTEwLwYDVQQD
Eyg0NDY1YTMyNTliNjU3MDQ5MGE3MGM3N2U5YjJjYmJjZjRiY2Q0MjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HOdqY9KWuU1W7EHShHtpa9LGYEN
9b4Y33RQBMoH2W7YfLHSO/HIYi54PPOx3HUgQ8ZhOn69WV8tWZv0s9j+FtRTsEDo
1wkPZbVEeEk8zZip3x1rdQiUInSbdVC04X7LEx04fNkLCXuQmMj3+agg1LbzJrzF
/4uPEbb2OE2JU4iqO0nBXae4YBlO47G4csyyOEXhnOxHG71Wzk+Y3QeJH0Tk8NUv
T8EIDaaH12SBJ7G9rpldcHqTM63bMeMrxlmaMta9QMgLRpaqqzfKWG/8vIm5RhLs
nk3uHx8A8VvN4347hDmK6/VT7unFCmc6qviSfVoVl4D40V5bfy+2DbuBWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERloyWbZXBJCnDHfpssu89LzUJUMB8GA1UdIwQY
MBaAFNzKUiGW/Qm65zm2vSMi5euQ2k+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMt
M2IyNTBhZTE4OTM2LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMtM2IyNTBhZTE4OTM2
LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmcoUFPX
NgySZRNCiD4mXuOJ6jQvo00c4wuhLa0nOjg3wjY57u317nFFqqCnRKw+Nu0vfGEV
S/gitvNbaYUJAiHWwDx+LV/H9KXQzM1Be5gvhE769tsjUhy7bHd4BY2h9Gf3B8Vp
RMyZXUVRESWl71qHsSx8n/qOXC21SX86ykM41JeJhJ3HAIm1E2pFSGyXRtuwc8eV
cwUau0uwmPq61ldK7DOGQ8SJU4mBvRfznr51dVz06NQVw2GsRY/ewy3+zPIEtYrL
t5qgoVVW5nHVQgy/Nb74uLc+6ihf+AMTkLAcQd5cnzeQV9umVpUi/OCMQVkGVplT
4krGO829k6Mi7A==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:06 2025 by rpki-client