Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: ZZt9KE+GyY9k5ccwD/Vvgs+8atWNgs4V3RpVICSJSd4=
Subject key identifier: CB:F8:4B:B6:6B:6A:BE:75:99:77:8E:F1:05:36:83:1E:61:D3:67:36
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 01965236712C89AE01A3DEF1CA9BCD91A544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 0331
Signing time: Sun 20 Apr 2025 08:00:21 +0000
Manifest this update: Sun 20 Apr 2025 08:00:21 +0000
Manifest next update: Mon 21 Apr 2025 08:00:21 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: xI48ZWzvjbVHhxYVyEh44koMW/i0EC4ya0Li/LLz4fg=)
2: R82wyiQ6WGXDZ2qmyfic2Rx16EQ.roa (hash: q3ADHp8TbEdc9vO2jFfoJST4ALm7hMCr9dPnLoGdV9o=)
3: msFkodHiiLA7yYTUvQfg1svzo58.roa (hash: 8maRWfYNuUoSqjA1l1zPbJ9FPRTfD/7OAF7wZnEEN9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:71:2c:89:ae:01:a3:de:f1:ca:9b:cd:91:a5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Apr 20 08:00:21 2025 GMT
Not After : Apr 21 08:00:21 2025 GMT
Subject: CN=cbf84bb66b6abe7599778ef10536831e61d36736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:18:30:e5:a2:a8:ec:f5:8f:76:75:5b:de:16:
85:55:de:73:32:3f:32:47:ca:38:30:0d:78:20:0c:
c1:7e:82:13:c3:de:1b:8f:a7:4c:c6:8e:ea:20:3b:
71:17:06:5c:20:f6:70:70:ab:ad:d7:5d:66:31:b9:
0a:c2:66:bb:82:61:d3:bf:4d:a1:6f:d5:08:88:e1:
fc:8a:93:0f:30:0e:a4:32:1a:03:1f:8e:63:93:b1:
12:f9:fd:e9:73:6c:c5:ff:90:50:16:73:c2:56:0e:
e8:67:51:5f:a9:44:bd:f0:0f:88:47:a8:7e:b0:87:
82:f3:d9:2e:f6:0f:dc:64:0a:aa:f1:c0:cd:c2:9f:
99:e3:58:89:8c:15:d8:b3:4c:8f:52:bf:73:65:7c:
a0:ca:7d:69:13:30:48:3d:65:fe:b2:04:e3:e5:68:
17:44:80:79:ab:1e:30:8f:12:e0:48:95:64:19:18:
c6:8d:1b:75:aa:42:91:ec:ee:02:ed:92:2d:cb:3f:
64:59:a8:bc:ee:30:ec:02:03:78:9a:0e:bf:77:41:
21:06:95:09:9b:72:95:9c:45:1c:d0:c3:2b:4f:01:
e3:70:e8:c2:13:45:fd:85:0c:9a:93:f7:85:ac:9a:
01:23:2d:d0:87:f7:7c:e9:57:b4:9b:12:00:4e:2e:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F8:4B:B6:6B:6A:BE:75:99:77:8E:F1:05:36:83:1E:61:D3:67:36
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:df:5f:19:a1:5e:37:35:65:47:60:ae:25:e1:58:8a:ed:f2:
59:98:2a:b5:5a:6d:88:df:14:87:f7:5f:bf:dd:e5:09:b6:0d:
39:8f:ab:ac:2d:03:f4:e9:5d:7c:f6:9d:51:2a:8a:e9:81:9e:
27:76:26:54:3a:75:80:a0:14:e8:3a:b0:2a:a3:ed:85:be:ef:
06:cf:29:6f:ad:73:ca:5a:50:be:66:13:db:35:6a:03:bf:12:
9b:3f:29:a0:67:c8:c3:71:9a:ce:b8:88:05:e6:42:f3:e7:c1:
91:5c:26:9e:1d:d4:d2:9c:cf:96:76:fe:ec:e0:70:d1:3d:97:
9c:e0:a9:36:8e:c6:5b:a1:83:f1:69:87:7a:4c:e6:23:41:26:
9d:ea:c1:8e:50:7a:63:de:d1:08:72:e8:13:3e:36:82:29:99:
91:a1:70:7f:93:7c:ea:bd:9d:b6:4f:f4:35:bf:7d:af:0b:7e:
09:ee:7f:b5:8e:ce:af:68:d6:75:1b:10:1a:d6:7a:6f:e2:3d:
61:78:86:c1:48:36:06:12:f9:b9:b3:5c:81:30:e1:d5:67:d9:
79:8e:a0:db:3c:1c:45:5e:8a:86:c6:f4:14:96:69:b6:ff:e0:
ae:22:42:f1:04:0c:e6:72:bd:91:2f:7c:70:38:ff:6b:b9:29:
3e:23:9d:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNnEsia4Bo97xypvNkaVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZDk3NzBjMzA3ZWEzOTYwYzhkYTI2OGE4ODY1YTRhOWZh
NjM0YzkwHhcNMjUwNDIwMDgwMDIxWhcNMjUwNDIxMDgwMDIxWjAzMTEwLwYDVQQD
EyhjYmY4NGJiNjZiNmFiZTc1OTk3NzhlZjEwNTM2ODMxZTYxZDM2NzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxgw5aKo7PWPdnVb3haFVd5zMj8y
R8o4MA14IAzBfoITw94bj6dMxo7qIDtxFwZcIPZwcKut111mMbkKwma7gmHTv02h
b9UIiOH8ipMPMA6kMhoDH45jk7ES+f3pc2zF/5BQFnPCVg7oZ1FfqUS98A+IR6h+
sIeC89ku9g/cZAqq8cDNwp+Z41iJjBXYs0yPUr9zZXygyn1pEzBIPWX+sgTj5WgX
RIB5qx4wjxLgSJVkGRjGjRt1qkKR7O4C7ZItyz9kWai87jDsAgN4mg6/d0EhBpUJ
m3KVnEUc0MMrTwHjcOjCE0X9hQyak/eFrJoBIy3Qh/d86Ve0mxIATi7ZRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMv4S7Zrar51mXeO8QU2gx5h02c2MB8GA1UdIwQY
MBaAFN3ZdwwwfqOWDI2iaKiGWkqfpjTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUt
ZjJmZTBkMDRiZmJmLzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUtZjJmZTBkMDRiZmJm
LzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOd9fGaFe
NzVlR2CuJeFYiu3yWZgqtVptiN8Uh/dfv93lCbYNOY+rrC0D9OldfPadUSqK6YGe
J3YmVDp1gKAU6DqwKqPthb7vBs8pb61zylpQvmYT2zVqA78Smz8poGfIw3GazriI
BeZC8+fBkVwmnh3U0pzPlnb+7OBw0T2XnOCpNo7GW6GD8WmHekzmI0EmnerBjlB6
Y97RCHLoEz42gimZkaFwf5N86r2dtk/0Nb99rwt+Ce5/tY7Or2jWdRsQGtZ6b+I9
YXiGwUg2BhL5ubNcgTDh1WfZeY6g2zwcRV6Khsb0FJZptv/griJC8QQM5nK9kS98
cDj/a7kpPiOdzw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:20:31 2025 by rpki-client