Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier: aadrAk0M9kWv29e0riuhbn3AAPuh7y2PjrVbCgCl47A=
Subject key identifier: 0E:DC:05:D4:23:23:2D:BE:B9:05:D8:47:A4:40:0F:E0:A2:AC:37:84
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer: /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial: 019612EACE61B115C022799DAFD234F4A81E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number: 14DE
Signing time: Tue 08 Apr 2025 01:01:40 +0000
Manifest this update: Tue 08 Apr 2025 01:01:40 +0000
Manifest next update: Wed 09 Apr 2025 01:01:40 +0000
Files and hashes: 1: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: PCbqfUnKjcwcgAUre/UFXL6Wj5PV/HJBogYZEJBo1EA=)
2: I2pncAJfzNdJmYYh59kVF5OSpUs.roa (hash: lHfLeGadLKnQRU2ejGfcyZ67n8h62UJ2WQIx9Gm+axg=)
3: MnzrFfyCM6_m24BkwXpZ_Rso1RQ.roa (hash: XgLOcASonVn7TWXy+ktIGTPZ2UgFdKpsifVTE/uxOB0=)
4: UJU_wGK_nKOpS66Lv-qw5sHx6Yc.roa (hash: DVPLZ7QtHdhq6Tawu/C5Hzz46ZghvtTkOTNBcz5aL5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:ea:ce:61:b1:15:c0:22:79:9d:af:d2:34:f4:a8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Validity
Not Before: Apr 8 01:01:40 2025 GMT
Not After : Apr 9 01:01:40 2025 GMT
Subject: CN=0edc05d423232dbeb905d847a4400fe0a2ac3784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:1c:25:7a:45:50:9f:5d:39:63:24:ae:91:
26:e7:5a:c6:66:fe:75:89:95:91:1c:c0:90:99:f6:
90:fa:2d:58:ac:5c:ca:26:a4:93:f9:d6:1f:65:a8:
32:0e:9a:fe:c5:4d:a1:fc:d8:f5:3d:33:8b:18:46:
c2:fd:de:d1:86:b8:17:67:48:b4:74:09:c3:51:c8:
ce:c0:f1:f3:b9:83:96:63:be:05:89:f5:06:76:81:
09:3e:a6:5f:0c:b8:71:58:2f:ea:25:67:87:c9:5e:
7d:2d:67:25:90:86:08:91:84:c0:da:23:dd:18:a5:
c5:fb:82:2f:f2:17:b3:14:5d:62:ee:1e:d8:fd:97:
57:43:50:4a:15:06:4a:c8:81:80:1e:32:43:80:c3:
b6:12:76:ef:a5:32:6e:9a:06:29:37:74:d5:80:d0:
d2:7a:0d:41:0a:68:56:d4:66:8c:6f:64:fb:0a:98:
2c:63:8e:62:99:c9:51:c2:fd:f1:67:fa:22:ee:2f:
64:16:a4:fa:fa:69:cd:a2:a6:b6:b4:3d:76:06:81:
9e:fc:db:40:9c:93:84:4e:8c:d0:68:c9:d4:d6:31:
45:89:94:b1:78:bc:d1:1c:d0:7f:4d:79:19:dc:f1:
e0:fa:41:9a:39:be:ae:5d:21:44:8c:a2:c4:25:13:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DC:05:D4:23:23:2D:BE:B9:05:D8:47:A4:40:0F:E0:A2:AC:37:84
X509v3 Authority Key Identifier:
keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6d:f4:cb:8a:f8:d2:6d:5c:36:15:3a:f2:c5:c8:7f:bb:83:
b1:8d:c2:5e:77:4e:16:23:22:b4:0c:21:f0:27:a7:44:56:29:
e2:5c:3a:26:ee:b0:3d:3d:24:ba:1f:b8:f5:7a:0d:4e:d9:48:
27:9e:81:f6:93:04:a9:1b:d3:c4:e5:64:88:86:65:4f:02:2b:
d1:29:2a:a6:a0:1f:09:bf:d3:4f:d5:5a:a1:47:c0:07:5c:3a:
a8:a1:4a:9d:d9:4c:84:1d:f1:7f:54:04:4c:4f:89:09:f4:24:
8d:42:76:58:83:0d:ea:02:ca:20:1b:31:63:5b:e2:0c:33:50:
cf:cc:e3:0b:30:24:c7:66:af:c8:f4:68:c7:3a:2e:de:df:55:
29:da:bd:a4:39:dc:4e:62:22:8c:5a:f8:69:27:a8:18:12:ec:
69:87:8e:b0:f3:1f:b2:69:e3:03:55:8d:86:38:6a:db:34:6d:
8d:d6:31:64:7e:f0:5f:d3:63:40:33:df:fb:dd:98:76:35:6b:
96:71:c7:aa:f8:1d:f5:21:bf:35:1c:40:4b:e0:45:49:f6:65:
98:aa:2e:68:fb:1d:ed:e5:0e:64:10:53:10:32:f1:22:28:24:
a4:96:82:96:9a:fb:21:7e:1f:7d:aa:33:b9:12:ea:7a:2c:84:
bd:2a:24:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYS6s5hsRXAInmdr9I09KgeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODk5YzI4NjY0ZWU4MTk0YTY0MDQ4ZTQ2YzYwYzZlNWYx
OTBjNTMwHhcNMjUwNDA4MDEwMTQwWhcNMjUwNDA5MDEwMTQwWjAzMTEwLwYDVQQD
EygwZWRjMDVkNDIzMjMyZGJlYjkwNWQ4NDdhNDQwMGZlMGEyYWMzNzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0scJXpFUJ9dOWMkrpEm51rGZv51
iZWRHMCQmfaQ+i1YrFzKJqST+dYfZagyDpr+xU2h/Nj1PTOLGEbC/d7RhrgXZ0i0
dAnDUcjOwPHzuYOWY74FifUGdoEJPqZfDLhxWC/qJWeHyV59LWclkIYIkYTA2iPd
GKXF+4Iv8hezFF1i7h7Y/ZdXQ1BKFQZKyIGAHjJDgMO2EnbvpTJumgYpN3TVgNDS
eg1BCmhW1GaMb2T7CpgsY45imclRwv3xZ/oi7i9kFqT6+mnNoqa2tD12BoGe/NtA
nJOETozQaMnU1jFFiZSxeLzRHNB/TXkZ3PHg+kGaOb6uXSFEjKLEJRPyeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7cBdQjIy2+uQXYR6RAD+CirDeEMB8GA1UdIwQY
MBaAFNyJnChmTugZSmQEjkbGDG5fGQxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUt
NTJmZTEwNTEzMTI5LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81NmQ2YTgtMDc1Mi00Y2JkLTg4NDUtNTJmZTEwNTEzMTI5
LzEvM0ltY0tHWk82QmxLWkFTT1JzWU1ibDhaREZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASm30y4r4
0m1cNhU68sXIf7uDsY3CXndOFiMitAwh8CenRFYp4lw6Ju6wPT0kuh+49XoNTtlI
J56B9pMEqRvTxOVkiIZlTwIr0SkqpqAfCb/TT9VaoUfAB1w6qKFKndlMhB3xf1QE
TE+JCfQkjUJ2WIMN6gLKIBsxY1viDDNQz8zjCzAkx2avyPRoxzou3t9VKdq9pDnc
TmIijFr4aSeoGBLsaYeOsPMfsmnjA1WNhjhq2zRtjdYxZH7wX9NjQDPf+92YdjVr
lnHHqvgd9SG/NRxAS+BFSfZlmKouaPsd7eUOZBBTEDLxIigkpJaClpr7IX4ffaoz
uRLqeiyEvSokrQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:37:59 2025 by rpki-client