Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: XQIL+8FPAtI3RUgbhoJPGQKYNQ+Gupn89awhpe1Ens8=
Subject key identifier: 4D:71:1A:4F:67:87:EB:A3:AD:A9:05:84:8C:DE:BA:91:F6:63:88:38
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 0196120F5C1379393126DF9BAD803729824A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 0CBC
Signing time: Mon 07 Apr 2025 21:01:58 +0000
Manifest this update: Mon 07 Apr 2025 21:01:58 +0000
Manifest next update: Tue 08 Apr 2025 21:01:58 +0000
Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: vsvz6rfiwS5SnoiV9Xy8/emJK/ZPJSCQcmCwjsJaSUk=)
2: C9mugrtzW_-CpWlbrAzn7HLndJs.roa (hash: us/IF6tfe4s5IdJAAyc5z0B0e23waKBVaik+zvz/TyQ=)
3: yll503ISaq2wNzfEAk_Qb_MtGbg.roa (hash: LYtS+Gvc0u0aK5E+MP2oP4ZNnIbSc6rSwiTMseFfpYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0f:5c:13:79:39:31:26:df:9b:ad:80:37:29:82:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Apr 7 21:01:58 2025 GMT
Not After : Apr 8 21:01:58 2025 GMT
Subject: CN=4d711a4f6787eba3ada905848cdeba91f6638838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:8c:f9:ca:97:06:a5:2c:75:a4:b3:cb:9f:
e0:66:aa:e5:27:d5:42:a3:23:12:48:d3:91:bb:f3:
5d:21:39:99:c6:7d:0c:17:8a:ce:96:ad:35:4f:59:
f2:7c:d6:0d:a8:00:e3:ab:70:9e:c1:88:e0:52:2e:
1a:3c:f9:90:a1:d0:08:0e:b0:df:60:ec:c8:97:78:
17:23:3f:c1:b2:71:fd:b5:c1:4d:ad:93:59:02:bc:
93:09:81:42:8a:05:d3:0c:ff:63:78:8e:62:2b:fa:
b4:a7:b2:b8:2e:9f:14:89:7c:31:96:9a:4e:0b:1d:
97:c9:af:79:a6:6f:62:78:51:d9:e8:c2:57:ca:96:
4b:d2:c2:7a:bb:13:1d:29:5b:78:fc:b6:26:ec:bf:
69:96:31:0e:60:78:4e:da:0d:09:15:bb:ae:a8:80:
f0:b4:fd:52:c5:b1:f7:40:8a:41:34:dd:e1:f4:89:
8a:a4:5b:12:b7:ff:47:32:00:fb:9b:0f:10:ee:94:
fb:50:dc:de:7d:f6:82:16:23:b4:1a:8a:0d:15:3a:
60:dc:12:c1:8d:6a:e4:e2:54:00:30:5b:f3:75:b3:
f0:9d:e8:f3:e9:5b:ee:48:4c:ef:61:19:3f:c5:84:
61:90:19:cd:f3:50:f6:48:83:66:05:70:f0:07:cf:
58:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:71:1A:4F:67:87:EB:A3:AD:A9:05:84:8C:DE:BA:91:F6:63:88:38
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:78:bb:56:54:85:20:49:6f:fc:aa:ae:3f:90:92:f5:b6:87:
7d:3c:2f:32:22:6b:09:cd:20:fc:e6:e2:dd:60:f9:09:17:19:
eb:f4:5f:03:3f:92:9c:5c:48:1d:92:f2:47:bb:ea:4e:85:1b:
e0:a4:28:c2:bf:90:02:e0:cd:f8:97:93:a5:c9:20:49:ca:c6:
9a:a1:1f:58:2a:06:04:ca:4d:14:7e:ac:85:5e:0b:ff:b2:5b:
3c:ed:dd:3a:4f:64:c4:9b:a1:b3:01:49:47:92:0c:0e:b3:ae:
76:c4:38:74:b6:2f:b0:6d:28:bb:73:7f:dc:59:4b:a5:2e:4d:
c4:f7:5e:62:10:c0:e7:1c:a3:3b:d4:47:15:cf:5d:b1:80:dd:
b9:fd:0f:00:ff:ea:f1:4a:78:d2:f1:34:f1:b5:54:12:f8:15:
c7:41:eb:fd:c1:0a:ce:a7:19:c9:12:d5:ab:2c:d4:a6:07:25:
e7:9d:b5:1b:95:15:aa:ec:e4:87:8d:8c:40:e7:16:5b:5d:82:
1b:4d:95:29:23:6e:3f:0b:ca:cc:73:a0:46:b5:19:1c:45:1e:
05:4b:c1:08:bd:4c:06:ad:d4:b9:10:4a:4a:ee:31:67:8a:4f:
ba:9d:f9:37:59:98:14:9f:85:0d:32:36:a6:d6:ce:35:0c:86:
1a:e1:d9:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYSD1wTeTkxJt+brYA3KYJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjkxNzY0NWQ5ZDIyMDQzNWY5MWM3ZTQ2YzgxMTBjZjg5
YWNiZTQwHhcNMjUwNDA3MjEwMTU4WhcNMjUwNDA4MjEwMTU4WjAzMTEwLwYDVQQD
Eyg0ZDcxMWE0ZjY3ODdlYmEzYWRhOTA1ODQ4Y2RlYmE5MWY2NjM4ODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtCM+cqXBqUsdaSzy5/gZqrlJ9VC
oyMSSNORu/NdITmZxn0MF4rOlq01T1nyfNYNqADjq3CewYjgUi4aPPmQodAIDrDf
YOzIl3gXIz/BsnH9tcFNrZNZAryTCYFCigXTDP9jeI5iK/q0p7K4Lp8UiXwxlppO
Cx2Xya95pm9ieFHZ6MJXypZL0sJ6uxMdKVt4/LYm7L9pljEOYHhO2g0JFbuuqIDw
tP1SxbH3QIpBNN3h9ImKpFsSt/9HMgD7mw8Q7pT7UNzeffaCFiO0GooNFTpg3BLB
jWrk4lQAMFvzdbPwnejz6VvuSEzvYRk/xYRhkBnN81D2SINmBXDwB89YbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1xGk9nh+ujrakFhIzeupH2Y4g4MB8GA1UdIwQY
MBaAFNxpF2RdnSIENfkcfkbIEQz4msvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2Et
NDI4YmU5MDA4ZmJhLzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2EtNDI4YmU5MDA4ZmJh
LzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHi7VlSF
IElv/KquP5CS9baHfTwvMiJrCc0g/Obi3WD5CRcZ6/RfAz+SnFxIHZLyR7vqToUb
4KQowr+QAuDN+JeTpckgScrGmqEfWCoGBMpNFH6shV4L/7JbPO3dOk9kxJuhswFJ
R5IMDrOudsQ4dLYvsG0ou3N/3FlLpS5NxPdeYhDA5xyjO9RHFc9dsYDduf0PAP/q
8Up40vE08bVUEvgVx0Hr/cEKzqcZyRLVqyzUpgcl5521G5UVquzkh42MQOcWW12C
G02VKSNuPwvKzHOgRrUZHEUeBUvBCL1MBq3UuRBKSu4xZ4pPup35N1mYFJ+FDTI2
ptbONQyGGuHZug==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:58:20 2025 by rpki-client