Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: 0F4GZxrLe6MaqS0L6RatzQ4FzxBQrVXFjdaLRxPrf5k=
Subject key identifier: CB:A5:05:A6:E1:46:C2:F1:36:89:8E:B0:DA:A2:C7:75:9F:83:F4:91
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 01963CF80CD386F9434F9C8A3A32FF6AAD02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 122D
Signing time: Wed 16 Apr 2025 05:00:10 +0000
Manifest this update: Wed 16 Apr 2025 05:00:10 +0000
Manifest next update: Thu 17 Apr 2025 05:00:10 +0000
Files and hashes: 1: 3HTozQB4pcsucL9eexzvUMqz-88.roa (hash: p8l9H8yiS+tCWDGhSt8TqxKK4BPlsy+wIY5igUPwFNU=)
2: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: earmwkEPrO6783ixTLNjf1zKzKwL6B+uCI5gQzNYPAk=)
3: I_q4haHSQ5-iSHbhiDxn8LO10n0.roa (hash: rR8MdnfYv9DYhofCAQL44jv965jNwY7cLv2/tA4Lg2A=)
4: TiC_Kjgn7ufdW5G3bZapc4eGbt0.roa (hash: bIFhS4mc+QnxlO7/qiPxce8pWMHI9i3DDkPiJSG5yyE=)
5: cdhvQ3G9D22hzZ35uWHLO4DK-b8.roa (hash: 9/hDVeqHVKKGEQirCvU77EziyJeBYbpOSUraYbA1sQI=)
6: dyZAc8NxmgpIJ7ReLwLtCdf8iuU.roa (hash: yzcV6FbEvYdi3FxJ85d1AG7eZonaFrOWx4BQurNQcLA=)
7: icjgdrZ-2bYy0vmLkXN3ZejcMO0.roa (hash: BhIg1YAcMIYOB5H79uWHhrjxoemSR0rVkY+hQV1/Imo=)
8: tgoPg8gJ1wgYlvzK_ZhaNvMswpk.roa (hash: 0Yao20qxSDFfx3jAhC+HO3FsXj9rP4F8uh+mjbY+yHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:f8:0c:d3:86:f9:43:4f:9c:8a:3a:32:ff:6a:ad:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Apr 16 05:00:10 2025 GMT
Not After : Apr 17 05:00:10 2025 GMT
Subject: CN=cba505a6e146c2f136898eb0daa2c7759f83f491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:b3:97:69:a5:0d:ee:b5:92:d3:c7:6f:de:
96:1a:2d:92:0a:56:d2:3b:9f:73:49:52:19:c1:68:
9c:51:b1:e9:08:92:f4:d9:8d:10:a1:6b:a1:48:b5:
67:66:b4:33:8d:59:f2:cc:5a:fe:b8:35:00:dd:6f:
6f:47:64:db:ea:b2:e0:f3:a0:17:3f:2c:dd:f5:20:
75:47:36:3e:c4:96:16:47:df:79:64:0b:f0:bd:1d:
78:08:10:ed:c3:4c:56:39:8c:65:57:81:de:df:a3:
70:e1:14:76:90:f9:de:73:79:c6:a3:78:fd:2d:3d:
f8:f0:4e:3d:06:99:6e:86:1c:61:86:a8:11:aa:bf:
c4:81:bd:84:d0:a9:ee:81:4b:1f:1c:02:c0:58:b8:
d7:81:a5:94:80:47:37:d4:2d:8a:d3:a6:a1:83:26:
dc:77:b4:a0:f3:be:d9:57:3a:2c:cf:df:31:c6:ce:
22:06:c4:42:d6:d9:7f:07:d5:72:1b:ad:6e:d4:99:
7b:75:ea:f7:b9:44:f1:ef:05:c8:26:d5:f8:97:e6:
f7:0a:86:58:71:c2:22:b0:55:44:40:2b:25:f4:77:
8d:5c:b6:cc:11:72:92:99:7d:b3:75:d7:5b:08:c6:
e8:b2:6b:42:80:b5:09:c0:7c:8a:3a:f9:66:32:3d:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A5:05:A6:E1:46:C2:F1:36:89:8E:B0:DA:A2:C7:75:9F:83:F4:91
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:13:b4:76:ab:fd:65:b1:68:6f:78:05:3a:08:33:0e:6a:3c:
0f:4a:5c:bf:ff:29:ee:c9:18:e8:8d:7c:55:43:32:aa:33:16:
89:97:67:ee:12:d5:ed:c8:a9:9c:1c:97:be:1a:a6:88:6f:f5:
8c:ab:6c:47:4b:2d:e8:c0:fa:f8:9d:05:eb:2e:ca:5f:d6:bc:
2a:88:55:08:6f:b8:de:51:9a:0b:01:61:29:0c:6a:ea:bc:72:
c2:6b:dc:40:c5:03:ab:4e:58:1d:d2:01:65:14:30:8d:57:8b:
45:59:03:7b:01:f3:61:e9:36:ce:50:95:4d:c4:a9:eb:d5:c6:
2e:95:1e:99:53:d9:eb:87:e8:d1:f7:25:f8:ee:8a:b4:05:aa:
16:66:7b:c1:91:8f:62:ea:fd:da:1b:60:aa:d2:e4:a6:25:2b:
16:dd:89:b5:f0:bc:f3:0f:0d:04:a4:02:13:9a:4b:db:f7:21:
78:68:73:b2:c4:ad:66:be:d1:9d:cd:3c:32:29:67:cf:10:2c:
72:a5:29:ec:d5:d3:80:d5:ea:83:ce:07:57:04:15:bd:a9:79:
6e:cf:3b:80:e4:b8:85:a7:1b:32:c2:99:d7:3d:04:07:be:0c:
2a:d1:e2:0e:8b:e1:1c:35:ce:82:02:53:a8:29:be:26:1a:ca:
f9:8b:54:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY8+AzThvlDT5yKOjL/aq0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTRiYjY5NDUzZjEzOWE2MDAyOWUyMmRiMGZiMzQyNGE5
MDZjZWUwHhcNMjUwNDE2MDUwMDEwWhcNMjUwNDE3MDUwMDEwWjAzMTEwLwYDVQQD
EyhjYmE1MDVhNmUxNDZjMmYxMzY4OThlYjBkYWEyYzc3NTlmODNmNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lizl2mlDe61ktPHb96WGi2SClbS
O59zSVIZwWicUbHpCJL02Y0QoWuhSLVnZrQzjVnyzFr+uDUA3W9vR2Tb6rLg86AX
Pyzd9SB1RzY+xJYWR995ZAvwvR14CBDtw0xWOYxlV4He36Nw4RR2kPnec3nGo3j9
LT348E49BpluhhxhhqgRqr/Egb2E0KnugUsfHALAWLjXgaWUgEc31C2K06ahgybc
d7Sg877ZVzosz98xxs4iBsRC1tl/B9VyG61u1Jl7der3uUTx7wXIJtX4l+b3CoZY
ccIisFVEQCsl9HeNXLbMEXKSmX2zdddbCMbosmtCgLUJwHyKOvlmMj2aaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMulBabhRsLxNomOsNqix3Wfg/SRMB8GA1UdIwQY
MBaAFNyUu2lFPxOaYAKeItsPs0JKkGzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGIt
MDkwYzQ2ZTlmMmVkLzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGItMDkwYzQ2ZTlmMmVk
LzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRO0dqv9
ZbFob3gFOggzDmo8D0pcv/8p7skY6I18VUMyqjMWiZdn7hLV7cipnByXvhqmiG/1
jKtsR0st6MD6+J0F6y7KX9a8KohVCG+43lGaCwFhKQxq6rxywmvcQMUDq05YHdIB
ZRQwjVeLRVkDewHzYek2zlCVTcSp69XGLpUemVPZ64fo0fcl+O6KtAWqFmZ7wZGP
Yur92htgqtLkpiUrFt2JtfC88w8NBKQCE5pL2/cheGhzssStZr7Rnc08MilnzxAs
cqUp7NXTgNXqg84HVwQVval5bs87gOS4hacbMsKZ1z0EB74MKtHiDovhHDXOggJT
qCm+JhrK+YtU+A==
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:41:30 2025 by rpki-client