Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier: HnnVP6aDxSFE8UvjXTOdn7f5opkBCQ+Fjtlvq2yCFlA=
Subject key identifier: E5:68:E6:8D:1A:0D:EB:87:FE:57:D9:02:73:E0:CE:71:CB:56:69:30
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial: 0194BA84A08A8E723DE3C06F09854A5219A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 04:00:41 +0000
Manifest this update: Fri 31 Jan 2025 04:00:41 +0000
Manifest next update: Sat 01 Feb 2025 04:00:41 +0000
Files and hashes: 1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: TRtVHoN+2CyPUJUzuNJiPDvmRg6PwX32oZhvhXuZcMM=)
2: eB3vCKwTA_4LHzl8qmjJhPE1E0I.roa (hash: 4iTyC4OoX2gbX1y0Qqu+BwBX8s/wE3y91+xS9nzRcWU=)
3: p8zRssL-qoCfvvI_dtLWUNgx7c4.roa (hash: zYGisfdidI1eM9pSCirssYszt8G/y6UD9xrE/AACroU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:a0:8a:8e:72:3d:e3:c0:6f:09:85:4a:52:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Validity
Not Before: Jan 31 04:00:41 2025 GMT
Not After : Feb 1 04:00:41 2025 GMT
Subject: CN=e568e68d1a0deb87fe57d90273e0ce71cb566930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:45:55:89:e1:65:8a:fd:16:06:83:15:75:
43:ff:d7:9f:c3:d6:8b:c8:89:71:b8:a2:8c:e9:74:
43:2b:27:14:42:a7:b1:8e:ba:8d:f8:8c:0a:11:e4:
bc:21:20:93:b0:30:24:f8:f5:0a:33:3d:24:47:31:
61:8c:bf:93:04:fe:da:7a:22:07:47:49:d8:b3:51:
24:52:d7:b6:97:4b:31:23:62:7c:21:d2:16:06:4b:
44:d5:a8:0d:b2:2f:34:40:65:ff:c3:50:e5:b5:74:
bd:49:6b:27:46:22:67:19:a0:45:76:4c:be:67:42:
fd:4a:b9:af:8a:33:64:dd:01:6c:ed:54:af:06:12:
db:f1:ba:ec:e0:4b:f5:a9:95:ee:31:eb:06:8c:81:
09:aa:0b:b6:ff:fe:3f:56:fe:80:f6:f3:fc:26:19:
5d:81:0c:af:c6:7d:9d:b6:cd:f5:0e:3b:9c:47:9a:
15:9b:9c:e8:11:82:09:57:1e:0b:96:72:b1:6b:65:
17:e4:c2:e2:7f:5d:a5:b9:8e:4e:b6:a3:15:e9:16:
7a:52:2b:8c:b7:14:d1:93:fb:39:ef:81:da:14:ca:
f1:5f:df:77:64:47:69:90:96:60:10:bc:71:43:e7:
d8:35:9a:e1:1b:c0:dd:4a:a6:41:d0:fa:e8:91:72:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:68:E6:8D:1A:0D:EB:87:FE:57:D9:02:73:E0:CE:71:CB:56:69:30
X509v3 Authority Key Identifier:
keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:11:68:ce:2a:8f:61:20:6f:7c:19:90:42:55:de:dd:b7:d7:
7b:af:8f:20:e7:fc:86:c7:ae:98:90:b7:bc:f5:13:08:66:83:
7a:93:f9:4a:35:dc:53:72:ab:f1:1a:85:0e:d2:90:84:c3:cb:
ec:3e:4e:60:c0:87:60:ef:8a:63:88:2c:65:eb:8c:b3:d6:ba:
5c:9d:64:be:d7:21:63:99:24:89:7d:60:e9:ed:74:c8:81:f1:
ae:21:b2:39:50:3b:c3:81:c1:f6:40:e3:59:e4:5e:d2:34:92:
3d:65:d1:84:50:72:06:47:ca:23:9e:84:82:4f:04:e0:84:21:
c6:1f:e3:88:54:e7:9f:29:7f:e3:ed:d8:1a:98:1c:3d:15:e4:
25:94:1d:e3:53:6a:da:ce:cb:58:74:b7:2c:e6:b1:47:e2:38:
c4:cc:13:2f:92:58:5b:b5:ec:0b:25:2a:d4:22:8d:1d:31:08:
74:2c:90:e1:68:00:c1:da:b7:44:8d:7c:6b:92:ae:96:05:94:
4f:8b:47:7f:90:f7:52:1d:ef:9c:1a:9d:5f:39:ac:9c:67:52:
76:f2:2d:d1:bc:13:51:69:0e:70:1d:67:6d:fd:b9:42:aa:5f:
ed:c7:07:42:c4:ce:e6:de:24:77:35:55:a3:e2:e7:a6:d9:ec:
d2:5c:83:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6hKCKjnI948BvCYVKUhmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDMwYWY4Yzc1MzhiOWM1YWY4NTJmMWM0MmExNzVhYWY0
NmY3ZTAwHhcNMjUwMTMxMDQwMDQxWhcNMjUwMjAxMDQwMDQxWjAzMTEwLwYDVQQD
EyhlNTY4ZTY4ZDFhMGRlYjg3ZmU1N2Q5MDI3M2UwY2U3MWNiNTY2OTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5RFVYnhZYr9FgaDFXVD/9efw9aL
yIlxuKKM6XRDKycUQqexjrqN+IwKEeS8ISCTsDAk+PUKMz0kRzFhjL+TBP7aeiIH
R0nYs1EkUte2l0sxI2J8IdIWBktE1agNsi80QGX/w1DltXS9SWsnRiJnGaBFdky+
Z0L9SrmvijNk3QFs7VSvBhLb8brs4Ev1qZXuMesGjIEJqgu2//4/Vv6A9vP8Jhld
gQyvxn2dts31DjucR5oVm5zoEYIJVx4LlnKxa2UX5MLif12luY5OtqMV6RZ6UiuM
txTRk/s574HaFMrxX993ZEdpkJZgELxxQ+fYNZrhG8DdSqZB0ProkXKnUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVo5o0aDeuH/lfZAnPgznHLVmkwMB8GA1UdIwQY
MBaAFNwDCvjHU4ucWvhS8cQqF1qvRvfgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84ZjVlNzUtMTMzNC00ZmIwLTlmNmEt
YmRkYzE4YzdhM2YzLzEvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84ZjVlNzUtMTMzNC00ZmIwLTlmNmEtYmRkYzE4YzdhM2Yz
LzEvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxFoziqP
YSBvfBmQQlXe3bfXe6+PIOf8hseumJC3vPUTCGaDepP5SjXcU3Kr8RqFDtKQhMPL
7D5OYMCHYO+KY4gsZeuMs9a6XJ1kvtchY5kkiX1g6e10yIHxriGyOVA7w4HB9kDj
WeRe0jSSPWXRhFByBkfKI56Egk8E4IQhxh/jiFTnnyl/4+3YGpgcPRXkJZQd41Nq
2s7LWHS3LOaxR+I4xMwTL5JYW7XsCyUq1CKNHTEIdCyQ4WgAwdq3RI18a5KulgWU
T4tHf5D3Uh3vnBqdXzmsnGdSdvIt0bwTUWkOcB1nbf25Qqpf7ccHQsTO5t4kdzVV
o+Lnptns0lyDYA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:38 2025 by rpki-client on console-fra.rpki-client.org