Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File: 3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier: yjVDA4mMJEk2mVnZUOFQXv0I9M4VeYODCTmnnQfp65M=
Subject key identifier: 3A:D1:05:D5:16:58:B0:A4:EC:6C:68:A2:A9:DF:EA:3B:02:16:D7:A5
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer: /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial: 019651C86D3CBB4ABCC02DD7CD2DF252AB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number: 11EE
Signing time: Sun 20 Apr 2025 06:00:11 +0000
Manifest this update: Sun 20 Apr 2025 06:00:11 +0000
Manifest next update: Mon 21 Apr 2025 06:00:11 +0000
Files and hashes: 1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: GuvRqD8IQQ4MiLWkLmjhyc9bsgSJvs0sWRQc5oyPWWU=)
2: nyyFnipIH8x-WXxVr5E31pzM3bw.roa (hash: F30BRqsOUfGjHcN42efG2ZXnRs6ncB05ESHRlvFrG98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:6d:3c:bb:4a:bc:c0:2d:d7:cd:2d:f2:52:ab:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Validity
Not Before: Apr 20 06:00:11 2025 GMT
Not After : Apr 21 06:00:11 2025 GMT
Subject: CN=3ad105d51658b0a4ec6c68a2a9dfea3b0216d7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1f:4d:0c:4f:f2:87:6e:0d:23:0b:95:01:72:
06:c2:b0:64:13:ca:f2:a0:b5:ea:1b:f1:ab:20:b4:
5e:6a:6f:f2:2d:7d:12:c0:0f:93:ec:79:fe:e1:0f:
bf:1f:1f:93:8a:3c:48:de:58:c3:b0:26:aa:fc:e5:
1c:cd:e7:8d:25:97:af:7f:c9:8c:9d:9e:cc:89:70:
74:97:a9:72:74:a3:81:6f:ee:9b:96:62:6d:9a:1f:
a4:d3:10:59:35:15:22:5b:9e:a8:95:09:57:e1:99:
3e:b0:e5:c9:24:53:62:0f:b6:ae:bf:17:ef:5c:d1:
c8:8f:09:4e:f6:50:58:55:2d:f1:3c:1f:59:eb:a3:
a5:f2:67:52:64:08:2d:c1:ec:e4:a3:78:b5:21:97:
12:8b:44:4c:bb:c4:cb:72:e6:bf:35:b2:09:1c:7c:
b4:e4:e1:6a:a7:2b:70:16:1d:fe:20:5c:3b:ab:89:
7e:6b:ab:64:de:d4:ca:40:6e:14:f7:2a:66:b7:bd:
6e:a7:a9:13:a2:eb:aa:b2:db:6d:c2:ea:f8:bd:f0:
7f:56:0d:dc:37:dc:7e:e8:6a:b9:57:5a:90:db:40:
d9:d2:58:f3:81:5e:ba:26:62:94:70:14:aa:41:e7:
99:68:b7:94:a2:d5:ce:f1:85:77:5e:43:33:68:00:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D1:05:D5:16:58:B0:A4:EC:6C:68:A2:A9:DF:EA:3B:02:16:D7:A5
X509v3 Authority Key Identifier:
keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e7:6c:ee:d6:10:90:59:97:49:f2:2b:13:36:3d:54:55:f3:
a5:2b:f6:d3:62:ad:de:99:1d:7a:02:2a:05:82:61:0e:d9:53:
91:77:bf:11:cc:42:9b:55:24:3d:9f:c6:bf:c1:19:d7:7e:40:
23:b3:3d:76:07:df:97:f5:63:2b:e4:d5:b4:cc:54:1b:71:2e:
12:0e:46:a1:6f:94:53:64:ab:49:c2:6a:32:77:ac:f3:e2:51:
0f:af:ff:d7:e9:33:1d:65:05:6b:42:19:52:65:49:ab:46:b9:
cc:21:02:93:5a:de:6b:7c:f6:df:f9:cb:fc:91:48:1f:00:1b:
16:7e:fa:5f:fa:42:ba:cd:c6:28:60:00:59:29:d8:cb:88:aa:
bf:9e:fd:6e:69:98:1e:b9:53:86:32:71:ea:5a:72:d7:96:2a:
03:97:16:f8:c9:08:e0:67:f1:91:5a:f0:6f:4b:38:9a:6e:c8:
e1:7a:75:68:c3:56:6f:09:d0:a4:73:58:b5:91:d4:f4:84:a8:
60:f1:8d:ed:9e:bc:83:fc:58:db:a4:bd:34:38:0d:0b:4b:7c:
87:d0:6f:1d:b7:b9:b5:46:c7:be:d7:28:53:02:de:e1:ad:db:
86:0f:4a:97:23:05:5e:64:6d:12:19:c5:64:47:5c:5c:ec:aa:
42:5d:5f:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRyG08u0q8wC3XzS3yUqsEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNWZhY2NhMTRkZTA4MTc0ZWY1Yzk2YzkxZjFlNzgyNWY0
MmQwN2IwHhcNMjUwNDIwMDYwMDExWhcNMjUwNDIxMDYwMDExWjAzMTEwLwYDVQQD
EygzYWQxMDVkNTE2NThiMGE0ZWM2YzY4YTJhOWRmZWEzYjAyMTZkN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx9NDE/yh24NIwuVAXIGwrBkE8ry
oLXqG/GrILReam/yLX0SwA+T7Hn+4Q+/Hx+TijxI3ljDsCaq/OUczeeNJZevf8mM
nZ7MiXB0l6lydKOBb+6blmJtmh+k0xBZNRUiW56olQlX4Zk+sOXJJFNiD7auvxfv
XNHIjwlO9lBYVS3xPB9Z66Ol8mdSZAgtwezko3i1IZcSi0RMu8TLcua/NbIJHHy0
5OFqpytwFh3+IFw7q4l+a6tk3tTKQG4U9ypmt71up6kTouuqstttwur4vfB/Vg3c
N9x+6Gq5V1qQ20DZ0ljzgV66JmKUcBSqQeeZaLeUotXO8YV3XkMzaACaYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrRBdUWWLCk7Gxooqnf6jsCFtelMB8GA1UdIwQY
MBaAFNxfrMoU3ggXTvXJbJHx54JfQtB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Ytc3loVGVDQmRPOWNsc2tmSG5nbDlDMEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wODkzZjEtZmZiNC00NmIzLWJmMjct
YTcwMTY5ODBjODZmLzEvM0Ytc3loVGVDQmRPOWNsc2tmSG5nbDlDMEhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wODkzZjEtZmZiNC00NmIzLWJmMjctYTcwMTY5ODBjODZm
LzEvM0Ytc3loVGVDQmRPOWNsc2tmSG5nbDlDMEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+ds7tYQ
kFmXSfIrEzY9VFXzpSv202Kt3pkdegIqBYJhDtlTkXe/EcxCm1UkPZ/Gv8EZ135A
I7M9dgffl/VjK+TVtMxUG3EuEg5GoW+UU2SrScJqMnes8+JRD6//1+kzHWUFa0IZ
UmVJq0a5zCECk1rea3z23/nL/JFIHwAbFn76X/pCus3GKGAAWSnYy4iqv579bmmY
HrlThjJx6lpy15YqA5cW+MkI4GfxkVrwb0s4mm7I4Xp1aMNWbwnQpHNYtZHU9ISo
YPGN7Z68g/xY26S9NDgNC0t8h9BvHbe5tUbHvtcoUwLe4a3bhg9KlyMFXmRtEhnF
ZEdcXOyqQl1fbA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:12 2025 by rpki-client