Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: wlg0QWXNH+Vcpp/GmyjS1P1wni1qdIIoMSYrQjE3O8g=
Subject key identifier: 24:34:32:AE:56:8A:90:0B:A2:40:7A:86:84:38:A5:A7:AD:F5:B3:BE
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 0196602983C72CC0886F8ABAC0E7BA553A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 0B9B
Signing time: Wed 23 Apr 2025 01:00:55 +0000
Manifest this update: Wed 23 Apr 2025 01:00:55 +0000
Manifest next update: Thu 24 Apr 2025 01:00:55 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: k8NuDidiFrbVHiyfWIftuOC9KvoZMkO7HDmucAHKg6w=)
2: mKsKKQCdLodyBncOeNIhWtaYAoQ.roa (hash: fizUUsz/TAb+LHuegB83yr/hnzwxKplkZhpso2ufXV4=)
3: xfMF5Mt4jBFimRoPjDOTrOYZb_c.roa (hash: GuaLpdFfqfVEq3DS5+BP2JqM2gB3tItjQlR22xolKBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:29:83:c7:2c:c0:88:6f:8a:ba:c0:e7:ba:55:3a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Apr 23 01:00:55 2025 GMT
Not After : Apr 24 01:00:55 2025 GMT
Subject: CN=243432ae568a900ba2407a868438a5a7adf5b3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5c:de:ee:69:6c:f8:b9:81:5a:13:ee:d7:44:
2e:ef:85:06:4d:94:f7:12:b1:5c:ad:91:3a:f1:f4:
c1:dd:6c:2b:1c:39:7a:4c:76:bc:37:dc:c3:d1:a8:
1a:4f:b0:ca:46:ee:3d:e2:3b:75:d7:8b:7b:60:b1:
eb:70:55:b4:9e:f7:a2:f7:a9:8d:74:a9:0b:18:3e:
53:45:00:1d:71:18:03:11:f7:32:3a:14:ee:de:6e:
a7:12:d8:22:0e:51:60:db:71:da:d6:2f:2f:c2:f2:
9f:22:4e:55:87:24:ae:38:9d:d2:15:6c:b6:b7:58:
a0:2f:8d:bb:98:94:d5:82:fa:42:cd:2b:fd:b7:c1:
e2:b1:09:48:5d:ef:55:e0:ef:d5:d5:8a:14:e1:1a:
d8:1e:93:49:2c:0d:30:ea:a1:48:3a:90:5b:28:75:
2a:f3:7d:4e:25:c5:49:53:d8:62:48:46:df:50:d3:
88:6d:0b:ae:b1:22:38:50:89:4a:3e:07:e9:04:3e:
04:09:b3:7f:bf:dc:e3:ea:40:4c:a5:bb:32:8a:80:
40:9e:b5:a9:97:54:59:22:30:34:65:20:5a:24:a1:
5e:d5:3b:04:40:69:a6:ca:b7:20:a3:c3:8d:ac:7b:
a5:ae:45:6e:65:51:42:99:87:12:fc:b7:85:f4:46:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:34:32:AE:56:8A:90:0B:A2:40:7A:86:84:38:A5:A7:AD:F5:B3:BE
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:31:42:f6:d4:6d:16:5f:24:63:5e:db:2f:29:e0:cc:af:be:
a5:78:84:e5:77:cb:d0:e1:8f:35:11:4b:c5:03:d1:be:05:b3:
f5:77:4f:49:61:d7:b9:6a:f2:e9:b1:44:7f:4d:b1:1a:a7:0c:
01:37:cb:28:7c:db:56:16:15:c9:d9:1a:ba:89:ea:a2:d7:3a:
48:73:8e:d4:69:93:73:99:32:97:76:2a:70:ff:cf:3f:f2:67:
0e:12:c0:ee:fb:c5:da:8c:34:24:53:9f:87:19:85:cf:8c:df:
5a:20:82:08:8a:bf:db:74:77:fc:56:39:34:fc:07:24:ce:ef:
b7:00:29:4f:98:8c:78:d6:51:ee:2a:69:6d:70:50:c5:e2:ac:
28:ac:8c:d6:0f:c6:49:a0:1a:4d:6f:3d:4a:d2:45:0a:17:af:
7d:68:f0:48:c6:c8:05:b3:f4:be:93:7d:1d:6b:c6:c7:56:3d:
7b:03:16:e5:16:2b:91:8f:7a:e4:86:b7:7a:95:95:8f:29:db:
bf:37:48:fa:3b:2c:26:1e:3a:48:09:89:f5:b6:6f:5b:ed:de:
3f:eb:f5:ba:57:81:b2:9b:fd:a0:b4:1b:6a:ec:16:b0:d2:08:
7d:0a:39:7d:d5:af:97:84:75:8c:55:73:f3:90:7c:e9:a8:b5:
1d:04:bf:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZgKYPHLMCIb4q6wOe6VTp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOGNiNGExMWNhYmFjMjA0YWRmYjhhNWI1ODdlMzJmZWU0
YTFiNTUwHhcNMjUwNDIzMDEwMDU1WhcNMjUwNDI0MDEwMDU1WjAzMTEwLwYDVQQD
EygyNDM0MzJhZTU2OGE5MDBiYTI0MDdhODY4NDM4YTVhN2FkZjViM2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lze7mls+LmBWhPu10Qu74UGTZT3
ErFcrZE68fTB3WwrHDl6THa8N9zD0agaT7DKRu494jt114t7YLHrcFW0nvei96mN
dKkLGD5TRQAdcRgDEfcyOhTu3m6nEtgiDlFg23Ha1i8vwvKfIk5VhySuOJ3SFWy2
t1igL427mJTVgvpCzSv9t8HisQlIXe9V4O/V1YoU4RrYHpNJLA0w6qFIOpBbKHUq
831OJcVJU9hiSEbfUNOIbQuusSI4UIlKPgfpBD4ECbN/v9zj6kBMpbsyioBAnrWp
l1RZIjA0ZSBaJKFe1TsEQGmmyrcgo8ONrHulrkVuZVFCmYcS/LeF9EbpawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQ0Mq5WipALokB6hoQ4paet9bO+MB8GA1UdIwQY
MBaAFNyMtKEcq6wgSt+4pbWH4y/uShtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDIt
OTlkNWUwN2JhZTc2LzEvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDItOTlkNWUwN2JhZTc2
LzEvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzFC9tRt
Fl8kY17bLyngzK++pXiE5XfL0OGPNRFLxQPRvgWz9XdPSWHXuWry6bFEf02xGqcM
ATfLKHzbVhYVydkauonqotc6SHOO1GmTc5kyl3YqcP/PP/JnDhLA7vvF2ow0JFOf
hxmFz4zfWiCCCIq/23R3/FY5NPwHJM7vtwApT5iMeNZR7ippbXBQxeKsKKyM1g/G
SaAaTW89StJFChevfWjwSMbIBbP0vpN9HWvGx1Y9ewMW5RYrkY965Ia3epWVjynb
vzdI+jssJh46SAmJ9bZvW+3eP+v1uleBspv9oLQbauwWsNIIfQo5fdWvl4R1jFVz
85B86ai1HQS/kA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 07:59:23 2025 by rpki-client