Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
File: 3xT-bNqQya_oB1kNLVA3SnaijhM.mft (raw, json)
Hash identifier: m08Gw5KSAD5sEapOwWAfepRC/vXk0Wns/EVJ3R33ZsA=
Subject key identifier: 1A:C9:81:E7:5F:A8:AF:D6:5A:C7:CF:64:F2:9F:87:9B:53:B8:59:03
Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Certificate serial: 019512107F42376F995CDDC601E7791293D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
Manifest number: 1050
Signing time: Mon 17 Feb 2025 04:00:25 +0000
Manifest this update: Mon 17 Feb 2025 04:00:25 +0000
Manifest next update: Tue 18 Feb 2025 04:00:25 +0000
Files and hashes: 1: 3xT-bNqQya_oB1kNLVA3SnaijhM.crl (hash: Df+CeafwI5P9Uzi8nQjp94uDxxm1W7gpYhWEFweexy8=)
2: Swt5oFMQEQM3RtDOFxZCp2VObOM.roa (hash: d7VQjqZCXdGvodDw1gYlaDWjc+rRxAbFcC4KKSSYHOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:7f:42:37:6f:99:5c:dd:c6:01:e7:79:12:93:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Validity
Not Before: Feb 17 04:00:25 2025 GMT
Not After : Feb 18 04:00:25 2025 GMT
Subject: CN=1ac981e75fa8afd65ac7cf64f29f879b53b85903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:c3:e2:5c:25:8b:c5:21:de:1f:f4:59:13:
b2:dd:c3:62:99:ac:1c:b2:e8:8f:50:4a:5b:aa:ee:
e0:20:d5:6d:93:9d:5e:0a:2b:ef:e5:64:47:63:bf:
70:a5:c2:c6:08:df:97:df:1b:5d:d7:f3:2a:4d:2b:
61:f5:b0:d7:c6:9b:31:58:a6:b1:fc:c2:cb:d9:2c:
ce:85:d0:1d:5c:77:42:7e:54:8f:d6:b7:06:5e:6c:
69:d6:39:91:66:1b:71:dc:93:a9:e4:1f:06:4c:11:
c7:e4:c9:67:1b:bd:c7:55:e5:ad:02:31:b4:77:32:
69:5f:de:ed:9b:05:96:0e:50:ae:fa:e1:5b:fd:f8:
1c:fe:db:41:b6:ac:f5:54:78:cb:ef:80:ae:b9:c1:
f9:84:e3:38:a0:d9:76:7e:1b:b0:0d:2e:c9:cb:70:
aa:9d:c0:46:b3:a4:ab:14:a3:73:b7:b8:de:7f:2f:
43:fb:26:3a:22:45:74:a0:2a:e2:7c:4c:17:c7:50:
23:44:dc:41:72:72:eb:ae:4a:d8:ef:c1:b7:8e:5c:
1c:b4:e0:68:7d:6f:38:c9:cf:47:71:37:1c:fb:31:
48:80:a4:29:75:0b:d0:c5:26:9d:99:f7:e8:ef:fd:
1a:0e:26:01:03:21:ef:1f:2c:fb:ff:bf:f8:da:a3:
7a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C9:81:E7:5F:A8:AF:D6:5A:C7:CF:64:F2:9F:87:9B:53:B8:59:03
X509v3 Authority Key Identifier:
keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:76:f4:8c:b4:e4:e8:7c:4b:c5:72:43:3a:f1:1a:bc:62:ce:
3e:b5:b7:a9:29:de:c6:6d:11:9e:d3:87:b8:03:c7:f2:50:94:
20:49:2c:75:c7:a7:36:bf:b8:74:0c:b9:66:d4:11:89:5a:10:
ef:66:f5:d4:50:c4:06:40:59:de:17:5e:9b:80:48:20:8b:1b:
55:07:75:29:fe:b3:6b:c4:32:89:58:47:1f:3b:02:af:78:8a:
2b:93:10:b7:a5:66:56:57:0d:8d:15:52:0c:47:bd:c4:b7:81:
57:f5:a9:6c:95:ca:73:23:f5:07:95:cd:22:e8:3d:87:f9:dd:
ed:f4:aa:ab:ee:09:7b:18:02:ea:36:42:5f:a9:b2:38:d7:c0:
07:6e:9f:c8:89:d4:5a:4f:29:e2:e2:a7:88:90:8a:4b:3a:2e:
9a:8f:3c:92:ed:f8:66:09:42:55:f1:ec:c0:b6:e0:76:b2:80:
03:32:54:c3:cf:ef:cf:82:32:fe:78:46:ed:c2:58:58:09:db:
c6:1d:65:b8:8e:47:e8:e0:26:f3:d7:1a:c7:55:00:b0:25:f3:
77:8a:49:a1:9e:1e:58:75:d5:5f:26:27:32:87:6e:a9:8c:9a:
c9:4f:3e:2f:13:ed:0b:5c:b8:4f:7f:68:57:68:dc:16:05:29:
01:c3:59:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEH9CN2+ZXN3GAed5EpPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTRmZTZjZGE5MGM5YWZlODA3NTkwZDJkNTAzNzRhNzZh
MjhlMTMwHhcNMjUwMjE3MDQwMDI1WhcNMjUwMjE4MDQwMDI1WjAzMTEwLwYDVQQD
EygxYWM5ODFlNzVmYThhZmQ2NWFjN2NmNjRmMjlmODc5YjUzYjg1OTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArorD4lwli8Uh3h/0WROy3cNimawc
suiPUEpbqu7gINVtk51eCivv5WRHY79wpcLGCN+X3xtd1/MqTSth9bDXxpsxWKax
/MLL2SzOhdAdXHdCflSP1rcGXmxp1jmRZhtx3JOp5B8GTBHH5MlnG73HVeWtAjG0
dzJpX97tmwWWDlCu+uFb/fgc/ttBtqz1VHjL74CuucH5hOM4oNl2fhuwDS7Jy3Cq
ncBGs6SrFKNzt7jefy9D+yY6IkV0oCrifEwXx1AjRNxBcnLrrkrY78G3jlwctOBo
fW84yc9HcTcc+zFIgKQpdQvQxSadmffo7/0aDiYBAyHvHyz7/7/42qN6uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrJgedfqK/WWsfPZPKfh5tTuFkDMB8GA1UdIwQY
MBaAFN8U/mzakMmv6AdZDS1QN0p2oo4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAt
ZGE3MzhhMzkwZjZlLzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAtZGE3MzhhMzkwZjZl
LzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXb0jLTk
6HxLxXJDOvEavGLOPrW3qSnexm0RntOHuAPH8lCUIEksdcenNr+4dAy5ZtQRiVoQ
72b11FDEBkBZ3hdem4BIIIsbVQd1Kf6za8QyiVhHHzsCr3iKK5MQt6VmVlcNjRVS
DEe9xLeBV/WpbJXKcyP1B5XNIug9h/nd7fSqq+4JexgC6jZCX6myONfAB26fyInU
Wk8p4uKniJCKSzoumo88ku34ZglCVfHswLbgdrKAAzJUw8/vz4Iy/nhG7cJYWAnb
xh1luI5H6OAm89cax1UAsCXzd4pJoZ4eWHXVXyYnModuqYyayU8+LxPtC1y4T39o
V2jcFgUpAcNZZQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:49 2025 by rpki-client