Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
File: f3BJpbLfBi_E4RlYQGU8P1kgySE.mft (raw, json)
Hash identifier: jNM9iFMW0h2h1qdGrD0e+7yGQPaWF95HvpDf+Mk8pxc=
Subject key identifier: 9B:68:BF:43:FF:CC:98:E6:2C:6B:48:C6:71:23:E8:B9:E6:C9:44:F6
Authority key identifier: 7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
Certificate issuer: /CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Certificate serial: 01964D7E761011F649B43E8937D53683E29D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
Manifest number: 1488
Signing time: Sat 19 Apr 2025 10:00:55 +0000
Manifest this update: Sat 19 Apr 2025 10:00:55 +0000
Manifest next update: Sun 20 Apr 2025 10:00:55 +0000
Files and hashes: 1: f3BJpbLfBi_E4RlYQGU8P1kgySE.crl (hash: 3K1sJywwRh98MLe+Yx+YTCxIq4UjqtqYroSZV8nWrHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:76:10:11:f6:49:b4:3e:89:37:d5:36:83:e2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Validity
Not Before: Apr 19 10:00:55 2025 GMT
Not After : Apr 20 10:00:55 2025 GMT
Subject: CN=9b68bf43ffcc98e62c6b48c67123e8b9e6c944f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:53:76:f4:6c:16:25:e0:3f:11:d6:60:98:
90:8f:c7:88:73:02:33:54:5e:3f:e8:59:f6:c4:8a:
f6:c1:39:07:3a:a9:10:cc:83:20:56:73:f1:b8:a3:
a5:be:44:54:98:e3:1e:e3:06:2b:91:c2:d5:01:b4:
da:84:fb:fd:2e:3f:9a:69:40:44:2f:98:3b:62:fa:
5b:f4:ad:54:77:be:ca:6a:6d:4a:00:c1:a6:9c:1f:
ab:13:45:68:62:47:2b:7d:9f:17:ea:c7:ec:0d:46:
0d:d2:41:cf:c3:47:86:b9:f7:21:1d:6d:a8:23:5a:
08:c5:0e:3d:55:c7:b0:a2:80:0a:1c:4f:85:87:e9:
0f:9b:51:e4:be:28:b3:0e:ba:f4:9d:38:a1:f2:27:
64:15:04:6a:c5:7d:59:a6:3b:90:97:1e:95:2d:be:
4f:b3:24:19:c0:93:e7:bb:33:2d:be:90:38:31:e5:
7c:7b:76:31:07:27:07:46:71:43:06:02:c0:0c:10:
15:4a:d3:77:54:a2:81:51:d1:6d:8a:7d:be:54:94:
7d:9a:99:28:ad:68:13:e6:01:fc:7c:c3:7c:e0:02:
71:9c:79:ab:2b:9f:40:3d:41:71:f6:d5:aa:c3:af:
fa:f8:73:d1:b3:c1:67:ba:b8:bb:1d:9f:01:c9:65:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:68:BF:43:FF:CC:98:E6:2C:6B:48:C6:71:23:E8:B9:E6:C9:44:F6
X509v3 Authority Key Identifier:
keyid:7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e7:b2:f3:a1:4c:82:2d:b9:a0:38:40:09:5c:80:da:4c:36:
b4:c5:2b:8d:dd:d9:ca:a5:12:95:00:51:19:a5:a5:69:e8:75:
aa:86:3e:af:0b:e4:17:a6:65:42:ad:d5:4a:d2:7b:a5:a1:cf:
9b:23:58:b2:6e:ec:c0:3a:53:a2:71:5e:b2:4f:3c:97:af:b4:
30:5c:99:ab:1d:ab:d9:22:70:4f:bb:2d:51:0b:18:ba:f0:3f:
d0:74:04:60:5a:c6:97:ba:2d:6f:ab:10:ca:d6:e6:50:f7:20:
ea:e4:ea:70:f8:81:b2:41:bf:fb:12:fb:17:da:90:79:68:4f:
54:fd:03:32:82:8f:d1:54:22:9e:c7:45:0f:f3:82:b4:4d:d8:
8f:dd:6f:6f:28:1a:7b:c8:ce:ed:f8:f6:83:f3:77:d8:c4:c4:
54:ff:e5:e0:0e:98:e2:89:b1:bd:a9:bd:6c:15:ff:f2:20:7f:
a2:0e:b8:b1:56:c5:dc:1e:87:c8:fc:30:f5:c6:ff:67:5c:f2:
cf:50:93:2c:b6:80:3c:a3:f9:fc:61:05:b1:12:be:72:15:93:
d4:41:85:da:b6:e2:b7:ff:09:0c:64:16:0e:5a:d1:c9:c5:7e:
61:48:5c:65:ce:d6:60:20:99:56:73:27:93:67:92:2f:e8:21:
72:c6:c9:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfnYQEfZJtD6JN9U2g+KdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNzA0OWE1YjJkZjA2MmZjNGUxMTk1ODQwNjUzYzNmNTky
MGM5MjEwHhcNMjUwNDE5MTAwMDU1WhcNMjUwNDIwMTAwMDU1WjAzMTEwLwYDVQQD
Eyg5YjY4YmY0M2ZmY2M5OGU2MmM2YjQ4YzY3MTIzZThiOWU2Yzk0NGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1xTdvRsFiXgPxHWYJiQj8eIcwIz
VF4/6Fn2xIr2wTkHOqkQzIMgVnPxuKOlvkRUmOMe4wYrkcLVAbTahPv9Lj+aaUBE
L5g7Yvpb9K1Ud77Kam1KAMGmnB+rE0VoYkcrfZ8X6sfsDUYN0kHPw0eGufchHW2o
I1oIxQ49VcewooAKHE+Fh+kPm1HkviizDrr0nTih8idkFQRqxX1ZpjuQlx6VLb5P
syQZwJPnuzMtvpA4MeV8e3YxBycHRnFDBgLADBAVStN3VKKBUdFtin2+VJR9mpko
rWgT5gH8fMN84AJxnHmrK59APUFx9tWqw6/6+HPRs8Fnuri7HZ8ByWX5kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtov0P/zJjmLGtIxnEj6LnmyUT2MB8GA1UdIwQY
MBaAFH9wSaWy3wYvxOEZWEBlPD9ZIMkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjNCSnBiTGZCaV9FNFJsWVFHVThQMWtneVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hM2IwOWMtYTk0YS00NmU1LWE3NzYt
ZjQwZWQ1MDFmMWRmLzEvZjNCSnBiTGZCaV9FNFJsWVFHVThQMWtneVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9hM2IwOWMtYTk0YS00NmU1LWE3NzYtZjQwZWQ1MDFmMWRm
LzEvZjNCSnBiTGZCaV9FNFJsWVFHVThQMWtneVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeey86FM
gi25oDhACVyA2kw2tMUrjd3ZyqUSlQBRGaWlaeh1qoY+rwvkF6ZlQq3VStJ7paHP
myNYsm7swDpTonFesk88l6+0MFyZqx2r2SJwT7stUQsYuvA/0HQEYFrGl7otb6sQ
ytbmUPcg6uTqcPiBskG/+xL7F9qQeWhPVP0DMoKP0VQinsdFD/OCtE3Yj91vbyga
e8jO7fj2g/N32MTEVP/l4A6Y4omxvam9bBX/8iB/og64sVbF3B6HyPww9cb/Z1zy
z1CTLLaAPKP5/GEFsRK+chWT1EGF2rbit/8JDGQWDlrRycV+YUhcZc7WYCCZVnMn
k2eSL+ghcsbJVw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:07:08 2025 by rpki-client