Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
File: n3Qy9pnL0kmy48nFW976-DmGtEI.mft (raw, json)
Hash identifier: Jo1ejZS5G5ReYwFMNYPfF68iTO2IYaNAQSrs/5Ab3EA=
Subject key identifier: 3C:BE:96:D5:08:D4:E7:BF:E3:40:01:81:F5:4E:03:49:D6:37:65:57
Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Certificate serial: 01958F610CD3BC9D49AE4FC6179EDD1BFC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
Manifest number: 0F5E
Signing time: Thu 13 Mar 2025 12:00:56 +0000
Manifest this update: Thu 13 Mar 2025 12:00:56 +0000
Manifest next update: Fri 14 Mar 2025 12:00:56 +0000
Files and hashes: 1: n3Qy9pnL0kmy48nFW976-DmGtEI.crl (hash: lef5BqZ1tehd+oVzGxje+eAJsyhAqW5eHIOWg+IdTe4=)
2: yY1iNFVSPGpVBCv6e5Q4VD19NB8.roa (hash: Xz+3ntm5iVPl2B9YcE2P65g+xG5FxMjLX4w1n0LEPnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:0c:d3:bc:9d:49:ae:4f:c6:17:9e:dd:1b:fc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Validity
Not Before: Mar 13 12:00:56 2025 GMT
Not After : Mar 14 12:00:56 2025 GMT
Subject: CN=3cbe96d508d4e7bfe3400181f54e0349d6376557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ea:10:5a:8a:5f:eb:f3:29:92:99:8d:34:55:
49:c8:ca:ba:8e:2b:cb:ae:ac:19:76:85:46:c6:d1:
6c:99:50:08:45:79:9c:55:5a:54:7e:32:7d:2c:dd:
eb:8a:3a:fb:e4:22:c4:46:8b:84:a9:24:eb:66:85:
d8:2c:8b:d9:d3:97:eb:40:43:cf:58:93:40:1e:59:
23:59:47:5c:ee:6b:3c:c7:1d:41:56:45:6e:bd:64:
42:28:1e:34:c9:61:5d:7e:45:09:bd:c8:c0:56:66:
61:dc:c8:98:f5:bf:b4:d6:4f:56:14:73:4a:3d:05:
4d:a2:a2:a1:46:3f:f2:58:3f:e9:fd:c7:bf:b4:23:
46:9f:51:07:1f:aa:e9:7a:14:d3:fd:e6:81:a9:04:
54:6c:23:05:09:be:77:27:5c:8b:d9:f8:d6:87:e6:
3f:20:6a:69:3a:23:7f:34:d3:29:74:7b:de:85:b2:
8d:18:9e:f7:5d:af:56:e0:7b:83:b9:21:0e:05:38:
89:e9:2c:b1:25:1b:85:b4:dd:6f:d2:cf:b1:60:92:
42:0d:25:c0:8c:35:f3:25:6c:a8:84:1f:61:fb:13:
54:58:63:81:8c:dc:a9:01:06:88:d1:01:bf:9c:0e:
0f:77:56:46:ed:42:b7:ad:16:8e:8c:08:01:44:db:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BE:96:D5:08:D4:E7:BF:E3:40:01:81:F5:4E:03:49:D6:37:65:57
X509v3 Authority Key Identifier:
keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:83:8d:24:92:9a:91:64:85:de:48:0f:fa:25:4c:39:1f:46:
60:d6:ab:34:7f:c3:e3:1e:04:b3:44:36:9b:e4:0b:27:5f:de:
37:ac:65:c1:d0:fa:52:2f:30:b7:6a:c6:a7:97:4a:1b:45:a8:
6a:fa:f9:37:dc:7a:4e:04:83:a2:81:b4:da:04:08:f5:f1:ea:
b6:e3:28:8f:7e:12:c8:8b:67:09:7c:c0:c0:22:00:a6:86:b2:
a1:b8:1d:6d:34:46:c7:10:f8:0e:11:97:79:e0:d4:58:f8:51:
b3:17:a7:e8:f2:3b:d7:03:5b:b9:be:2f:c8:1d:63:2d:c6:90:
28:05:76:16:b8:34:d3:f4:ad:0c:83:2d:95:76:4a:1f:37:8c:
f4:5a:79:41:e6:88:87:e0:35:95:50:68:49:78:01:93:e7:2b:
94:d4:05:52:06:48:c0:10:ef:e6:35:a5:7b:00:6c:02:b8:45:
3c:18:0b:03:37:42:2f:b4:50:13:03:eb:cb:92:e5:a9:ee:a7:
02:2c:3b:b5:9d:9b:df:f6:18:bf:9f:b3:b7:f1:49:67:f9:c5:
ba:d7:1b:63:7f:c6:90:41:b8:0e:16:e6:2a:48:25:da:d1:85:
95:81:cf:f4:80:af:2a:9f:67:59:99:d2:d6:4d:d3:57:de:28:
cd:e5:c0:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPYQzTvJ1Jrk/GF57dG/w+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNzQzMmY2OTljYmQyNDliMmUzYzljNTViZGVmYWY4Mzk4
NmI0NDIwHhcNMjUwMzEzMTIwMDU2WhcNMjUwMzE0MTIwMDU2WjAzMTEwLwYDVQQD
EygzY2JlOTZkNTA4ZDRlN2JmZTM0MDAxODFmNTRlMDM0OWQ2Mzc2NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eoQWopf6/MpkpmNNFVJyMq6jivL
rqwZdoVGxtFsmVAIRXmcVVpUfjJ9LN3rijr75CLERouEqSTrZoXYLIvZ05frQEPP
WJNAHlkjWUdc7ms8xx1BVkVuvWRCKB40yWFdfkUJvcjAVmZh3MiY9b+01k9WFHNK
PQVNoqKhRj/yWD/p/ce/tCNGn1EHH6rpehTT/eaBqQRUbCMFCb53J1yL2fjWh+Y/
IGppOiN/NNMpdHvehbKNGJ73Xa9W4HuDuSEOBTiJ6SyxJRuFtN1v0s+xYJJCDSXA
jDXzJWyohB9h+xNUWGOBjNypAQaI0QG/nA4Pd1ZG7UK3rRaOjAgBRNtlpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDy+ltUI1Oe/40ABgfVOA0nWN2VXMB8GA1UdIwQY
MBaAFJ90MvaZy9JJsuPJxVve+vg5hrRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wY2YxODctZWNiMy00YjQyLTkxZTQt
NmFkZGZjYjE4Zjk5LzEvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8wY2YxODctZWNiMy00YjQyLTkxZTQtNmFkZGZjYjE4Zjk5
LzEvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYONJJKa
kWSF3kgP+iVMOR9GYNarNH/D4x4Es0Q2m+QLJ1/eN6xlwdD6Ui8wt2rGp5dKG0Wo
avr5N9x6TgSDooG02gQI9fHqtuMoj34SyItnCXzAwCIApoayobgdbTRGxxD4DhGX
eeDUWPhRsxen6PI71wNbub4vyB1jLcaQKAV2Frg00/StDIMtlXZKHzeM9Fp5QeaI
h+A1lVBoSXgBk+crlNQFUgZIwBDv5jWlewBsArhFPBgLAzdCL7RQEwPry5Llqe6n
Aiw7tZ2b3/YYv5+zt/FJZ/nFutcbY3/GkEG4DhbmKkgl2tGFlYHP9ICvKp9nWZnS
1k3TV94ozeXAAw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:47:26 2025 by rpki-client