Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: OdvlSSwW/XjZLnyAnzRgrIBRtou/odVla/LKltqP8NA=
Subject key identifier: BF:74:5B:B1:BC:17:CA:68:60:FC:52:30:F9:AC:72:91:20:D3:4E:5C
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 019512106927B6CD5C81CF0B115440801381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 04:00:20 +0000
Manifest this update: Mon 17 Feb 2025 04:00:20 +0000
Manifest next update: Tue 18 Feb 2025 04:00:20 +0000
Files and hashes: 1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: Jhw3Y5DJJGi6Lle2zjOIXPPyTqw5o0UXc3Goyr6m+OA=)
2: pCf2SBThhhwtPhuM3t9JK4mMkuo.roa (hash: Mxx4vZjePTYoAoss+lZxcdSgohHlT76+FicTsz9ie3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:69:27:b6:cd:5c:81:cf:0b:11:54:40:80:13:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Feb 17 04:00:20 2025 GMT
Not After : Feb 18 04:00:20 2025 GMT
Subject: CN=bf745bb1bc17ca6860fc5230f9ac729120d34e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:91:f3:ce:9b:69:e0:49:87:d2:ef:d0:af:
49:6a:fb:11:f4:c8:5a:a7:1a:a2:94:6f:9d:58:5e:
91:77:82:b3:01:ab:45:84:81:d0:bf:50:6a:a9:f8:
7a:11:5b:97:7c:c0:59:85:8a:79:40:26:08:2c:14:
16:c1:de:56:59:02:3e:76:35:e7:af:80:49:8a:20:
72:de:54:16:dd:08:6c:b1:48:af:85:ff:ff:94:79:
84:ca:d4:2a:84:df:de:71:ea:49:2c:2d:b2:55:3c:
b5:92:4e:58:65:c5:eb:0c:fb:1f:56:b5:30:8c:d4:
a6:da:df:df:4b:2e:08:0a:93:97:dc:77:7c:4f:1c:
c9:e4:b0:86:ae:41:27:dc:27:dc:f1:7e:53:f9:25:
e0:bb:bf:7f:96:f4:89:b3:24:63:89:a4:a7:51:b1:
f2:eb:94:af:58:ba:36:d7:c6:76:c6:0c:5f:3e:df:
02:05:75:0a:1e:97:d4:65:3d:98:83:b9:c1:cc:c8:
57:ed:bc:81:0e:a9:12:32:51:3e:67:82:0a:5c:09:
5c:34:57:4b:49:60:62:37:6d:1a:d3:d4:05:53:d2:
48:d2:50:e3:13:75:3c:46:d6:5b:b5:32:ac:63:a5:
86:9b:72:7c:0f:99:53:5d:df:a8:e5:12:cf:bd:92:
21:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:74:5B:B1:BC:17:CA:68:60:FC:52:30:F9:AC:72:91:20:D3:4E:5C
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ac:8a:24:90:c0:01:a1:e0:49:78:1b:7e:6e:e8:55:1f:f8:
40:91:39:d0:02:85:03:e3:2c:61:9f:9f:9a:1d:d0:d6:5f:bf:
2f:8e:be:ae:3d:c9:7b:b4:f1:7e:5e:82:b8:3e:83:6b:f5:8a:
6e:9e:11:80:e9:8e:9d:eb:71:34:3a:8c:8c:df:cc:c6:e5:ee:
3e:56:fc:e4:8d:c0:4c:4a:13:bf:27:dc:5f:78:ca:3f:d8:94:
5c:61:7e:16:0a:e4:11:a8:ca:d0:b9:66:09:a2:aa:28:24:8e:
d4:48:ef:c9:20:a4:98:b4:a8:e3:2b:00:da:d5:4c:fc:96:3a:
47:1f:e1:d2:72:86:dc:68:da:fd:d5:fe:b5:39:c1:f3:e4:cb:
01:6c:d6:62:0f:07:13:9a:8b:c7:7a:12:16:ee:a6:86:15:35:
3e:a2:f9:62:c3:d6:a6:a2:2c:4f:41:68:1f:08:fe:c7:89:9b:
07:e3:c4:5c:80:45:4c:8d:85:a9:df:16:b1:b0:91:df:69:ca:
f1:86:3b:c4:e0:ab:16:4f:da:32:41:70:68:76:bd:f5:f4:a2:
82:5c:d5:66:59:0d:3a:92:3d:10:5c:cd:2a:e1:d0:b5:9d:15:
ec:32:c4:05:07:af:21:cb:80:7e:27:00:35:84:67:46:ed:94:
14:04:0c:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEGknts1cgc8LEVRAgBOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNmEzNzQyZjBmMGZiMTIwOTIyYjMzOWVmMDFjZWNmODdm
NGQxZWUwHhcNMjUwMjE3MDQwMDIwWhcNMjUwMjE4MDQwMDIwWjAzMTEwLwYDVQQD
EyhiZjc0NWJiMWJjMTdjYTY4NjBmYzUyMzBmOWFjNzI5MTIwZDM0ZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquqR886baeBJh9Lv0K9JavsR9Mha
pxqilG+dWF6Rd4KzAatFhIHQv1Bqqfh6EVuXfMBZhYp5QCYILBQWwd5WWQI+djXn
r4BJiiBy3lQW3QhssUivhf//lHmEytQqhN/ecepJLC2yVTy1kk5YZcXrDPsfVrUw
jNSm2t/fSy4ICpOX3Hd8TxzJ5LCGrkEn3Cfc8X5T+SXgu79/lvSJsyRjiaSnUbHy
65SvWLo218Z2xgxfPt8CBXUKHpfUZT2Yg7nBzMhX7byBDqkSMlE+Z4IKXAlcNFdL
SWBiN20a09QFU9JI0lDjE3U8RtZbtTKsY6WGm3J8D5lTXd+o5RLPvZIh/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL90W7G8F8poYPxSMPmscpEg005cMB8GA1UdIwQY
MBaAFNxqN0Lw8PsSCSKzOe8Bzs+H9NHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80N2M5NzMtMjA1Yi00MTk3LTg2OTgt
Y2MxZDJjNWUxYjMxLzEvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80N2M5NzMtMjA1Yi00MTk3LTg2OTgtY2MxZDJjNWUxYjMx
LzEvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqyKJJDA
AaHgSXgbfm7oVR/4QJE50AKFA+MsYZ+fmh3Q1l+/L46+rj3Je7Txfl6CuD6Da/WK
bp4RgOmOnetxNDqMjN/MxuXuPlb85I3ATEoTvyfcX3jKP9iUXGF+FgrkEajK0Llm
CaKqKCSO1EjvySCkmLSo4ysA2tVM/JY6Rx/h0nKG3Gja/dX+tTnB8+TLAWzWYg8H
E5qLx3oSFu6mhhU1PqL5YsPWpqIsT0FoHwj+x4mbB+PEXIBFTI2Fqd8WsbCR32nK
8YY7xOCrFk/aMkFwaHa99fSiglzVZlkNOpI9EFzNKuHQtZ0V7DLEBQevIcuAficA
NYRnRu2UFAQMkQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:39 2025 by rpki-client