Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: N7QXh5kAhOEv1EY/DZ4LdYkpWLThHJms+VjhG+iPi98=
Subject key identifier: 2F:C7:E6:CF:30:A4:42:7F:A1:29:90:3E:68:95:37:4F:F8:EB:83:D7
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 019640D4E87F440574C9B8A4E33915D0F3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 144D
Signing time: Wed 16 Apr 2025 23:00:16 +0000
Manifest this update: Wed 16 Apr 2025 23:00:16 +0000
Manifest next update: Thu 17 Apr 2025 23:00:16 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: hR8eEbpueKlMYFth0nsXC5t/ffdTuBbolTgvuaZQz/o=)
2: bPbl9DKxYJUxR3ZUVzukhGWYurM.roa (hash: FAnYMWhXeH8TjI8m2ivn5nzVc0hLKvZ4QbjQQh/aekU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:d4:e8:7f:44:05:74:c9:b8:a4:e3:39:15:d0:f3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Apr 16 23:00:16 2025 GMT
Not After : Apr 17 23:00:16 2025 GMT
Subject: CN=2fc7e6cf30a4427fa129903e6895374ff8eb83d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:93:45:aa:52:32:72:38:68:d5:22:3b:fb:
f8:95:2c:68:87:73:8c:97:cd:ba:31:f2:a9:9a:99:
07:a0:37:5e:16:06:e3:75:f2:63:a9:8c:91:da:64:
4e:3e:b4:81:b8:88:93:c2:13:03:40:03:b5:99:bc:
7f:f5:32:16:19:0d:19:7a:2f:97:cb:13:15:a4:4d:
ec:59:13:8f:a6:ba:5d:a9:f7:ff:88:ba:c3:67:a8:
fd:62:b0:25:d8:2e:be:bf:31:1f:e2:c7:ff:ea:e3:
53:27:fd:0d:c2:28:5c:8f:dc:f8:47:38:94:41:be:
86:25:46:ed:43:4e:83:5e:6f:e5:b3:8e:85:1f:52:
30:4a:92:a9:53:e1:34:e8:ba:2a:40:d0:54:3a:c2:
d9:c4:98:a6:0f:ff:1d:c5:ae:90:d3:7d:e2:cf:63:
66:28:f4:6d:f6:04:c3:f3:e3:5b:e7:80:ed:b1:e2:
b3:58:2e:4c:17:fd:d1:b9:29:1a:29:19:9b:2e:94:
8b:b6:0e:02:fc:49:56:9b:a3:7d:06:67:16:d5:d7:
c3:af:78:87:f9:5e:0e:3a:5d:9e:1e:f5:2c:b0:4a:
0e:99:9d:31:55:1f:99:83:5e:ed:25:60:e6:03:7a:
44:57:3f:1d:96:ae:42:43:59:75:27:f2:6a:83:7d:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C7:E6:CF:30:A4:42:7F:A1:29:90:3E:68:95:37:4F:F8:EB:83:D7
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:82:eb:fd:7e:76:86:42:1c:cc:29:b0:82:d2:d4:3c:e4:45:
12:09:d5:2c:2f:a4:64:9a:93:e8:70:a7:43:93:63:29:00:52:
21:1c:fc:1c:fe:a7:86:7a:46:de:25:ea:c0:a6:51:09:a6:0c:
5e:7b:5b:e2:fb:9d:4f:14:a9:4b:1a:ca:ac:6e:3c:77:53:1c:
04:30:e6:43:cb:32:31:82:68:b2:e8:92:97:0a:31:af:e2:14:
5e:f6:5c:e0:aa:7d:b2:b7:ae:d6:da:fa:60:40:c1:d0:a3:ae:
b1:88:47:a3:7f:54:ee:d3:64:c7:07:74:22:f4:ed:83:35:1b:
52:90:d0:37:0c:fb:d9:e4:85:f9:65:82:40:69:5f:a4:9a:89:
38:d1:ad:67:93:f4:f2:9e:be:c5:2d:63:41:79:8d:d5:0b:03:
2c:b2:bd:c6:f2:97:6f:08:b8:39:f1:c7:6f:26:44:62:4d:94:
36:c5:ca:d5:1b:4e:58:d7:33:c1:07:4f:5b:04:e8:ba:ee:aa:
6b:70:8b:20:d6:22:72:71:40:e1:69:de:35:1f:ff:45:c4:9f:
c5:43:94:dc:d7:90:34:ae:d0:44:0e:c5:b7:e7:4f:60:58:42:
0e:f7:00:32:91:8a:13:d5:2f:69:df:0b:9c:b3:3e:be:98:0f:
f6:88:c9:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZA1Oh/RAV0ybik4zkV0PP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDIyYzI0MTQ3ZWM3OWZhOTA2NDY0YWIxNDNmZDQ3ZTNi
ZWIzYTEwHhcNMjUwNDE2MjMwMDE2WhcNMjUwNDE3MjMwMDE2WjAzMTEwLwYDVQQD
EygyZmM3ZTZjZjMwYTQ0MjdmYTEyOTkwM2U2ODk1Mzc0ZmY4ZWI4M2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00KTRapSMnI4aNUiO/v4lSxoh3OM
l826MfKpmpkHoDdeFgbjdfJjqYyR2mROPrSBuIiTwhMDQAO1mbx/9TIWGQ0Zei+X
yxMVpE3sWROPprpdqff/iLrDZ6j9YrAl2C6+vzEf4sf/6uNTJ/0Nwihcj9z4RziU
Qb6GJUbtQ06DXm/ls46FH1IwSpKpU+E06LoqQNBUOsLZxJimD/8dxa6Q033iz2Nm
KPRt9gTD8+Nb54DtseKzWC5MF/3RuSkaKRmbLpSLtg4C/ElWm6N9BmcW1dfDr3iH
+V4OOl2eHvUssEoOmZ0xVR+Zg17tJWDmA3pEVz8dlq5CQ1l1J/Jqg305NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/H5s8wpEJ/oSmQPmiVN0/464PXMB8GA1UdIwQY
MBaAFNxCLCQUfsefqQZGSrFD/UfjvrOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMt
MjE2NTEzNmM5ZDlhLzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMtMjE2NTEzNmM5ZDlh
LzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4Lr/X52
hkIczCmwgtLUPORFEgnVLC+kZJqT6HCnQ5NjKQBSIRz8HP6nhnpG3iXqwKZRCaYM
Xntb4vudTxSpSxrKrG48d1McBDDmQ8syMYJosuiSlwoxr+IUXvZc4Kp9sreu1tr6
YEDB0KOusYhHo39U7tNkxwd0IvTtgzUbUpDQNwz72eSF+WWCQGlfpJqJONGtZ5P0
8p6+xS1jQXmN1QsDLLK9xvKXbwi4OfHHbyZEYk2UNsXK1RtOWNczwQdPWwTouu6q
a3CLINYicnFA4WneNR//RcSfxUOU3NeQNK7QRA7Ft+dPYFhCDvcAMpGKE9Uvad8L
nLM+vpgP9ojJtA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 06:28:49 2025 by rpki-client