Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: 6NNkoNLNGsF5xCtcORGnNdEE4My12hgLG+VD9Ssfpns=
Subject key identifier: B8:FD:47:8B:7F:CD:44:98:86:09:9F:EE:62:08:4C:EA:A8:1F:22:39
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 0196439F5B2FFC5E8A38493C293796D764E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 0C25
Signing time: Thu 17 Apr 2025 12:00:39 +0000
Manifest this update: Thu 17 Apr 2025 12:00:39 +0000
Manifest next update: Fri 18 Apr 2025 12:00:39 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: 9jHSB0/P+FOKxv7i2LjOw3zdSNWQO5BoW5Ho1KLq4zU=)
2: pKu7UglcJmA-j3iLVLdtywNO9BE.roa (hash: Zkb8HbwY2s1iIMkolnog2EvROcriM2gwSI0ajYjdw4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:5b:2f:fc:5e:8a:38:49:3c:29:37:96:d7:64:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Apr 17 12:00:39 2025 GMT
Not After : Apr 18 12:00:39 2025 GMT
Subject: CN=b8fd478b7fcd449886099fee62084ceaa81f2239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:30:99:67:b9:59:ee:42:1d:c8:b7:a9:d5:
a8:00:4c:86:ff:3a:9e:49:0e:63:0d:de:43:7f:14:
02:b3:6c:26:a1:b6:e4:3e:4b:17:b2:39:01:56:be:
f2:8f:d2:97:93:3c:69:8a:1f:4e:d8:c6:22:20:b7:
b9:81:23:6d:b2:42:6d:1d:56:fd:0b:c1:0d:4a:5e:
4b:bb:3a:c7:99:d8:f7:38:5f:18:69:94:f6:3d:b4:
a4:79:24:19:84:11:9f:d9:97:4f:fe:e3:f6:01:43:
d3:5a:27:7a:6c:5c:af:78:4a:4d:d2:ec:4b:1e:2d:
ad:06:ad:94:74:c4:06:35:7e:a8:36:5c:cb:73:82:
e6:1a:30:f4:7c:f6:1e:1f:46:06:4c:ba:2b:35:d7:
ac:4b:35:06:1e:ac:4f:22:13:1b:13:28:f1:a5:02:
1b:7b:7f:ba:cb:99:cf:bc:ba:b9:c5:78:1f:73:e8:
8d:7c:f0:32:1c:95:0a:7f:3a:0c:b2:9d:4b:b7:e6:
73:de:f3:c4:35:66:b7:0c:ed:ba:66:59:ba:b3:6c:
a0:7b:cb:13:a0:86:90:02:3c:9d:9c:36:f4:a1:9b:
a2:6a:d0:63:76:6d:52:0a:ad:b0:82:31:0a:41:8f:
c8:49:37:c7:8b:38:43:29:63:bc:a3:c8:11:2b:4a:
69:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FD:47:8B:7F:CD:44:98:86:09:9F:EE:62:08:4C:EA:A8:1F:22:39
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:61:9c:80:e7:b7:95:57:dd:46:e5:d2:e0:1b:ab:0d:a3:ec:
0d:13:8d:fe:05:2f:3f:65:6e:ac:9a:da:2e:05:6d:d0:a4:d8:
ff:83:09:68:89:9d:6f:99:dd:ea:c4:77:aa:e5:04:83:65:fd:
16:59:08:49:32:a6:f6:e9:0c:3b:71:4f:b4:79:13:bd:7d:64:
a7:8c:9c:57:d4:ec:7d:82:07:0d:13:73:b8:33:f2:73:83:e1:
a1:45:d7:d9:da:c0:ef:e5:ea:59:4a:20:bd:da:fd:66:07:08:
47:2a:da:f0:c3:3f:13:7b:fa:7d:3e:37:e0:bd:a4:16:37:b4:
94:d2:62:b1:1f:ea:d9:a9:cd:af:96:57:58:d7:40:64:40:44:
7c:ee:ae:00:32:19:1e:7b:01:56:7f:22:75:9a:b9:dd:62:a0:
64:0e:d4:61:2d:47:78:be:5e:66:6a:32:5e:7b:9b:ae:1a:02:
1c:85:df:83:37:f4:54:39:11:29:0f:3d:a2:47:9f:4b:69:e5:
16:cb:f0:9f:fe:43:be:85:d3:05:a6:db:d3:d7:44:a9:0d:85:
02:d1:99:d8:cc:c4:ad:c9:4f:0d:fa:cb:ed:26:f8:69:6c:43:
a9:b6:82:c8:92:58:df:3d:94:f8:53:a4:19:aa:f7:52:9c:9f:
49:8e:f1:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZDn1sv/F6KOEk8KTeW12TpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOGUwNTlkNWViNzc2NDlmYmYxOWI4NGFmMzVmNjg5MWQ5
YzU4MDcwHhcNMjUwNDE3MTIwMDM5WhcNMjUwNDE4MTIwMDM5WjAzMTEwLwYDVQQD
EyhiOGZkNDc4YjdmY2Q0NDk4ODYwOTlmZWU2MjA4NGNlYWE4MWYyMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzgwmWe5We5CHci3qdWoAEyG/zqe
SQ5jDd5DfxQCs2wmobbkPksXsjkBVr7yj9KXkzxpih9O2MYiILe5gSNtskJtHVb9
C8ENSl5LuzrHmdj3OF8YaZT2PbSkeSQZhBGf2ZdP/uP2AUPTWid6bFyveEpN0uxL
Hi2tBq2UdMQGNX6oNlzLc4LmGjD0fPYeH0YGTLorNdesSzUGHqxPIhMbEyjxpQIb
e3+6y5nPvLq5xXgfc+iNfPAyHJUKfzoMsp1Lt+Zz3vPENWa3DO26Zlm6s2yge8sT
oIaQAjydnDb0oZuiatBjdm1SCq2wgjEKQY/ISTfHizhDKWO8o8gRK0pp4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLj9R4t/zUSYhgmf7mIITOqoHyI5MB8GA1UdIwQY
MBaAFNyOBZ1et3ZJ+/GbhK819okdnFgHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80ZjZlZTQtZmE2ZS00MzZlLWIzNDkt
NmVmN2UxMTk5Njk4LzEvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80ZjZlZTQtZmE2ZS00MzZlLWIzNDktNmVmN2UxMTk5Njk4
LzEvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGGcgOe3
lVfdRuXS4BurDaPsDRON/gUvP2VurJraLgVt0KTY/4MJaImdb5nd6sR3quUEg2X9
FlkISTKm9ukMO3FPtHkTvX1kp4ycV9TsfYIHDRNzuDPyc4PhoUXX2drA7+XqWUog
vdr9ZgcIRyra8MM/E3v6fT434L2kFje0lNJisR/q2anNr5ZXWNdAZEBEfO6uADIZ
HnsBVn8idZq53WKgZA7UYS1HeL5eZmoyXnubrhoCHIXfgzf0VDkRKQ89okefS2nl
Fsvwn/5DvoXTBabb09dEqQ2FAtGZ2MzErclPDfrL7Sb4aWxDqbaCyJJY3z2U+FOk
Gar3UpyfSY7xZQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 14:54:08 2025 by rpki-client