Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: GEQ6cf1W9Yv15Uhxo9CYaOwP/n9RS+9B1E+etk7Ah6Q=
Subject key identifier: 35:A5:2B:DC:D8:4C:81:22:27:92:5E:7D:F6:E7:4C:5B:F1:57:C0:B8
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 019683FF678629B86F22259123364C3ADCCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 1521
Signing time: Wed 30 Apr 2025 00:01:15 +0000
Manifest this update: Wed 30 Apr 2025 00:01:15 +0000
Manifest next update: Thu 01 May 2025 00:01:15 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: pHY9Jsdb1AKwfm9Wr9oCLq011F7CohdQg2sLxCn8r1c=)
2: XeTdM9cnm-nj4Gui4gyEqLrQLaw.roa (hash: byMWJNOsSPMVajbPUM5liOZkm9+BQbQeZEZJwK73A2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:67:86:29:b8:6f:22:25:91:23:36:4c:3a:dc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Apr 30 00:01:15 2025 GMT
Not After : May 1 00:01:15 2025 GMT
Subject: CN=35a52bdcd84c812227925e7df6e74c5bf157c0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:40:4d:c4:39:72:9f:58:45:b0:55:e1:9a:6a:
b7:4c:92:ea:c7:0c:54:c6:53:a8:54:87:13:a8:f9:
98:23:08:bf:3b:18:0b:30:d6:92:10:1f:23:b7:b6:
58:ae:5e:73:44:56:47:1c:3c:c6:a3:0f:23:fd:24:
70:bb:a2:6f:4d:45:51:9b:95:00:33:42:fa:01:68:
0d:84:da:1f:a7:cc:d6:b8:8c:db:29:cb:ca:23:3a:
ff:4e:45:8e:a2:31:19:ce:7a:60:c1:74:2a:23:98:
22:d4:f7:17:95:fa:43:38:7c:60:e8:73:bf:37:b6:
ab:95:aa:13:39:a0:18:9e:e9:dd:1e:dc:21:72:7d:
1b:a9:8f:fe:a6:b8:f1:a4:b9:42:38:94:2c:09:81:
b7:3e:60:37:56:86:ce:30:5e:67:ad:2f:80:f7:fa:
24:a4:97:3f:d6:55:a6:e9:a9:4f:c4:c9:40:98:c3:
88:d1:14:ec:16:5e:23:12:59:0b:8c:b1:d0:49:fc:
49:0e:71:8f:03:82:65:45:4c:f9:d8:a5:06:03:c0:
62:4a:9e:2e:f7:4e:14:ab:12:80:d5:44:88:b5:c0:
48:23:d2:86:a6:f7:ca:9e:d5:e4:2d:af:79:bc:3d:
da:9f:2c:89:bc:92:5a:df:b2:c1:89:a2:6b:38:f2:
72:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A5:2B:DC:D8:4C:81:22:27:92:5E:7D:F6:E7:4C:5B:F1:57:C0:B8
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:19:51:69:41:f6:88:f8:54:2b:f0:a9:c4:f9:3a:03:19:b5:
28:47:3a:11:2e:5e:14:26:08:ca:3e:02:26:46:ce:5e:e2:75:
2b:41:88:1f:61:07:94:5f:7a:7e:92:c6:b3:12:9a:19:45:43:
f9:f7:69:3e:2e:b3:8a:1c:52:d7:19:ba:8a:49:50:70:85:4c:
a1:5a:32:5f:da:c6:24:aa:84:cd:ed:47:1e:c2:10:73:f3:41:
4e:41:b2:e2:b6:1b:36:bd:51:14:94:93:99:16:6f:3d:2f:0c:
18:03:23:77:99:c8:7a:48:a1:23:9d:a7:b0:25:0d:f7:36:5c:
ef:de:ca:cb:d9:8a:4b:78:77:82:26:ca:c4:f7:7e:67:64:ac:
98:08:d3:be:51:d2:8f:17:54:8a:bf:f5:18:04:d9:14:95:b6:
96:b9:0f:4c:c5:d0:34:57:90:18:7b:25:0f:11:d3:44:65:ac:
4a:24:e8:06:70:c3:1d:b9:d7:40:86:5e:39:29:f5:ad:d2:5f:
cb:78:9b:f0:2b:11:ca:ab:f4:7f:d3:ef:d4:15:f8:90:6d:b0:
3a:2d:86:d5:4a:ca:94:57:64:5d:7f:2f:91:91:be:bd:2c:12:
bd:58:d3:70:1d:c2:42:e3:80:05:f9:d8:93:5c:88:82:8a:e5:
ac:dc:0c:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaD/2eGKbhvIiWRIzZMOtzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTQ2YjFmY2Q5MmI0N2Y0ZjU1ZmFkMDM4Yzk1ODEzNDBh
OWQzNzAwHhcNMjUwNDMwMDAwMTE1WhcNMjUwNTAxMDAwMTE1WjAzMTEwLwYDVQQD
EygzNWE1MmJkY2Q4NGM4MTIyMjc5MjVlN2RmNmU3NGM1YmYxNTdjMGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkBNxDlyn1hFsFXhmmq3TJLqxwxU
xlOoVIcTqPmYIwi/OxgLMNaSEB8jt7ZYrl5zRFZHHDzGow8j/SRwu6JvTUVRm5UA
M0L6AWgNhNofp8zWuIzbKcvKIzr/TkWOojEZznpgwXQqI5gi1PcXlfpDOHxg6HO/
N7arlaoTOaAYnundHtwhcn0bqY/+prjxpLlCOJQsCYG3PmA3VobOMF5nrS+A9/ok
pJc/1lWm6alPxMlAmMOI0RTsFl4jElkLjLHQSfxJDnGPA4JlRUz52KUGA8BiSp4u
904UqxKA1USItcBII9KGpvfKntXkLa95vD3anyyJvJJa37LBiaJrOPJyZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWlK9zYTIEiJ5JeffbnTFvxV8C4MB8GA1UdIwQY
MBaAFNykax/NkrR/T1X60DjJWBNAqdNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmIt
YzZkMmI4ZDFmNTY2LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmItYzZkMmI4ZDFmNTY2
LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxlRaUH2
iPhUK/CpxPk6Axm1KEc6ES5eFCYIyj4CJkbOXuJ1K0GIH2EHlF96fpLGsxKaGUVD
+fdpPi6zihxS1xm6iklQcIVMoVoyX9rGJKqEze1HHsIQc/NBTkGy4rYbNr1RFJST
mRZvPS8MGAMjd5nIekihI52nsCUN9zZc797Ky9mKS3h3gibKxPd+Z2SsmAjTvlHS
jxdUir/1GATZFJW2lrkPTMXQNFeQGHslDxHTRGWsSiToBnDDHbnXQIZeOSn1rdJf
y3ib8CsRyqv0f9Pv1BX4kG2wOi2G1UrKlFdkXX8vkZG+vSwSvVjTcB3CQuOABfnY
k1yIgorlrNwMLw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 10:35:47 2025 by rpki-client