Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: RVckKYoct5Gev02xUzWFvdGpuDkw6Tw1oDMg5XhofgA=
Subject key identifier: D6:99:B7:ED:4C:4B:FF:9C:FC:46:E3:6C:D3:5A:50:79:D2:5C:6A:76
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 019676E83F27ED93118B6FA3A1B94691FE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 0344
Signing time: Sun 27 Apr 2025 11:00:54 +0000
Manifest this update: Sun 27 Apr 2025 11:00:54 +0000
Manifest next update: Mon 28 Apr 2025 11:00:54 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: SLaV7cnOVxt+/92NojePemC66ay91kNN6jrAedQin3s=)
2: R82wyiQ6WGXDZ2qmyfic2Rx16EQ.roa (hash: q3ADHp8TbEdc9vO2jFfoJST4ALm7hMCr9dPnLoGdV9o=)
3: msFkodHiiLA7yYTUvQfg1svzo58.roa (hash: 8maRWfYNuUoSqjA1l1zPbJ9FPRTfD/7OAF7wZnEEN9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:3f:27:ed:93:11:8b:6f:a3:a1:b9:46:91:fe:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Apr 27 11:00:54 2025 GMT
Not After : Apr 28 11:00:54 2025 GMT
Subject: CN=d699b7ed4c4bff9cfc46e36cd35a5079d25c6a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:53:47:68:2c:5e:7f:71:fd:ec:41:f8:3d:25:
29:12:d7:66:25:d3:a8:99:f1:86:d2:2f:7c:d6:24:
59:2d:f4:4c:4e:b0:a6:90:43:68:a2:7b:c7:98:8b:
5f:88:ed:8e:f3:c6:0f:9b:85:23:d3:48:ee:fc:35:
dc:c3:10:2a:9f:40:d1:23:fc:3c:b9:98:14:a8:96:
cd:b3:91:a9:4a:bc:dc:99:de:26:92:90:dd:97:6c:
71:31:55:a4:4d:fe:24:7e:9f:34:c7:47:1d:54:c9:
7c:11:a4:dd:d0:82:fe:7b:19:39:91:f5:17:8c:a3:
b7:25:43:f5:18:3f:3e:d8:ac:ab:d5:16:93:6c:c4:
31:1f:b5:4e:d4:ef:a5:c0:ff:2a:19:a6:79:cd:44:
4e:f4:3b:64:63:52:42:d4:da:cd:bb:3e:42:a4:84:
d6:99:62:cd:31:26:77:8e:2f:62:d2:d3:80:c2:44:
43:e8:c0:86:bf:8b:eb:25:6e:bd:25:97:ea:fb:78:
86:b7:d3:3f:ce:2e:56:b9:fd:71:b7:d5:38:36:01:
3b:31:6e:e6:e1:80:df:48:3f:b8:f8:e2:ab:6b:2e:
11:4e:8d:b0:9d:d8:85:4b:ab:2c:f8:ac:64:a8:e1:
32:ec:07:4c:e5:ec:7e:88:fc:b0:48:4d:6a:d8:dc:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:99:B7:ED:4C:4B:FF:9C:FC:46:E3:6C:D3:5A:50:79:D2:5C:6A:76
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bb:c4:ac:22:cb:d3:bf:7f:08:e9:dd:34:f6:ce:68:67:b7:
35:c1:2d:db:0a:90:08:07:73:a5:e7:56:59:20:2f:57:d9:66:
3f:19:55:77:95:e8:b8:65:74:0f:23:52:83:64:c1:85:bc:5c:
29:48:6b:87:e9:3c:39:3d:2e:f4:f7:a4:5d:39:2e:23:81:58:
0c:a6:ad:9e:4e:d0:f9:79:80:a3:0d:7c:2e:2c:d4:e8:98:06:
b5:a7:4a:09:95:80:f8:95:19:c9:1c:2f:3a:01:ec:17:ba:13:
e1:48:83:13:03:84:7c:37:f1:42:f9:f8:ac:3c:6f:de:72:f2:
3f:8e:0a:61:94:36:dc:99:53:3b:62:d0:30:3b:fc:a2:e1:10:
fc:f0:a7:20:3c:92:73:b1:77:8f:26:3c:e9:b2:f7:85:74:94:
b9:e7:6c:97:39:22:0c:54:4b:c4:e6:ab:0f:f9:19:76:68:2a:
18:70:f0:62:73:b6:45:b5:29:8f:a6:61:f3:91:e4:2c:1c:7b:
31:45:8b:0e:2e:2d:76:eb:53:cf:ff:6a:48:a3:cd:9a:d3:5e:
28:15:a0:54:62:c7:f7:9a:79:b6:29:72:2b:60:b1:27:a5:06:
24:8e:4e:63:11:bc:55:39:ea:22:5a:51:89:6d:c8:45:52:f4:
bc:7b:dc:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ26D8n7ZMRi2+joblGkf4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZDk3NzBjMzA3ZWEzOTYwYzhkYTI2OGE4ODY1YTRhOWZh
NjM0YzkwHhcNMjUwNDI3MTEwMDU0WhcNMjUwNDI4MTEwMDU0WjAzMTEwLwYDVQQD
EyhkNjk5YjdlZDRjNGJmZjljZmM0NmUzNmNkMzVhNTA3OWQyNWM2YTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lNHaCxef3H97EH4PSUpEtdmJdOo
mfGG0i981iRZLfRMTrCmkENoonvHmItfiO2O88YPm4Uj00ju/DXcwxAqn0DRI/w8
uZgUqJbNs5GpSrzcmd4mkpDdl2xxMVWkTf4kfp80x0cdVMl8EaTd0IL+exk5kfUX
jKO3JUP1GD8+2Kyr1RaTbMQxH7VO1O+lwP8qGaZ5zURO9DtkY1JC1NrNuz5CpITW
mWLNMSZ3ji9i0tOAwkRD6MCGv4vrJW69JZfq+3iGt9M/zi5Wuf1xt9U4NgE7MW7m
4YDfSD+4+OKray4RTo2wndiFS6ss+KxkqOEy7AdM5ex+iPywSE1q2NzSPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaZt+1MS/+c/EbjbNNaUHnSXGp2MB8GA1UdIwQY
MBaAFN3ZdwwwfqOWDI2iaKiGWkqfpjTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUt
ZjJmZTBkMDRiZmJmLzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUtZjJmZTBkMDRiZmJm
LzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbvErCLL
079/COndNPbOaGe3NcEt2wqQCAdzpedWWSAvV9lmPxlVd5XouGV0DyNSg2TBhbxc
KUhrh+k8OT0u9PekXTkuI4FYDKatnk7Q+XmAow18LizU6JgGtadKCZWA+JUZyRwv
OgHsF7oT4UiDEwOEfDfxQvn4rDxv3nLyP44KYZQ23JlTO2LQMDv8ouEQ/PCnIDyS
c7F3jyY86bL3hXSUuedslzkiDFRLxOarD/kZdmgqGHDwYnO2RbUpj6Zh85HkLBx7
MUWLDi4tdutTz/9qSKPNmtNeKBWgVGLH95p5tilyK2CxJ6UGJI5OYxG8VTnqIlpR
iW3IRVL0vHvc4Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:53:29 2025 by rpki-client