Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: 9OPDn4n2Fy3SdBfL4lm43Ye1an/8q/eJ52kgA3d68GQ=
Subject key identifier: 22:01:1C:76:B7:8B:C2:62:BF:4B:A1:D2:76:C2:B4:BD:00:8B:22:25
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 019679B204AB8AC3A3929BF7E1248DB8ECAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0A1E
Signing time: Mon 28 Apr 2025 00:00:31 +0000
Manifest this update: Mon 28 Apr 2025 00:00:31 +0000
Manifest next update: Tue 29 Apr 2025 00:00:31 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: O5bXtxUOL09hEFZRBb0+708k+qi7eDiT25NW85/OzLs=)
2: 4NcSUJ4Kg8dewIwP8RGgWPLVsGw.roa (hash: NfguGRutDpTl33g3TT2hnx9Rfi2f9fnIaQJYs24UAYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:04:ab:8a:c3:a3:92:9b:f7:e1:24:8d:b8:ec:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Apr 28 00:00:31 2025 GMT
Not After : Apr 29 00:00:31 2025 GMT
Subject: CN=22011c76b78bc262bf4ba1d276c2b4bd008b2225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:53:06:36:aa:5a:e9:bd:90:50:04:7a:18:be:
83:6a:57:c3:dd:ee:e6:38:3d:99:be:77:4e:b4:86:
4e:1e:90:ea:99:7e:5e:49:72:59:13:ee:92:eb:6e:
b5:05:64:4d:00:0f:be:45:d2:0c:a0:22:d2:4c:e5:
e4:bb:8c:7d:ff:96:0b:e6:28:32:e6:90:1b:87:45:
b4:54:91:8c:63:23:0d:31:94:60:af:af:d6:4c:89:
e9:35:d7:c6:84:ae:53:fb:8e:00:12:b7:86:66:e0:
cd:06:42:f2:5b:6b:2e:3c:e3:42:81:63:a7:9d:03:
92:7f:e3:d9:da:b8:be:eb:29:61:bf:5e:8f:04:87:
a9:55:1f:46:4a:1f:0a:58:7f:25:54:85:cd:38:21:
eb:04:bf:b3:d5:6b:77:70:4d:0a:0f:b5:47:4f:3b:
28:38:78:3e:bb:b6:4c:e8:29:6b:75:55:2a:a4:68:
50:43:95:63:ac:43:b4:13:cc:96:9e:72:0d:19:82:
fe:0f:82:f7:37:07:ee:25:ce:a0:16:dc:2e:5d:be:
e8:94:3f:33:cb:f4:eb:20:0a:62:86:76:ae:b4:db:
9a:47:9a:c7:8d:e4:b2:97:70:76:de:6e:7f:d4:57:
78:c0:35:98:12:23:1d:27:3d:d8:2a:35:76:05:54:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:1C:76:B7:8B:C2:62:BF:4B:A1:D2:76:C2:B4:BD:00:8B:22:25
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cb:46:d9:f1:5e:33:b8:cb:3a:3f:02:26:46:ba:cf:8a:be:
e7:12:ee:cb:8d:8f:98:16:02:30:b4:d9:f8:a7:42:4a:2f:27:
22:0f:40:06:e6:e2:c5:f9:2c:c0:7e:46:21:0a:71:8b:0a:78:
c8:9b:5c:cf:9d:32:58:c7:ba:e5:04:c9:41:77:e7:c4:1c:73:
bc:0d:bc:57:fc:2a:bf:6a:24:7b:47:1e:74:72:7f:5a:96:99:
76:07:0f:dd:30:c8:dd:67:5e:27:c7:5c:cc:97:04:f6:67:03:
81:48:a1:77:1f:43:34:ef:8e:d2:cc:24:42:9f:8b:56:f1:e5:
33:f4:51:d3:13:9c:a2:1f:a3:d0:ab:f8:b3:65:78:36:17:d4:
d1:bc:7a:0e:7e:df:94:90:da:8d:b2:51:a5:46:23:cf:4e:52:
ce:08:80:0d:08:58:1f:7a:2f:06:ea:e7:d1:03:19:97:db:49:
9b:09:1a:d3:fa:58:13:f3:ae:76:42:e4:93:6e:00:11:2d:1f:
2e:15:33:a6:c4:c8:53:5a:74:a7:99:77:e1:07:cc:bc:0c:7d:
34:48:73:a5:f0:6e:c9:58:49:20:d4:47:d4:81:84:30:92:df:
27:1b:c4:09:15:f6:c4:4a:83:85:70:47:f0:a3:a3:b7:2e:43:
b2:7e:ec:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5sgSrisOjkpv34SSNuOyvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDc0OGNkNDcxNGE1Y2M4N2NhZmI4NDMwZmI4MTI0OGIw
OTQwNzkwHhcNMjUwNDI4MDAwMDMxWhcNMjUwNDI5MDAwMDMxWjAzMTEwLwYDVQQD
EygyMjAxMWM3NmI3OGJjMjYyYmY0YmExZDI3NmMyYjRiZDAwOGIyMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFMGNqpa6b2QUAR6GL6DalfD3e7m
OD2ZvndOtIZOHpDqmX5eSXJZE+6S6261BWRNAA++RdIMoCLSTOXku4x9/5YL5igy
5pAbh0W0VJGMYyMNMZRgr6/WTInpNdfGhK5T+44AEreGZuDNBkLyW2suPONCgWOn
nQOSf+PZ2ri+6ylhv16PBIepVR9GSh8KWH8lVIXNOCHrBL+z1Wt3cE0KD7VHTzso
OHg+u7ZM6ClrdVUqpGhQQ5VjrEO0E8yWnnINGYL+D4L3NwfuJc6gFtwuXb7olD8z
y/TrIApihnautNuaR5rHjeSyl3B23m5/1Fd4wDWYEiMdJz3YKjV2BVQO7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIBHHa3i8Jiv0uh0nbCtL0AiyIlMB8GA1UdIwQY
MBaAFN1HSM1HFKXMh8r7hDD7gSSLCUB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80YzU1YWYtNWU5Yi00MTk3LTg2ZmIt
Mzc1NDVkYTA1NmJkLzEvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80YzU1YWYtNWU5Yi00MTk3LTg2ZmItMzc1NDVkYTA1NmJk
LzEvM1VkSXpVY1VwY3lIeXZ1RU1QdUJKSXNKUUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8tG2fFe
M7jLOj8CJka6z4q+5xLuy42PmBYCMLTZ+KdCSi8nIg9ABubixfkswH5GIQpxiwp4
yJtcz50yWMe65QTJQXfnxBxzvA28V/wqv2oke0cedHJ/WpaZdgcP3TDI3WdeJ8dc
zJcE9mcDgUihdx9DNO+O0swkQp+LVvHlM/RR0xOcoh+j0Kv4s2V4NhfU0bx6Dn7f
lJDajbJRpUYjz05SzgiADQhYH3ovBurn0QMZl9tJmwka0/pYE/OudkLkk24AES0f
LhUzpsTIU1p0p5l34QfMvAx9NEhzpfBuyVhJINRH1IGEMJLfJxvECRX2xEqDhXBH
8KOjty5Dsn7sUQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:23:33 2025 by rpki-client