Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: SRZq96OREG86GS0EjHzMR2QMImG1rcNrnLgvNtS/lYk=
Subject key identifier: D9:74:B0:47:6C:C9:B9:B9:62:C8:48:D0:A3:51:66:D5:43:57:F5:15
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 01969A4F7A3EE33F2E96BE0BC446B5A4132A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 1520
Signing time: Sun 04 May 2025 08:00:21 +0000
Manifest this update: Sun 04 May 2025 08:00:21 +0000
Manifest next update: Mon 05 May 2025 08:00:21 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: 9SzpbZ4ROyPrsLWBcHTNZU+gbpPEdwTSt55O0qCGFkM=)
2: urKpUlRihT17e4-sYhWpyMcE8Ac.roa (hash: OKr8BwUnDAnQRh/fja/ALDyKIeKec2Yi0x2apcZhAec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:4f:7a:3e:e3:3f:2e:96:be:0b:c4:46:b5:a4:13:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: May 4 08:00:21 2025 GMT
Not After : May 5 08:00:21 2025 GMT
Subject: CN=d974b0476cc9b9b962c848d0a35166d54357f515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:39:47:cc:b8:c4:0b:08:4f:e1:6d:49:14:
91:01:0b:2e:46:1b:6b:c9:aa:d9:ee:1a:bb:3d:c0:
e8:0b:99:43:26:41:da:8a:fc:2f:13:49:c0:64:3d:
31:72:0c:2a:45:17:b5:25:3c:75:3f:c5:80:4a:14:
a5:86:78:27:a2:ba:b3:1c:0b:23:7f:55:a7:44:be:
60:24:d1:f8:85:4f:ef:ff:10:d3:30:8b:3e:7f:ba:
e1:8d:91:04:92:a3:e2:bd:00:96:d6:27:e2:da:3e:
95:ab:c8:05:58:88:f2:50:4c:aa:4a:22:ed:ed:17:
ef:86:55:36:67:10:eb:69:da:e1:32:9f:52:c8:71:
f6:12:fe:4b:10:25:28:a3:96:06:cf:ee:4e:73:06:
2c:23:11:01:1d:77:d5:27:29:99:2f:6e:d0:27:74:
5d:be:6e:ef:b0:a7:8c:08:bd:3c:4e:63:3a:4d:68:
1b:7f:c0:e6:56:f5:ff:ee:c8:c2:b9:de:41:2b:37:
d2:5b:66:2c:f9:6d:17:fe:f6:6e:7c:3c:68:1d:17:
1a:45:64:62:a9:7b:6f:b0:ca:77:1b:c4:c7:25:ee:
a3:a9:b3:12:82:7f:da:ef:e3:06:f1:59:16:ec:8f:
eb:c1:dd:f2:55:35:6f:3f:d1:bd:3d:99:04:45:57:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:74:B0:47:6C:C9:B9:B9:62:C8:48:D0:A3:51:66:D5:43:57:F5:15
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:02:2a:b8:19:7a:0c:c4:13:05:2b:b1:47:f4:dd:0f:5c:cd:
c9:df:48:ef:8f:1f:1d:70:b4:45:b3:ff:61:ae:c6:78:a1:7f:
21:17:c0:65:32:1a:b0:ee:97:7c:58:45:ad:36:ce:27:80:41:
de:f2:28:97:5d:a5:1e:e0:e2:ff:33:2d:db:7d:bb:3e:c3:58:
3e:9c:0e:c1:64:28:cb:fd:08:fb:f5:97:ee:4f:b6:ea:18:68:
01:02:42:33:ff:e7:7e:4e:22:86:88:75:11:ca:ba:7f:30:ef:
f0:43:89:ea:73:79:3e:5d:f3:f3:29:7a:cf:c1:9d:24:b0:6c:
67:77:11:1f:42:48:6d:e2:21:dd:54:b4:c0:75:72:de:e6:32:
0d:e0:83:35:50:17:a4:74:06:41:f5:29:89:a2:0b:e8:e0:31:
e2:34:95:cd:41:38:29:ba:82:cc:75:e7:bc:8c:c7:e4:15:f8:
14:ad:b9:97:fd:ed:fa:14:ad:1e:9a:1a:d9:51:ba:45:8a:78:
f2:e8:a4:81:36:0f:3a:4e:30:a5:d7:17:46:51:72:9c:ba:f0:
26:00:24:4d:7a:3f:ce:a2:5a:15:b1:f3:9a:d2:d8:c0:18:e6:
26:12:a0:05:65:cf:fd:55:21:99:91:6e:b4:01:1e:4f:ca:11:
ba:e7:05:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaaT3o+4z8ulr4LxEa1pBMqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOWYyYTkyNzM3OGJkMTQ1NWRhOGJkZjg1YmIxYWI4Njdl
MWY1MjgwHhcNMjUwNTA0MDgwMDIxWhcNMjUwNTA1MDgwMDIxWjAzMTEwLwYDVQQD
EyhkOTc0YjA0NzZjYzliOWI5NjJjODQ4ZDBhMzUxNjZkNTQzNTdmNTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9c5R8y4xAsIT+FtSRSRAQsuRhtr
yarZ7hq7PcDoC5lDJkHaivwvE0nAZD0xcgwqRRe1JTx1P8WAShSlhngnorqzHAsj
f1WnRL5gJNH4hU/v/xDTMIs+f7rhjZEEkqPivQCW1ifi2j6Vq8gFWIjyUEyqSiLt
7RfvhlU2ZxDradrhMp9SyHH2Ev5LECUoo5YGz+5OcwYsIxEBHXfVJymZL27QJ3Rd
vm7vsKeMCL08TmM6TWgbf8DmVvX/7sjCud5BKzfSW2Ys+W0X/vZufDxoHRcaRWRi
qXtvsMp3G8THJe6jqbMSgn/a7+MG8VkW7I/rwd3yVTVvP9G9PZkERVdKNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNl0sEdsybm5YshI0KNRZtVDV/UVMB8GA1UdIwQY
MBaAFN6fKpJzeL0UVdqL34W7Grhn4fUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQt
NmRiMDkwMjE0MDM1LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQtNmRiMDkwMjE0MDM1
LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgIquBl6
DMQTBSuxR/TdD1zNyd9I748fHXC0RbP/Ya7GeKF/IRfAZTIasO6XfFhFrTbOJ4BB
3vIol12lHuDi/zMt2327PsNYPpwOwWQoy/0I+/WX7k+26hhoAQJCM//nfk4ihoh1
Ecq6fzDv8EOJ6nN5Pl3z8yl6z8GdJLBsZ3cRH0JIbeIh3VS0wHVy3uYyDeCDNVAX
pHQGQfUpiaIL6OAx4jSVzUE4KbqCzHXnvIzH5BX4FK25l/3t+hStHpoa2VG6RYp4
8uikgTYPOk4wpdcXRlFynLrwJgAkTXo/zqJaFbHzmtLYwBjmJhKgBWXP/VUhmZFu
tAEeT8oRuucF5g==
-----END CERTIFICATE-----
Generated at Sun May 4 11:12:52 2025 by rpki-client