Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier: YW3G3uz2cR+ME8slK1wSLSXGbiOqY9SUQJ1d+uHfubQ=
Subject key identifier: 54:87:26:99:29:F4:77:FB:47:49:66:16:77:9B:EB:D3:A1:B1:3D:E3
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer: /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial: 0196952926F8402BA4CFFD3374F773B56E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number: 0DDB
Signing time: Sat 03 May 2025 08:00:24 +0000
Manifest this update: Sat 03 May 2025 08:00:24 +0000
Manifest next update: Sun 04 May 2025 08:00:24 +0000
Files and hashes: 1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: j7L8hUBPekoXxktGjuk7x20N8mzsJxbyHXYduhdcz8U=)
2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:29:26:f8:40:2b:a4:cf:fd:33:74:f7:73:b5:6e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
Validity
Not Before: May 3 08:00:24 2025 GMT
Not After : May 4 08:00:24 2025 GMT
Subject: CN=5487269929f477fb47496616779bebd3a1b13de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:83:16:ef:42:80:a3:95:c1:3a:09:4a:20:
0a:36:4f:9d:c6:a2:04:bd:80:d5:e9:7b:61:b7:f2:
e9:ff:d7:3d:7e:63:db:20:5c:2a:f0:d6:a7:19:28:
9c:43:5f:54:e9:91:b3:65:4c:1b:44:05:b3:5c:f4:
9b:da:f2:37:84:a9:82:f0:84:a5:62:71:c2:a2:43:
25:55:0d:0f:0d:b2:42:57:e6:4e:a4:30:f3:9b:45:
40:bc:40:fc:7f:eb:0c:17:02:31:d4:cb:a1:6a:b0:
ae:0f:a5:cb:ea:3b:be:f3:aa:26:da:19:eb:cf:59:
57:ce:14:4f:94:83:80:34:ac:55:c4:d6:58:d2:cc:
4d:4f:c9:37:44:d5:e9:a5:8e:e3:21:cc:e8:95:3a:
ea:4a:4f:be:d0:18:16:c7:e5:86:fa:25:2a:9c:b3:
71:65:2f:f3:69:34:e9:8a:a4:f3:47:29:34:08:3e:
1c:ea:8a:f6:cd:02:af:09:82:12:33:af:06:2d:7e:
fe:f7:92:d7:7b:b0:10:85:58:e8:b4:0c:db:cd:fa:
e7:5b:f9:02:12:92:f3:b0:e4:5a:a7:36:06:05:34:
2f:de:92:48:c6:71:c9:78:d2:93:aa:e0:5b:ef:b5:
e9:d5:e2:44:23:c3:1a:fe:19:25:c5:29:71:7f:65:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:87:26:99:29:F4:77:FB:47:49:66:16:77:9B:EB:D3:A1:B1:3D:E3
X509v3 Authority Key Identifier:
keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:47:9d:1a:59:89:82:48:37:22:d4:49:97:22:eb:8a:88:fd:
19:be:f4:a6:ca:9e:a4:49:aa:c2:41:db:01:83:c4:64:2e:46:
ae:db:cc:ca:30:ef:2c:88:77:44:39:c9:11:28:42:ba:35:fd:
ca:b8:17:f7:31:25:3a:db:8a:83:ad:29:69:d5:38:a1:e4:c5:
ff:e2:56:3c:14:cb:6e:b5:5e:5b:ba:00:8b:79:cb:9e:8e:81:
ac:44:46:e4:de:f9:8b:e0:8e:dc:ab:f7:29:bf:87:8c:8e:40:
89:ef:ec:59:13:c7:b0:32:ca:2a:25:f8:bb:9b:21:dd:53:7d:
a7:ba:15:09:78:de:d2:04:a8:7b:93:68:92:3f:4d:cc:57:9d:
0b:01:e1:ab:7f:70:27:7d:c4:4d:af:77:41:45:6d:0b:46:06:
19:1f:d4:be:fb:8c:cf:ec:66:3d:2b:d4:e6:9d:6a:f7:b5:21:
e2:10:28:c6:40:7c:50:6a:d5:fa:93:8e:3d:90:63:cb:07:40:
c8:56:4b:54:77:c3:4c:c2:4b:63:e0:31:ae:e4:e4:1c:72:1e:
62:15:f1:67:60:a0:e9:cb:ee:fd:60:aa:d0:9a:ec:09:c7:ea:
da:e2:ba:15:02:12:64:68:39:9b:1c:51:12:c2:0f:ac:db:97:
16:a9:18:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaVKSb4QCukz/0zdPdztW55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlM2Q4MTIxMWY0OTJlZGYwMjlhMjJjYzY2YzIwYTNiOTQ1
ODM1OTAwHhcNMjUwNTAzMDgwMDI0WhcNMjUwNTA0MDgwMDI0WjAzMTEwLwYDVQQD
Eyg1NDg3MjY5OTI5ZjQ3N2ZiNDc0OTY2MTY3NzliZWJkM2ExYjEzZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnWDFu9CgKOVwToJSiAKNk+dxqIE
vYDV6Xtht/Lp/9c9fmPbIFwq8NanGSicQ19U6ZGzZUwbRAWzXPSb2vI3hKmC8ISl
YnHCokMlVQ0PDbJCV+ZOpDDzm0VAvED8f+sMFwIx1MuharCuD6XL6ju+86om2hnr
z1lXzhRPlIOANKxVxNZY0sxNT8k3RNXppY7jIczolTrqSk++0BgWx+WG+iUqnLNx
ZS/zaTTpiqTzRyk0CD4c6or2zQKvCYISM68GLX7+95LXe7AQhVjotAzbzfrnW/kC
EpLzsORapzYGBTQv3pJIxnHJeNKTquBb77Xp1eJEI8Ma/hklxSlxf2X/ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSHJpkp9Hf7R0lmFneb69OhsT3jMB8GA1UdIwQY
MBaAFN49gSEfSS7fApoizGbCCjuUWDWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYt
MzE0MjhiMDUwZmQ3LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYtMzE0MjhiMDUwZmQ3
LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0edGlmJ
gkg3ItRJlyLrioj9Gb70psqepEmqwkHbAYPEZC5GrtvMyjDvLIh3RDnJEShCujX9
yrgX9zElOtuKg60padU4oeTF/+JWPBTLbrVeW7oAi3nLno6BrERG5N75i+CO3Kv3
Kb+HjI5Aie/sWRPHsDLKKiX4u5sh3VN9p7oVCXje0gSoe5Nokj9NzFedCwHhq39w
J33ETa93QUVtC0YGGR/UvvuMz+xmPSvU5p1q97Uh4hAoxkB8UGrV+pOOPZBjywdA
yFZLVHfDTMJLY+AxruTkHHIeYhXxZ2Cg6cvu/WCq0JrsCcfq2uK6FQISZGg5mxxR
EsIPrNuXFqkYgg==
-----END CERTIFICATE-----
Generated at Sat May 3 18:21:34 2025 by rpki-client