Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: lglG8r08L6akRyOPk6USBvWXY2oHIheqpfrLCN6woxM=
Subject key identifier: A4:D8:2E:1D:F9:52:DD:70:16:F8:52:86:5E:2E:C2:63:2C:13:26:F9
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 0196846C89F60FE183B619A62BFB8AA35CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 1252
Signing time: Wed 30 Apr 2025 02:00:27 +0000
Manifest this update: Wed 30 Apr 2025 02:00:27 +0000
Manifest next update: Thu 01 May 2025 02:00:27 +0000
Files and hashes: 1: 3HTozQB4pcsucL9eexzvUMqz-88.roa (hash: p8l9H8yiS+tCWDGhSt8TqxKK4BPlsy+wIY5igUPwFNU=)
2: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: 6iqpCqntfOK5LDViW/KeTwdvLVnCKddbUp1391Ssd8Q=)
3: I_q4haHSQ5-iSHbhiDxn8LO10n0.roa (hash: rR8MdnfYv9DYhofCAQL44jv965jNwY7cLv2/tA4Lg2A=)
4: TiC_Kjgn7ufdW5G3bZapc4eGbt0.roa (hash: bIFhS4mc+QnxlO7/qiPxce8pWMHI9i3DDkPiJSG5yyE=)
5: cdhvQ3G9D22hzZ35uWHLO4DK-b8.roa (hash: 9/hDVeqHVKKGEQirCvU77EziyJeBYbpOSUraYbA1sQI=)
6: dyZAc8NxmgpIJ7ReLwLtCdf8iuU.roa (hash: yzcV6FbEvYdi3FxJ85d1AG7eZonaFrOWx4BQurNQcLA=)
7: icjgdrZ-2bYy0vmLkXN3ZejcMO0.roa (hash: BhIg1YAcMIYOB5H79uWHhrjxoemSR0rVkY+hQV1/Imo=)
8: tgoPg8gJ1wgYlvzK_ZhaNvMswpk.roa (hash: 0Yao20qxSDFfx3jAhC+HO3FsXj9rP4F8uh+mjbY+yHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:89:f6:0f:e1:83:b6:19:a6:2b:fb:8a:a3:5c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Apr 30 02:00:27 2025 GMT
Not After : May 1 02:00:27 2025 GMT
Subject: CN=a4d82e1df952dd7016f852865e2ec2632c1326f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c8:78:64:a2:ff:a6:db:2b:2a:1c:04:3d:08:
c3:04:66:bf:f3:05:2e:78:bf:59:16:8c:8f:6c:4b:
f9:9c:33:2d:6f:38:74:ce:a7:71:3f:bb:ce:36:ee:
43:89:c5:6f:9a:6c:23:5c:bb:55:83:40:71:94:bd:
2b:0b:03:54:7a:0f:35:85:f1:95:6f:8f:b9:14:62:
dc:80:5d:17:ff:37:09:99:2a:dd:8b:de:0a:f4:d2:
5d:77:df:24:fa:f2:9a:80:12:e0:cf:bb:4f:ca:4c:
4d:2e:29:fc:b3:e9:09:9e:32:5f:b8:9e:65:2a:08:
11:bd:cc:ad:8f:39:bb:a8:cc:e5:69:c0:34:71:88:
c3:e1:f1:ef:ad:f8:b9:04:2b:6d:aa:90:e6:0b:d2:
b4:1f:db:87:50:47:bd:b8:39:bd:8a:ec:22:72:ff:
a4:b6:d8:64:90:53:87:67:11:b0:98:b6:2c:84:99:
ac:ca:14:cf:4a:be:37:6b:4d:b0:68:d5:b2:96:38:
10:69:35:4f:c6:7c:0a:7b:23:8a:7e:90:15:bd:2e:
e9:9b:85:0b:1a:6b:b3:d4:fb:00:03:13:33:eb:85:
e7:1e:aa:e6:4d:0d:07:fa:d6:67:fd:9b:27:53:9f:
c5:d4:78:59:33:c9:86:1b:42:9f:f1:34:51:04:f6:
bb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D8:2E:1D:F9:52:DD:70:16:F8:52:86:5E:2E:C2:63:2C:13:26:F9
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:24:aa:e8:35:b3:f3:0f:db:86:dd:43:76:42:7b:a3:97:9a:
ac:ac:9c:2e:84:67:fc:d6:56:8f:3b:61:88:db:78:ba:11:2d:
db:50:11:d8:fe:63:8d:fa:2b:24:37:e4:8e:8b:6a:16:a2:9b:
43:3c:f0:ef:9a:0e:e5:72:75:03:9a:bc:ec:20:11:97:2e:0c:
f9:da:21:0d:48:4d:c9:01:c6:29:6d:03:e0:24:10:fc:71:83:
97:cb:ee:0f:9e:46:6e:40:d7:64:9f:7b:70:c2:4d:dd:c2:8d:
8d:b4:aa:1c:af:d3:83:09:42:64:ee:1b:1f:81:15:5f:8a:aa:
20:5b:b4:ec:f7:23:1a:63:ae:be:d3:56:ab:f5:af:e5:e7:7d:
f6:a9:c5:b1:7c:9d:2c:b7:1d:71:22:8f:bb:4a:9c:42:60:6c:
39:78:d9:e7:9b:01:00:0a:ea:e8:6d:2a:9a:c3:d8:f6:d1:20:
0f:ef:8e:ae:d5:12:92:8a:36:e9:91:55:6b:df:1c:64:26:3f:
b6:f1:d7:05:4d:ad:69:e6:06:40:47:9d:04:c6:d8:3b:37:0a:
87:c5:83:ce:0d:de:64:65:a0:88:48:4f:84:a6:24:3e:d7:4f:
b7:9e:90:b1:36:f5:41:b7:17:50:88:0d:fb:9d:f0:94:51:4c:
07:87:0d:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaEbIn2D+GDthmmK/uKo1ytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTRiYjY5NDUzZjEzOWE2MDAyOWUyMmRiMGZiMzQyNGE5
MDZjZWUwHhcNMjUwNDMwMDIwMDI3WhcNMjUwNTAxMDIwMDI3WjAzMTEwLwYDVQQD
EyhhNGQ4MmUxZGY5NTJkZDcwMTZmODUyODY1ZTJlYzI2MzJjMTMyNmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhch4ZKL/ptsrKhwEPQjDBGa/8wUu
eL9ZFoyPbEv5nDMtbzh0zqdxP7vONu5DicVvmmwjXLtVg0BxlL0rCwNUeg81hfGV
b4+5FGLcgF0X/zcJmSrdi94K9NJdd98k+vKagBLgz7tPykxNLin8s+kJnjJfuJ5l
KggRvcytjzm7qMzlacA0cYjD4fHvrfi5BCttqpDmC9K0H9uHUEe9uDm9iuwicv+k
tthkkFOHZxGwmLYshJmsyhTPSr43a02waNWyljgQaTVPxnwKeyOKfpAVvS7pm4UL
Gmuz1PsAAxMz64XnHqrmTQ0H+tZn/ZsnU5/F1HhZM8mGG0Kf8TRRBPa70QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTYLh35Ut1wFvhShl4uwmMsEyb5MB8GA1UdIwQY
MBaAFNyUu2lFPxOaYAKeItsPs0JKkGzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGIt
MDkwYzQ2ZTlmMmVkLzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGItMDkwYzQ2ZTlmMmVk
LzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzySq6DWz
8w/bht1DdkJ7o5earKycLoRn/NZWjzthiNt4uhEt21AR2P5jjforJDfkjotqFqKb
Qzzw75oO5XJ1A5q87CARly4M+dohDUhNyQHGKW0D4CQQ/HGDl8vuD55GbkDXZJ97
cMJN3cKNjbSqHK/TgwlCZO4bH4EVX4qqIFu07PcjGmOuvtNWq/Wv5ed99qnFsXyd
LLcdcSKPu0qcQmBsOXjZ55sBAArq6G0qmsPY9tEgD++OrtUSkoo26ZFVa98cZCY/
tvHXBU2taeYGQEedBMbYOzcKh8WDzg3eZGWgiEhPhKYkPtdPt56QsTb1QbcXUIgN
+53wlFFMB4cNqg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:14:25 2025 by rpki-client