Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
File: 3Prn1OadQuT0yV2Z9IK5qUTb78g.mft (raw, json)
Hash identifier: ZyK0vdTsYAPk9gEn6di6auUrmi10zPKSLFf2i0X2Aqw=
Subject key identifier: 65:9F:33:8B:AB:13:A7:0D:EE:91:29:1B:FC:28:37:A3:B3:AA:9C:AB
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial: 019671C211BFB8E2E63363FA9437F8C4956E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
Manifest number: 11F3
Signing time: Sat 26 Apr 2025 11:01:06 +0000
Manifest this update: Sat 26 Apr 2025 11:01:06 +0000
Manifest next update: Sun 27 Apr 2025 11:01:06 +0000
Files and hashes: 1: 3Prn1OadQuT0yV2Z9IK5qUTb78g.crl (hash: QBL25qIfMDKKdJjklPRCTxy4tJksch8A/72CQSTdiyA=)
2: AFa9BeMRC9KZa5ESZVY3qezRhqo.roa (hash: kFgjZZQAO7DQ4A//2mPuGomN/dVKyDVTDikOVl1cxRM=)
3: oTU6jls5Cbp2h-8jJVa1y-YZLoo.roa (hash: UlQbXDO/2Z5fLH/VOiXf6qQdUrJ+q43vGjJDK0Fi6XA=)
4: onN6KmPVXQwrcGzs19GCsiDsKrQ.roa (hash: z68kDOoDWacxs1gAQw1w/1PdDLWcZUVC2dAlyVoGWL0=)
5: rrglEeDtNMMTRuZ3vbypZH_RQmE.roa (hash: urqCGELvaxYkBx+UEtrFXZNDg3RBmJzxwZn3ZWt36zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c2:11:bf:b8:e2:e6:33:63:fa:94:37:f8:c4:95:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Validity
Not Before: Apr 26 11:01:06 2025 GMT
Not After : Apr 27 11:01:06 2025 GMT
Subject: CN=659f338bab13a70dee91291bfc2837a3b3aa9cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:7c:1b:60:b7:74:48:8f:0a:c7:d1:95:8c:
d5:14:d8:1f:b1:57:c8:5b:3f:db:9f:64:38:72:56:
02:1f:ee:f2:6b:1c:6a:31:4a:ab:3d:5f:2a:3c:46:
5c:91:90:78:fa:aa:a6:2c:02:f3:28:3c:27:56:c2:
85:f3:57:7d:b6:c0:64:f5:77:49:28:6f:c4:50:41:
50:f9:e6:fb:58:56:e8:4a:0d:50:1e:40:90:3b:ea:
58:af:03:f7:dd:ba:e8:4c:a6:d7:21:3f:6f:8a:0a:
bc:31:a4:a6:da:63:cf:16:fb:64:5f:74:de:74:3c:
f9:e8:da:af:e3:19:0d:b6:da:0c:7d:33:2b:17:73:
14:97:fb:5f:48:8b:e1:74:8d:31:96:d4:85:91:8e:
73:98:76:e7:25:d2:9b:0c:2f:55:4e:22:0a:a2:70:
e6:95:40:d8:b8:f6:5f:23:ba:dd:7b:5a:fb:88:d2:
9e:e5:e0:e0:56:da:d6:bf:94:28:01:f3:79:0a:78:
46:e0:41:65:18:2b:08:ef:01:3d:99:ef:3a:e8:11:
6f:db:69:cf:ad:0f:4e:fb:60:fa:43:8d:1d:96:4a:
ae:9b:ea:f5:a3:5b:7c:42:26:59:8b:7b:b8:0d:aa:
be:12:8e:fd:47:7e:83:25:04:8b:14:69:42:ef:27:
b7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9F:33:8B:AB:13:A7:0D:EE:91:29:1B:FC:28:37:A3:B3:AA:9C:AB
X509v3 Authority Key Identifier:
keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:57:f3:54:0f:c1:c6:70:09:7a:e3:dc:70:80:86:38:ae:4c:
ab:c2:85:f7:c5:15:40:05:3a:a2:7a:39:1a:5d:39:93:98:49:
c1:bb:db:de:76:e2:1f:66:4d:00:25:19:a6:38:9c:ed:91:b1:
ee:38:36:82:36:05:30:fd:e4:7c:6d:7c:71:60:cd:96:ac:e2:
57:ab:3c:60:57:57:ab:14:e7:87:05:bc:5a:d1:05:70:df:e6:
26:ef:25:d4:01:87:c7:72:ce:eb:a5:8e:8a:c7:28:2d:9f:90:
04:28:15:10:60:e2:a7:bf:2c:e9:00:1c:1f:73:6e:c3:62:a3:
cf:6c:c1:61:a7:3e:11:d1:00:ad:cf:36:89:9f:5e:ef:aa:49:
46:5a:92:63:0d:99:9f:b0:72:67:ea:73:ba:78:c5:be:31:a1:
c7:28:e7:38:07:5b:ff:4d:c8:85:d5:98:13:ef:6e:08:64:bd:
3f:48:a9:dc:5c:bd:74:c2:a2:e1:3f:ee:8e:8e:9e:fb:c1:17:
30:21:18:ae:b7:a9:63:b5:bb:2a:4b:17:c6:cb:61:2c:94:4a:
07:06:4d:9d:1f:cf:55:ce:96:22:9d:8f:86:9b:59:e6:54:a1:
66:18:8e:c0:1b:7d:d6:2a:91:b5:10:0b:0f:11:a4:9f:41:3e:
e2:3e:07:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxwhG/uOLmM2P6lDf4xJVuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmFlN2Q0ZTY5ZDQyZTRmNGM5NWQ5OWY0ODJiOWE5NDRk
YmVmYzgwHhcNMjUwNDI2MTEwMTA2WhcNMjUwNDI3MTEwMTA2WjAzMTEwLwYDVQQD
Eyg2NTlmMzM4YmFiMTNhNzBkZWU5MTI5MWJmYzI4MzdhM2IzYWE5Y2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwR8G2C3dEiPCsfRlYzVFNgfsVfI
Wz/bn2Q4clYCH+7yaxxqMUqrPV8qPEZckZB4+qqmLALzKDwnVsKF81d9tsBk9XdJ
KG/EUEFQ+eb7WFboSg1QHkCQO+pYrwP33broTKbXIT9vigq8MaSm2mPPFvtkX3Te
dDz56Nqv4xkNttoMfTMrF3MUl/tfSIvhdI0xltSFkY5zmHbnJdKbDC9VTiIKonDm
lUDYuPZfI7rde1r7iNKe5eDgVtrWv5QoAfN5CnhG4EFlGCsI7wE9me866BFv22nP
rQ9O+2D6Q40dlkqum+r1o1t8QiZZi3u4Daq+Eo79R36DJQSLFGlC7ye3PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWfM4urE6cN7pEpG/woN6OzqpyrMB8GA1UdIwQY
MBaAFNz659TmnULk9MldmfSCualE2+/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYt
MzcyNzNkZjM5MDFjLzEvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85MzQyZjgtZGY5ZS00NWJiLTk3MmYtMzcyNzNkZjM5MDFj
LzEvM1BybjFPYWRRdVQweVYyWjlJSzVxVVRiNzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVfzVA/B
xnAJeuPccICGOK5Mq8KF98UVQAU6ono5Gl05k5hJwbvb3nbiH2ZNACUZpjic7ZGx
7jg2gjYFMP3kfG18cWDNlqziV6s8YFdXqxTnhwW8WtEFcN/mJu8l1AGHx3LO66WO
iscoLZ+QBCgVEGDip78s6QAcH3Nuw2Kjz2zBYac+EdEArc82iZ9e76pJRlqSYw2Z
n7ByZ+pzunjFvjGhxyjnOAdb/03IhdWYE+9uCGS9P0ip3Fy9dMKi4T/ujo6e+8EX
MCEYrrepY7W7KksXxsthLJRKBwZNnR/PVc6WIp2PhptZ5lShZhiOwBt91iqRtRAL
DxGkn0E+4j4HFw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:05:05 2025 by rpki-client