
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
File: 3ywVz3L824WWt8ZImxWmtyDBTrU.mft (raw, json)
Hash identifier: jrs2KifZ+9G+4RMzMVpxkNvJwtuW/0xvVkdqL0oQ/PU=
Subject key identifier: D2:17:07:02:3F:E1:D4:F6:58:A8:65:D4:F4:88:90:84:56:3B:29:3A
Authority key identifier: DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
Certificate issuer: /CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Certificate serial: 019683C77EA3ABA1B00C758912B1F30FE22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
Manifest number: 03C7
Signing time: Tue 29 Apr 2025 23:00:11 +0000
Manifest this update: Tue 29 Apr 2025 23:00:11 +0000
Manifest next update: Wed 30 Apr 2025 23:00:11 +0000
Files and hashes: 1: 1-6aebUsjGigWCkXwDxAfu7JbH3A.roa (hash: Hduo/JWxIEmIyeyIi7MQm4M+Xp8ECRaddxhqWZRPV6c=)
2: 3ywVz3L824WWt8ZImxWmtyDBTrU.crl (hash: sA+Mwn5ORIRwSbBIekEJKw9mcOjrBFNpvyh7OctXDXI=)
3: LW11wESbT2hocwdKYSbs6P71AKA.roa (hash: GuYU5G46KcnUJ43J5q6WCf+WZxw+qQFx0MBht9uI9W0=)
4: wGmLy9fCHGSdb1IR1hi3jtBm_nU.roa (hash: EtrSnLCCgz0LzD/1buNZsptNBEqMbZQGIw+M8iextIM=)
5: zuXVABH3iQHva6C3x_7o7gzuXEY.roa (hash: oBzqdMlIWS4N+t9dxQHDBXhwNKLOQHnlyrSOj0n4CXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:7e:a3:ab:a1:b0:0c:75:89:12:b1:f3:0f:e2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Validity
Not Before: Apr 29 23:00:11 2025 GMT
Not After : Apr 30 23:00:11 2025 GMT
Subject: CN=d21707023fe1d4f658a865d4f4889084563b293a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:43:88:c6:6a:53:0a:87:b2:23:77:34:36:
f7:1d:76:7f:37:23:65:31:55:6c:80:7d:1c:0b:4f:
db:52:9d:d1:18:a0:43:bc:95:6d:a8:43:51:68:ca:
bb:60:77:b1:30:7e:31:99:0b:5e:11:86:a3:ec:22:
5c:ba:09:45:53:28:51:e4:1f:b0:ad:b6:bd:de:28:
7b:1c:a6:67:60:be:9a:ae:ed:11:3d:55:c4:cd:39:
7f:52:3e:97:8b:4d:6e:93:99:f9:2e:99:8a:01:4c:
a8:2e:eb:0a:35:bf:90:ab:67:3d:85:b5:bc:0f:d5:
5e:c8:af:0a:c7:11:0b:51:16:c4:18:aa:11:f3:19:
58:d7:21:d7:30:1f:06:71:67:35:1a:8d:66:57:fc:
dd:de:2a:40:4e:9e:57:22:94:4a:19:8a:4b:f4:68:
ea:2f:a5:4d:43:b9:23:56:be:56:0e:f8:56:0d:1e:
d8:aa:3d:56:74:8a:b9:69:c3:37:5c:41:d0:df:4f:
46:91:ab:c5:ee:36:c2:73:9b:d6:12:c5:30:e1:0d:
98:2e:13:f3:5e:5f:2a:55:25:03:0a:09:7f:11:e2:
fd:28:06:6f:c9:60:eb:79:79:e7:ca:80:60:d6:31:
89:9d:77:43:cf:0b:94:06:ea:96:09:a6:05:47:2b:
32:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:17:07:02:3F:E1:D4:F6:58:A8:65:D4:F4:88:90:84:56:3B:29:3A
X509v3 Authority Key Identifier:
keyid:DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0b:30:7e:b1:ee:98:ef:d0:b8:0d:89:c7:99:8a:79:cc:63:
d1:65:ec:90:82:8c:fa:45:f4:7a:43:71:7f:0d:76:1e:df:a3:
29:b4:68:c1:57:e4:c6:9c:32:91:1b:bd:cf:dc:9b:77:b7:47:
c3:a9:c4:e9:45:28:86:e6:1a:31:16:12:cd:5b:17:fe:4c:09:
c8:cc:e8:f8:23:5f:67:de:e5:45:04:76:65:f7:5c:7a:b1:3d:
56:08:ab:1a:6c:36:9f:8d:cb:1c:26:79:f5:c5:04:6a:85:45:
70:11:f2:1c:39:44:f8:fd:30:c6:8c:2e:f2:8b:12:42:87:0c:
a4:0a:bf:fb:4c:25:e7:89:ba:c3:3c:72:24:e6:d2:56:58:24:
2d:5c:59:8b:1c:8f:37:c5:b3:e4:bf:35:82:9c:06:f8:19:36:
46:fc:af:d4:05:05:b6:6e:d5:71:03:32:0b:42:89:44:16:1e:
78:98:9a:54:88:f4:4d:28:03:06:c2:18:13:c9:e1:d8:4c:08:
fc:9b:2f:bc:a9:49:15:08:e0:c8:39:12:a5:8f:c8:dd:61:4d:
8c:38:86:9b:7f:3f:11:ec:ac:f2:9e:27:44:40:7a:c7:1b:89:
15:4e:27:08:40:3b:39:7a:22:8a:89:a6:ea:4d:46:72:e3:45:
cf:01:cf:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDx36jq6GwDHWJErHzD+IuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMmMxNWNmNzJmY2RiODU5NmI3YzY0ODliMTVhNmI3MjBj
MTRlYjUwHhcNMjUwNDI5MjMwMDExWhcNMjUwNDMwMjMwMDExWjAzMTEwLwYDVQQD
EyhkMjE3MDcwMjNmZTFkNGY2NThhODY1ZDRmNDg4OTA4NDU2M2IyOTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/lDiMZqUwqHsiN3NDb3HXZ/NyNl
MVVsgH0cC0/bUp3RGKBDvJVtqENRaMq7YHexMH4xmQteEYaj7CJcuglFUyhR5B+w
rba93ih7HKZnYL6aru0RPVXEzTl/Uj6Xi01uk5n5LpmKAUyoLusKNb+Qq2c9hbW8
D9VeyK8KxxELURbEGKoR8xlY1yHXMB8GcWc1Go1mV/zd3ipATp5XIpRKGYpL9Gjq
L6VNQ7kjVr5WDvhWDR7Yqj1WdIq5acM3XEHQ309GkavF7jbCc5vWEsUw4Q2YLhPz
Xl8qVSUDCgl/EeL9KAZvyWDreXnnyoBg1jGJnXdDzwuUBuqWCaYFRysyrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIXBwI/4dT2WKhl1PSIkIRWOyk6MB8GA1UdIwQY
MBaAFN8sFc9y/NuFlrfGSJsVprcgwU61MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3l3VnozTDgyNFdXdDhaSW14V210eURCVHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85Y2ZlYTEtZDgyYS00NzU1LTgxMGUt
ZjE4NTNkMTBlNjEwLzEvM3l3VnozTDgyNFdXdDhaSW14V210eURCVHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85Y2ZlYTEtZDgyYS00NzU1LTgxMGUtZjE4NTNkMTBlNjEw
LzEvM3l3VnozTDgyNFdXdDhaSW14V210eURCVHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAswfrHu
mO/QuA2Jx5mKecxj0WXskIKM+kX0ekNxfw12Ht+jKbRowVfkxpwykRu9z9ybd7dH
w6nE6UUohuYaMRYSzVsX/kwJyMzo+CNfZ97lRQR2ZfdcerE9VgirGmw2n43LHCZ5
9cUEaoVFcBHyHDlE+P0wxowu8osSQocMpAq/+0wl54m6wzxyJObSVlgkLVxZixyP
N8Wz5L81gpwG+Bk2Rvyv1AUFtm7VcQMyC0KJRBYeeJiaVIj0TSgDBsIYE8nh2EwI
/JsvvKlJFQjgyDkSpY/I3WFNjDiGm38/Eeys8p4nREB6xxuJFU4nCEA7OXoiiomm
6k1GcuNFzwHPkA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:43:59 2025 by rpki-client