Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier: cq9ti4g+f4KnBZ+AhdqvKievEjvjnDrGSE3aCsHhj0c=
Subject key identifier: B5:40:6F:CC:28:C6:CB:1C:B4:51:F9:E2:0A:5F:E9:81:EA:9F:9E:FC
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 0194BB28E6178D583BC30280DB761E9876F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number: 0FA0
Signing time: Fri 31 Jan 2025 07:00:07 +0000
Manifest this update: Fri 31 Jan 2025 07:00:07 +0000
Manifest next update: Sat 01 Feb 2025 07:00:07 +0000
Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: C0AfIpCC2qAnjdxO2xubCL6Q+oWHJ002jHrLlUnQGzw=)
2: RNkRhX3yK-TkHlh9YWWsykby_Dc.roa (hash: vp+4Wych+XwTPbr9Bjf9hawO/Jnhv86eVFw3KntPsww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:e6:17:8d:58:3b:c3:02:80:db:76:1e:98:76:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Jan 31 07:00:07 2025 GMT
Not After : Feb 1 07:00:07 2025 GMT
Subject: CN=b5406fcc28c6cb1cb451f9e20a5fe981ea9f9efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d5:31:45:bc:91:00:83:88:d4:c2:d3:10:06:
48:4e:06:e7:da:e8:af:4d:01:f5:21:52:aa:a3:a4:
d1:be:0a:36:e7:d5:5b:cc:2d:40:0b:f2:0d:10:98:
2c:44:1c:fe:84:e9:22:16:1e:a3:df:b3:5a:a5:98:
ce:90:37:17:1e:5a:c2:2d:59:84:d2:12:64:b4:ea:
18:6e:2f:c4:40:e5:35:e4:e0:ee:ff:ee:50:c4:44:
6e:25:38:3e:b3:a7:05:3c:c8:4f:44:fa:b8:3e:42:
94:8b:70:13:76:68:6c:03:49:b7:14:c9:b7:c2:2f:
46:0f:b3:4a:e9:96:26:13:58:20:19:0f:0f:d5:2d:
c9:c4:9b:0e:ab:d6:00:ac:b0:7d:63:7e:7e:9e:02:
97:86:33:4d:3a:b5:a3:d2:22:47:78:b7:e5:08:26:
25:69:4a:10:c9:5b:cb:6d:db:71:3a:a1:cf:7a:d5:
60:35:76:b6:74:a6:80:71:b4:88:99:c4:92:64:e3:
f3:94:ef:ea:a3:bc:f6:1f:09:c5:8e:a4:2d:11:c6:
e3:e8:4f:49:d6:f9:74:9b:d8:4b:60:91:f8:65:56:
ef:c0:c0:4d:65:49:50:69:3a:07:29:54:d6:d8:60:
90:02:ee:ae:4b:b6:83:a6:fc:d8:cd:fb:0a:09:be:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:40:6F:CC:28:C6:CB:1C:B4:51:F9:E2:0A:5F:E9:81:EA:9F:9E:FC
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fe:6d:0e:bf:1d:d2:61:7d:34:be:cc:63:02:d2:48:1e:c5:
c8:3d:4d:36:13:68:ad:6c:d8:00:69:ef:06:72:82:d4:a3:3c:
1c:9f:ef:2f:58:3c:d1:38:ec:ea:75:7b:63:bb:bd:a6:c6:6a:
4a:84:cc:95:e2:c4:89:87:1a:2f:a7:3b:62:9a:c8:7d:09:61:
4f:2c:da:e8:5f:02:49:4e:6f:80:45:69:07:40:93:d3:6b:62:
dc:e8:c9:03:1f:16:18:09:d0:da:58:bd:a8:99:38:0a:16:c7:
f4:78:23:9a:de:3b:23:4c:3c:fd:92:23:27:e5:79:75:c6:6c:
6c:cd:10:55:4d:cf:8f:bf:b8:91:2d:f0:22:33:94:06:ce:44:
ca:1d:50:84:d6:b6:13:60:50:1e:1f:d2:eb:29:0d:32:c9:3d:
11:ed:68:2f:7e:22:39:da:e7:51:18:74:94:10:aa:d1:c9:9e:
7a:fd:04:59:b0:06:77:ee:c5:a6:78:46:7a:cb:be:7a:c3:62:
e9:b8:4c:57:3d:4e:97:f5:5a:af:88:0b:8d:fb:4c:40:3c:5a:
5a:77:ef:37:df:5e:73:85:d0:7c:9a:d2:d0:44:c3:2f:20:53:
9b:3b:a2:55:2f:ee:4c:3d:6a:33:22:44:d3:07:3d:41:bd:53:
85:09:39:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KOYXjVg7wwKA23YemHb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZGY5YTY3MWJjZjE3ODljMWI1YWMzNjMwYzc0MWJlNTYw
ZGFkYTAwHhcNMjUwMTMxMDcwMDA3WhcNMjUwMjAxMDcwMDA3WjAzMTEwLwYDVQQD
EyhiNTQwNmZjYzI4YzZjYjFjYjQ1MWY5ZTIwYTVmZTk4MWVhOWY5ZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NUxRbyRAIOI1MLTEAZITgbn2uiv
TQH1IVKqo6TRvgo259VbzC1AC/INEJgsRBz+hOkiFh6j37NapZjOkDcXHlrCLVmE
0hJktOoYbi/EQOU15ODu/+5QxERuJTg+s6cFPMhPRPq4PkKUi3ATdmhsA0m3FMm3
wi9GD7NK6ZYmE1ggGQ8P1S3JxJsOq9YArLB9Y35+ngKXhjNNOrWj0iJHeLflCCYl
aUoQyVvLbdtxOqHPetVgNXa2dKaAcbSImcSSZOPzlO/qo7z2HwnFjqQtEcbj6E9J
1vl0m9hLYJH4ZVbvwMBNZUlQaToHKVTW2GCQAu6uS7aDpvzYzfsKCb7GoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVAb8woxssctFH54gpf6YHqn578MB8GA1UdIwQY
MBaAFN7fmmcbzxeJwbWsNjDHQb5WDa2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iYjEzOTYtOWMwNS00ZTE3LWJiYzUt
Nzc2NjA1MDFjNDc4LzEvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iYjEzOTYtOWMwNS00ZTE3LWJiYzUtNzc2NjA1MDFjNDc4
LzEvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATP5tDr8d
0mF9NL7MYwLSSB7FyD1NNhNorWzYAGnvBnKC1KM8HJ/vL1g80Tjs6nV7Y7u9psZq
SoTMleLEiYcaL6c7YprIfQlhTyza6F8CSU5vgEVpB0CT02ti3OjJAx8WGAnQ2li9
qJk4ChbH9Hgjmt47I0w8/ZIjJ+V5dcZsbM0QVU3Pj7+4kS3wIjOUBs5Eyh1QhNa2
E2BQHh/S6ykNMsk9Ee1oL34iOdrnURh0lBCq0cmeev0EWbAGd+7FpnhGesu+esNi
6bhMVz1Ol/Var4gLjftMQDxaWnfvN99ec4XQfJrS0ETDLyBTmzuiVS/uTD1qMyJE
0wc9Qb1ThQk5UQ==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:52 2025 by rpki-client on console-fra.rpki-client.org