Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
File: 3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json)
Hash identifier: V7oQ9u1EJm6XPb+30t/cXrJ6kRL5iAoDYgeN2BbQskw=
Subject key identifier: 85:D8:B0:2F:7E:D8:40:7D:C0:16:82:9F:2D:A0:CE:F1:96:25:C0:22
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial: 01968FCBEC9F7440C3013F5B1331D2FDE622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
Manifest number: 151A
Signing time: Fri 02 May 2025 07:00:28 +0000
Manifest this update: Fri 02 May 2025 07:00:28 +0000
Manifest next update: Sat 03 May 2025 07:00:28 +0000
Files and hashes: 1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: ETvcq2UoI5HKHAf7rGWvl0vFHHTk5Vn9SYfnImqaQjo=)
2: 5cvTQhZb21i8dsjZHSMpM2dxt9k.roa (hash: Jg1xw/OZvnd1OLClxYEzrvwZ5HBLqquVy880Rp6Vr+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cb:ec:9f:74:40:c3:01:3f:5b:13:31:d2:fd:e6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
Validity
Not Before: May 2 07:00:28 2025 GMT
Not After : May 3 07:00:28 2025 GMT
Subject: CN=85d8b02f7ed8407dc016829f2da0cef19625c022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:12:40:31:d2:55:3e:ed:20:62:77:2b:9c:
20:7b:e9:b3:fa:a2:2d:c9:cf:d5:6f:3a:bf:62:1a:
46:95:e6:8c:f9:95:15:93:7c:64:51:c8:a0:aa:86:
9f:c7:1f:13:c9:ac:83:01:54:2d:15:1c:3f:51:c7:
46:84:d9:5e:55:eb:06:9d:fe:c0:81:cf:b6:d2:7c:
25:37:ff:d9:93:d1:47:a2:2a:56:0d:cb:4f:c9:02:
0a:e8:43:9e:56:43:bc:0a:c5:b0:34:d0:4b:a5:9d:
5c:c6:66:14:93:78:ec:5b:26:e9:81:3a:d9:83:5e:
07:c3:6e:15:b5:90:2a:0d:c4:04:f8:73:3c:ec:ad:
6a:78:25:1e:ac:ee:0b:74:bf:74:b9:51:9c:68:b3:
67:92:22:c0:8a:51:5b:3b:5e:87:0c:28:33:33:0e:
11:e2:11:a2:a6:93:d2:98:b1:1c:75:65:c2:e6:09:
d9:45:34:80:28:64:51:6b:04:f7:ea:1c:93:6c:cc:
84:57:5b:e8:5a:b9:ec:1c:fb:14:8f:03:7e:23:28:
a7:4b:36:e6:b8:94:c8:17:96:5f:f1:b2:18:63:c5:
5e:f5:ed:06:34:1d:8b:48:cf:ad:dc:cb:0b:bf:33:
c6:ce:0f:95:0b:ab:50:89:3e:49:f0:fc:b9:9e:23:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D8:B0:2F:7E:D8:40:7D:C0:16:82:9F:2D:A0:CE:F1:96:25:C0:22
X509v3 Authority Key Identifier:
keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:33:f7:65:46:0c:eb:f7:56:87:01:8f:7c:d9:99:78:f3:d3:
5c:fe:32:3f:f9:1d:bb:01:ad:f5:e4:0a:59:37:65:61:f1:63:
1d:18:a5:c8:37:9f:f3:2c:dc:4e:6e:bc:55:46:5d:48:b6:6c:
5e:f7:f2:d2:d8:8a:74:22:0e:ce:17:31:ee:2d:d4:31:38:10:
0b:1a:09:9f:6f:06:2d:3c:04:9e:8a:6e:82:61:8a:33:57:fc:
7b:10:11:c4:84:47:a2:de:ec:8f:f2:72:ca:12:83:20:20:ad:
a0:71:69:b9:e3:3e:7c:c7:17:26:52:6b:01:50:fe:45:b0:e0:
de:5c:d5:38:fb:b2:5b:97:19:6e:bf:d4:ef:14:c5:ad:78:aa:
97:47:4d:2d:58:5b:3b:44:90:14:0d:21:36:13:ec:07:0e:58:
7c:62:09:1c:d1:e5:a5:01:4a:d0:06:6d:57:01:b0:fa:57:71:
73:8d:cb:c1:c2:16:4e:76:cb:85:19:b7:10:88:47:f3:a8:93:
6b:c8:ba:a7:89:5f:c7:59:a5:d6:d4:9a:a3:74:eb:d4:fb:f4:
2e:f7:6d:5a:26:f1:91:c4:a7:ae:ba:24:c9:2b:85:f0:14:92:
aa:cc:9b:c6:1a:33:8d:7b:30:63:b1:48:8d:5e:94:bb:8f:7d:
72:85:20:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPy+yfdEDDAT9bEzHS/eYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMjA2YjhiZDIyMTU3NGM5NjU5MjQ0MzE5NWI5MDA1NzY5
YzcyNGQwHhcNMjUwNTAyMDcwMDI4WhcNMjUwNTAzMDcwMDI4WjAzMTEwLwYDVQQD
Eyg4NWQ4YjAyZjdlZDg0MDdkYzAxNjgyOWYyZGEwY2VmMTk2MjVjMDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaQSQDHSVT7tIGJ3K5wge+mz+qIt
yc/Vbzq/YhpGleaM+ZUVk3xkUcigqoafxx8TyayDAVQtFRw/UcdGhNleVesGnf7A
gc+20nwlN//Zk9FHoipWDctPyQIK6EOeVkO8CsWwNNBLpZ1cxmYUk3jsWybpgTrZ
g14Hw24VtZAqDcQE+HM87K1qeCUerO4LdL90uVGcaLNnkiLAilFbO16HDCgzMw4R
4hGippPSmLEcdWXC5gnZRTSAKGRRawT36hyTbMyEV1voWrnsHPsUjwN+IyinSzbm
uJTIF5Zf8bIYY8Ve9e0GNB2LSM+t3MsLvzPGzg+VC6tQiT5J8Py5niNfRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXYsC9+2EB9wBaCny2gzvGWJcAiMB8GA1UdIwQY
MBaAFN0ga4vSIVdMllkkQxlbkAV2nHJNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1NCcmk5SWhWMHlXV1NSREdWdVFCWGFjY2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lYmM3OGItNTc4Yy00YTRmLTlhNGUt
ZTI5MTU3Njc5NjA0LzEvM1NCcmk5SWhWMHlXV1NSREdWdVFCWGFjY2swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9lYmM3OGItNTc4Yy00YTRmLTlhNGUtZTI5MTU3Njc5NjA0
LzEvM1NCcmk5SWhWMHlXV1NSREdWdVFCWGFjY2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDP3ZUYM
6/dWhwGPfNmZePPTXP4yP/kduwGt9eQKWTdlYfFjHRilyDef8yzcTm68VUZdSLZs
Xvfy0tiKdCIOzhcx7i3UMTgQCxoJn28GLTwEnopugmGKM1f8exARxIRHot7sj/Jy
yhKDICCtoHFpueM+fMcXJlJrAVD+RbDg3lzVOPuyW5cZbr/U7xTFrXiql0dNLVhb
O0SQFA0hNhPsBw5YfGIJHNHlpQFK0AZtVwGw+ldxc43LwcIWTnbLhRm3EIhH86iT
a8i6p4lfx1ml1tSao3Tr1Pv0LvdtWibxkcSnrrokySuF8BSSqsybxhozjXswY7FI
jV6Uu499coUgqw==
-----END CERTIFICATE-----
Generated at Fri May 2 11:06:53 2025 by rpki-client