Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
File: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft (raw, json)
Hash identifier: 9LgxdMwIN7Rl0RTPaYn1V8+lM1+vgvvR171TzA5WXKA=
Subject key identifier: 98:A8:C3:CA:CE:F3:AE:1F:3E:5F:A6:08:37:7C:7A:B9:D9:9E:D2:19
Authority key identifier: DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
Certificate issuer: /CN=dd19b5047acc57dfdd2f87045764956f4b603066
Certificate serial: 0196895BD2FF333CCF69167778BD46DBAAA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
Manifest number: 0C34
Signing time: Thu 01 May 2025 01:00:18 +0000
Manifest this update: Thu 01 May 2025 01:00:18 +0000
Manifest next update: Fri 02 May 2025 01:00:18 +0000
Files and hashes: 1: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl (hash: CLfhMCHogE19Z+gd+5Bag9eFiZ0IIv+xY5CGPCQt+IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5b:d2:ff:33:3c:cf:69:16:77:78:bd:46:db:aa:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd19b5047acc57dfdd2f87045764956f4b603066
Validity
Not Before: May 1 01:00:18 2025 GMT
Not After : May 2 01:00:18 2025 GMT
Subject: CN=98a8c3cacef3ae1f3e5fa608377c7ab9d99ed219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:13:ea:af:ff:67:25:86:db:99:87:20:af:
7b:cc:51:e0:96:4b:d3:82:0c:16:2d:63:c1:68:61:
4c:a0:3b:76:41:cb:f2:0f:74:5a:46:ab:f3:0a:93:
99:d2:af:ae:7a:71:e2:5c:a0:ef:50:32:98:57:75:
37:d6:80:d0:c3:be:e7:1e:8a:a9:d5:da:f0:fa:60:
58:ce:0d:53:f4:79:09:af:b1:53:b4:9b:1d:25:dc:
93:93:1d:4f:2b:ac:01:aa:e6:c9:30:00:a6:1d:a3:
75:6d:6a:fe:10:7f:0e:4c:fb:8b:72:f6:5d:ee:99:
d6:41:81:43:a3:98:c5:37:51:ac:6c:19:8f:cd:c1:
3d:96:7c:64:e9:ee:4a:93:29:f3:b8:62:ca:27:df:
aa:2f:df:c6:f0:2e:38:0e:93:e4:9e:01:f2:e6:15:
ca:6b:bd:4c:a4:35:69:34:25:fd:b4:60:6b:ec:57:
c6:7d:78:f9:5d:21:6f:e4:b3:74:e6:9d:01:38:8b:
ff:a8:ba:ce:92:16:4b:32:7e:e1:77:d5:f4:c7:b5:
f9:e5:a1:e0:d4:b4:05:49:28:bb:83:99:8c:f9:d3:
fc:eb:2c:db:27:28:47:f8:f7:d0:55:c4:11:86:0f:
e5:92:45:2d:a9:17:7d:c0:74:27:8e:18:2f:67:31:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A8:C3:CA:CE:F3:AE:1F:3E:5F:A6:08:37:7C:7A:B9:D9:9E:D2:19
X509v3 Authority Key Identifier:
keyid:DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:28:0d:7e:a1:fc:4c:89:d7:f6:d9:5f:39:8a:49:43:3c:81:
12:af:ca:ad:4d:4d:ef:11:23:23:5b:ec:41:99:38:41:ad:06:
b4:d3:d2:64:b0:56:7d:1d:47:c5:a1:8a:8f:84:03:bf:25:30:
76:e7:90:af:ea:17:72:b8:7f:5f:2a:9e:68:37:5e:f3:c6:7e:
5e:3f:3f:63:b1:ea:c5:13:81:b2:e8:1d:f1:53:b5:20:b7:67:
34:22:db:a1:11:f6:5b:01:f3:22:ff:15:d4:57:9a:17:bd:b5:
93:a9:b5:04:8c:53:1a:a6:94:72:17:e4:20:80:60:b5:1d:ce:
d0:18:02:84:e7:4c:01:ab:c3:14:4a:b7:7b:97:22:df:d0:a1:
c4:cf:6a:21:1f:76:0e:10:1f:df:9b:3d:5c:82:17:5c:de:bc:
ff:e9:4f:09:e5:b4:17:78:bf:c5:d4:6d:bc:7f:4a:56:27:5a:
b1:f8:cb:8e:5b:1f:1f:46:a3:4d:ae:97:b8:d5:da:c6:2c:72:
22:29:5a:db:34:9f:bf:32:d0:fb:3b:b5:a8:9f:04:bd:44:1f:
f4:5b:47:ea:31:df:01:5f:6b:6d:56:9b:a0:8e:62:6f:88:13:
4d:b5:1e:41:9c:9b:05:dd:60:5a:de:84:2c:60:d4:88:cc:91:
16:9d:24:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJW9L/MzzPaRZ3eL1G26qoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMTliNTA0N2FjYzU3ZGZkZDJmODcwNDU3NjQ5NTZmNGI2
MDMwNjYwHhcNMjUwNTAxMDEwMDE4WhcNMjUwNTAyMDEwMDE4WjAzMTEwLwYDVQQD
Eyg5OGE4YzNjYWNlZjNhZTFmM2U1ZmE2MDgzNzdjN2FiOWQ5OWVkMjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraIT6q//ZyWG25mHIK97zFHglkvT
ggwWLWPBaGFMoDt2QcvyD3RaRqvzCpOZ0q+uenHiXKDvUDKYV3U31oDQw77nHoqp
1drw+mBYzg1T9HkJr7FTtJsdJdyTkx1PK6wBqubJMACmHaN1bWr+EH8OTPuLcvZd
7pnWQYFDo5jFN1GsbBmPzcE9lnxk6e5KkynzuGLKJ9+qL9/G8C44DpPkngHy5hXK
a71MpDVpNCX9tGBr7FfGfXj5XSFv5LN05p0BOIv/qLrOkhZLMn7hd9X0x7X55aHg
1LQFSSi7g5mM+dP86yzbJyhH+PfQVcQRhg/lkkUtqRd9wHQnjhgvZzFwNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiow8rO864fPl+mCDd8ernZntIZMB8GA1UdIwQY
MBaAFN0ZtQR6zFff3S+HBFdklW9LYDBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1JtMUJIck1WOV9kTDRjRVYyU1ZiMHRnTUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lZjQwYjgtODMxMy00NjE4LTlkMzUt
ZWRkZWY4N2UyNDFiLzEvM1JtMUJIck1WOV9kTDRjRVYyU1ZiMHRnTUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9lZjQwYjgtODMxMy00NjE4LTlkMzUtZWRkZWY4N2UyNDFi
LzEvM1JtMUJIck1WOV9kTDRjRVYyU1ZiMHRnTUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCgNfqH8
TInX9tlfOYpJQzyBEq/KrU1N7xEjI1vsQZk4Qa0GtNPSZLBWfR1HxaGKj4QDvyUw
dueQr+oXcrh/XyqeaDde88Z+Xj8/Y7HqxROBsugd8VO1ILdnNCLboRH2WwHzIv8V
1FeaF721k6m1BIxTGqaUchfkIIBgtR3O0BgChOdMAavDFEq3e5ci39ChxM9qIR92
DhAf35s9XIIXXN68/+lPCeW0F3i/xdRtvH9KVidasfjLjlsfH0ajTa6XuNXaxixy
Iila2zSfvzLQ+zu1qJ8EvUQf9FtH6jHfAV9rbVaboI5ib4gTTbUeQZybBd1gWt6E
LGDUiMyRFp0kJA==
-----END CERTIFICATE-----
Generated at Thu May 1 11:23:48 2025 by rpki-client