Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: 6V6r4yKdT7+4ly0Ov035esRVkspHZCfQFgjntAPWFuI=
Subject key identifier: E2:C8:07:2A:A0:24:AA:95:63:EF:9F:30:CA:2D:22:9C:96:7D:B6:43
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 0196941651B84C75D29D871E8B1B383C1E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 151D
Signing time: Sat 03 May 2025 03:00:12 +0000
Manifest this update: Sat 03 May 2025 03:00:12 +0000
Manifest next update: Sun 04 May 2025 03:00:12 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: f1TWk5SFNfyYRawxyddiFeZrxyK3+jWYc5a9Z5A5SM8=)
2: 5395RGU-O7_Y-Wk8o5ckF03TEl8.roa (hash: 2x9LkbbQVmDZR4+CDqZEC8HuaScYKr9cs6YHpuOZlvY=)
3: JRT-ehjK87EWSX2wN_VxdPNgZVU.roa (hash: FFbMq3Jl0t/JwkKVVNHldSFfVrz4m+b2CW8bGskb98A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:16:51:b8:4c:75:d2:9d:87:1e:8b:1b:38:3c:1e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: May 3 03:00:12 2025 GMT
Not After : May 4 03:00:12 2025 GMT
Subject: CN=e2c8072aa024aa9563ef9f30ca2d229c967db643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:50:41:b9:ea:d1:e7:10:57:b3:ba:c4:71:
80:37:85:c8:11:9d:7c:ec:2f:3f:ec:47:ce:5b:d9:
30:0c:cf:e0:6a:3b:58:74:ca:6d:f4:45:c8:cc:69:
98:6d:e7:f8:97:45:80:b0:59:14:92:06:cd:99:03:
e3:41:69:65:5a:2d:42:53:63:04:d8:8c:76:c9:42:
4f:c2:52:85:57:16:e8:80:1c:99:09:30:15:1f:a6:
33:7c:39:f6:74:b5:29:57:c8:68:2b:5c:26:3b:21:
85:ef:ec:47:56:5e:a1:f1:ea:f0:10:7e:0d:a6:fa:
4c:ce:87:4b:95:36:83:09:aa:c4:cb:71:f0:e0:d6:
be:d5:b8:f4:ce:86:ee:34:a0:ea:49:33:43:8e:d0:
83:d2:95:b2:57:a6:29:f0:1c:2f:d2:16:d0:0f:dd:
3c:91:e2:6a:bd:fe:0e:d4:b7:be:28:d0:68:11:19:
80:86:1a:72:d7:93:4c:78:09:c7:dc:14:89:fd:80:
fc:7f:a5:e2:8b:e5:c7:0c:0c:46:18:28:65:07:04:
8a:a5:0f:d2:21:de:c4:b0:6b:a4:24:d9:cb:d2:eb:
43:b3:6d:49:09:37:33:0c:6f:10:71:19:4b:97:7c:
03:d9:98:4f:e6:89:8a:f3:66:f4:b0:5c:48:dc:5b:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C8:07:2A:A0:24:AA:95:63:EF:9F:30:CA:2D:22:9C:96:7D:B6:43
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9f:21:93:bc:50:27:43:2d:77:a2:05:25:a5:86:f6:e3:83:
6e:42:bf:da:db:31:7d:af:7f:f5:89:df:7f:5b:3f:06:8f:48:
8c:64:10:7d:0c:3d:40:a8:d4:30:5a:f3:62:be:5c:df:e7:93:
f4:e3:19:e0:bc:d2:44:8c:78:de:fb:25:ee:e2:9a:fb:c1:2f:
48:f1:b1:04:7c:19:c4:1b:70:e0:2b:ef:30:1d:42:71:b1:47:
74:04:9f:ac:4f:84:fd:26:57:f3:f8:75:98:1c:e5:cd:f6:1f:
44:8e:34:1b:64:0e:18:ef:59:cd:b2:20:69:1d:16:af:08:21:
c5:0e:3c:63:e1:67:58:fa:ef:24:41:8d:0d:e3:81:2d:23:22:
0f:38:b3:1a:d3:1c:e1:81:a7:15:4c:1a:28:7c:cf:ed:97:b2:
09:0d:62:d9:c7:e9:ba:32:de:67:08:2d:a2:4c:ab:ed:98:19:
fc:98:23:e3:6c:32:42:60:dc:4c:65:38:e5:e2:f7:b8:c5:43:
10:bc:a1:a9:1b:4a:6d:ec:ee:1b:14:80:a8:25:78:a7:6d:e2:
7b:d5:19:1c:f4:00:ab:92:53:c1:f6:a4:5c:bc:32:e4:78:54:
6b:13:16:1b:8f:3a:8d:2e:d6:87:ff:a2:1b:d2:70:66:d2:dd:
ac:cc:7a:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaUFlG4THXSnYceixs4PB5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjFkZjU5OGY0YThmM2EyZDA3NGNjYjZmNmQxNmI1NGQx
ZDExMWMwHhcNMjUwNTAzMDMwMDEyWhcNMjUwNTA0MDMwMDEyWjAzMTEwLwYDVQQD
EyhlMmM4MDcyYWEwMjRhYTk1NjNlZjlmMzBjYTJkMjI5Yzk2N2RiNjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTBQQbnq0ecQV7O6xHGAN4XIEZ18
7C8/7EfOW9kwDM/gajtYdMpt9EXIzGmYbef4l0WAsFkUkgbNmQPjQWllWi1CU2ME
2Ix2yUJPwlKFVxbogByZCTAVH6YzfDn2dLUpV8hoK1wmOyGF7+xHVl6h8erwEH4N
pvpMzodLlTaDCarEy3Hw4Na+1bj0zobuNKDqSTNDjtCD0pWyV6Yp8Bwv0hbQD908
keJqvf4O1Le+KNBoERmAhhpy15NMeAnH3BSJ/YD8f6Xii+XHDAxGGChlBwSKpQ/S
Id7EsGukJNnL0utDs21JCTczDG8QcRlLl3wD2ZhP5omK82b0sFxI3FsrbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLIByqgJKqVY++fMMotIpyWfbZDMB8GA1UdIwQY
MBaAFN3x31mPSo86LQdMy29tFrVNHREcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZIZldZOUtqem90QjB6TGIyMFd0VTBkRVJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82YjhiY2UtNTg0Yy00OTJjLWJkN2Ut
ZDBmMzFiYzkzMDc5LzEvM2ZIZldZOUtqem90QjB6TGIyMFd0VTBkRVJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82YjhiY2UtNTg0Yy00OTJjLWJkN2UtZDBmMzFiYzkzMDc5
LzEvM2ZIZldZOUtqem90QjB6TGIyMFd0VTBkRVJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZ8hk7xQ
J0Mtd6IFJaWG9uODbkK/2tsxfa9/9Ynff1s/Bo9IjGQQfQw9QKjUMFrzYr5c3+eT
9OMZ4LzSRIx43vsl7uKa+8EvSPGxBHwZxBtw4CvvMB1CcbFHdASfrE+E/SZX8/h1
mBzlzfYfRI40G2QOGO9ZzbIgaR0WrwghxQ48Y+FnWPrvJEGNDeOBLSMiDzizGtMc
4YGnFUwaKHzP7ZeyCQ1i2cfpujLeZwgtokyr7ZgZ/Jgj42wyQmDcTGU45eL3uMVD
ELyhqRtKbezuGxSAqCV4p23ie9UZHPQAq5JTwfakXLwy5HhUaxMWG486jS7Wh/+i
G9JwZtLdrMx6ow==
-----END CERTIFICATE-----
Generated at Sat May 3 12:36:39 2025 by rpki-client