Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
File: 3Hgh4by_bgdOpIFKqlxj47qBPF8.mft (raw, json)
Hash identifier: 8QUwkY9GbHoUkXISI3X1xtL+0gzPjzh9iZKycCJOAzg=
Subject key identifier: 0C:FA:CC:A4:0E:DC:D9:5C:B1:15:DE:F2:07:F4:85:A5:9E:28:76:40
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 019693A8F82D8299D6821E2C9EFCCDDB59DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
Manifest number: 152C
Signing time: Sat 03 May 2025 01:00:46 +0000
Manifest this update: Sat 03 May 2025 01:00:46 +0000
Manifest next update: Sun 04 May 2025 01:00:46 +0000
Files and hashes: 1: 3Hgh4by_bgdOpIFKqlxj47qBPF8.crl (hash: Fsb4buE96ZsY5p9MYgpwm2jb3iM9QRnCYUyBuuC3qRY=)
2: 4MXMdJWAndzkkiHFnmOxrlOkHIs.roa (hash: OiJ7+6r4bWAFN5vOHYBjk8U2TGkBpOBvwNxXY+Qb+To=)
3: FnxhJQ5jd2jBoCiaTZ0_b7pYcn4.roa (hash: YbjDITXwnNkMY1d8iM5sg8TPIw1q/oeZDc75wOKQiOE=)
4: KYs_VMmQL9k2rQHns_O4m4f35bc.roa (hash: 1ns98Zta2gRWyrvr5wyrj8EwmfBa9CnA+/wYUmR2SA0=)
5: ThB5ArM42WkjWUEQcQYsflTBSWo.roa (hash: bddz7FyKEk1/5lgcU0RqcQHG7LiGlbilafV868t6FT4=)
6: e8yyBy_WYk0MmiOF_-c6ZOE78e0.roa (hash: XCwVuTCuJ/Y/WAoLWIkeepq2X2E/4/mFMfojm79U0cM=)
7: uRWNqrl7lEtL4BdXY6zm3up7W9g.roa (hash: 5dZDwl/VQCf/bzBpVyR3+W+VZSdwG299LMVlDR4jvrU=)
8: w6y6tA7YYKjCRBu0w7S_pejO5kU.roa (hash: m4339RdE053FyeU5wm1JX9FNzAT+cE85Onp7E9j3YoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:a8:f8:2d:82:99:d6:82:1e:2c:9e:fc:cd:db:59:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: May 3 01:00:46 2025 GMT
Not After : May 4 01:00:46 2025 GMT
Subject: CN=0cfacca40edcd95cb115def207f485a59e287640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:e6:4c:65:1c:7b:ab:96:1a:ae:4b:cc:f3:
d3:c4:9c:60:9c:86:a4:de:73:ee:ae:94:f5:17:20:
b2:06:e3:04:be:1d:81:01:93:b1:fc:c9:cd:6f:9d:
5e:da:68:6b:24:39:75:8c:67:53:7b:0f:f7:cf:61:
36:56:15:9d:58:8e:7c:78:31:00:16:53:0b:27:98:
33:db:28:83:6a:2c:9a:9f:74:8b:92:ec:e3:4d:d7:
d1:64:4e:9f:aa:f7:c6:9e:76:91:88:76:a7:90:21:
2e:88:cc:67:2a:ea:31:94:a3:c0:5e:de:bc:00:7d:
c1:52:89:51:2b:61:af:cc:69:21:0d:f7:79:67:ee:
3a:15:9b:f1:f9:00:08:02:d9:9f:90:f6:f8:67:57:
28:a8:b7:70:c3:81:a3:41:89:15:7b:b4:ee:ad:85:
1a:eb:48:03:7f:a0:22:5d:d8:e1:73:ae:96:3f:27:
e0:ed:c2:16:93:88:fa:a9:37:c4:10:db:92:44:b0:
44:c3:b6:75:4a:6d:e7:dd:f9:cc:26:71:53:3e:06:
30:25:14:77:71:1a:85:a3:a9:bf:97:44:2f:d5:86:
78:bf:99:4e:b7:84:04:8b:54:17:36:37:dd:f1:f9:
96:ec:97:af:a0:1d:71:dc:6c:bb:5a:20:a2:75:f4:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FA:CC:A4:0E:DC:D9:5C:B1:15:DE:F2:07:F4:85:A5:9E:28:76:40
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9f:d4:8a:3b:0d:3f:be:4b:1a:93:be:c1:0a:0e:bb:3c:27:
4e:f4:64:ef:43:71:6f:2d:07:ad:dd:0f:2a:d5:61:d3:65:4b:
e3:91:e3:5b:b1:82:92:9c:c9:5b:db:95:15:ef:29:73:95:e6:
60:0c:69:73:03:68:1a:18:1c:18:b0:ba:6d:4f:fd:89:fa:51:
76:61:f5:9f:64:3e:92:9b:a9:e8:81:69:6d:28:20:5c:0a:e2:
a0:cb:37:22:97:80:16:c2:ac:d9:a1:e1:96:27:be:d1:b6:db:
de:d1:7c:73:8b:98:8e:07:84:26:4c:1a:35:81:77:ee:f2:4b:
e0:e8:26:6e:10:c4:45:2b:e1:6b:1e:0b:8f:0a:e3:aa:f3:d9:
de:b5:6d:5b:d0:ff:e3:5f:ed:7d:66:1a:53:5d:eb:bb:a1:bb:
4b:c2:5c:4a:fb:32:2d:94:54:13:c6:53:bf:48:6c:91:b4:05:
32:fd:67:ae:1d:dd:8b:88:0a:31:12:dc:66:f5:28:a5:d1:6c:
5e:1d:f5:0a:fe:56:c8:b4:fb:34:17:0f:e6:9e:dd:7c:16:7c:
9e:d8:76:ae:a7:29:ed:e6:20:f4:2f:29:5d:d4:76:6f:8c:3f:
1a:77:4b:7d:cf:fd:7f:8d:ff:2c:a3:e6:6f:93:a0:b0:aa:b5:
a9:a8:e4:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaTqPgtgpnWgh4snvzN21nfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzgyMWUxYmNiZjZlMDc0ZWE0ODE0YWFhNWM2M2UzYmE4
MTNjNWYwHhcNMjUwNTAzMDEwMDQ2WhcNMjUwNTA0MDEwMDQ2WjAzMTEwLwYDVQQD
EygwY2ZhY2NhNDBlZGNkOTVjYjExNWRlZjIwN2Y0ODVhNTllMjg3NjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSjmTGUce6uWGq5LzPPTxJxgnIak
3nPurpT1FyCyBuMEvh2BAZOx/MnNb51e2mhrJDl1jGdTew/3z2E2VhWdWI58eDEA
FlMLJ5gz2yiDaiyan3SLkuzjTdfRZE6fqvfGnnaRiHankCEuiMxnKuoxlKPAXt68
AH3BUolRK2GvzGkhDfd5Z+46FZvx+QAIAtmfkPb4Z1coqLdww4GjQYkVe7TurYUa
60gDf6AiXdjhc66WPyfg7cIWk4j6qTfEENuSRLBEw7Z1Sm3n3fnMJnFTPgYwJRR3
cRqFo6m/l0Qv1YZ4v5lOt4QEi1QXNjfd8fmW7JevoB1x3Gy7WiCidfSg9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAz6zKQO3NlcsRXe8gf0haWeKHZAMB8GA1UdIwQY
MBaAFNx4IeG8v24HTqSBSqpcY+O6gTxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYt
ZDQ4YjQyZWYxNTliLzEvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYtZDQ4YjQyZWYxNTli
LzEvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZ/UijsN
P75LGpO+wQoOuzwnTvRk70Nxby0Hrd0PKtVh02VL45HjW7GCkpzJW9uVFe8pc5Xm
YAxpcwNoGhgcGLC6bU/9ifpRdmH1n2Q+kpup6IFpbSggXArioMs3IpeAFsKs2aHh
lie+0bbb3tF8c4uYjgeEJkwaNYF37vJL4OgmbhDERSvhax4LjwrjqvPZ3rVtW9D/
41/tfWYaU13ru6G7S8JcSvsyLZRUE8ZTv0hskbQFMv1nrh3di4gKMRLcZvUopdFs
Xh31Cv5WyLT7NBcP5p7dfBZ8nth2rqcp7eYg9C8pXdR2b4w/GndLfc/9f43/LKPm
b5OgsKq1qajkvQ==
-----END CERTIFICATE-----
Generated at Sat May 3 07:10:02 2025 by rpki-client