Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
File: 3i6RcxXwqHiyH8E51JqCGq3cPJc.mft (raw, json)
Hash identifier: V5vPHF8R7LiRvFJtjvuvJOkqyjuJchTdPsiQFrqJ3Y4=
Subject key identifier: 51:9E:69:AC:11:07:70:C1:7F:0D:DC:0F:F4:D7:57:F8:51:21:0A:F0
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Certificate issuer: /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial: 0196771E84CDADE6DDA86559C65F1F5E0B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
Manifest number: 151E
Signing time: Sun 27 Apr 2025 12:00:10 +0000
Manifest this update: Sun 27 Apr 2025 12:00:10 +0000
Manifest next update: Mon 28 Apr 2025 12:00:10 +0000
Files and hashes: 1: 3i6RcxXwqHiyH8E51JqCGq3cPJc.crl (hash: WQ4dUfAw7naH8JaCloaCtrqZO7FeUJuju6wIXRrprNM=)
2: AvB8ANlawjDpzo5pEv-ozc274As.roa (hash: JAMHGl8FA3FqoIkdY9hmqgyAMGPXFfGq49FOeMqcpDU=)
3: rsaDxQLLmYAD38iUbK7BPrqaO3s.roa (hash: 7PXRPaNFmGtt9qZAjG0o9yX575ZogLdz94mJLu6xEQM=)
4: yytkDg390wURQAs45MKB5G-EL9Y.roa (hash: Zh5YMYHrmE+MJNbhijbyZkT5VrFHROVfxZElaGb2ngI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:84:cd:ad:e6:dd:a8:65:59:c6:5f:1f:5e:0b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Validity
Not Before: Apr 27 12:00:10 2025 GMT
Not After : Apr 28 12:00:10 2025 GMT
Subject: CN=519e69ac110770c17f0ddc0ff4d757f851210af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:94:2c:ae:86:4f:20:a6:24:b5:c4:bd:d3:47:
52:22:f9:d7:d0:23:31:c6:60:a9:06:a0:6a:6c:1a:
a4:20:e9:45:cf:3a:d0:96:e6:60:80:73:11:79:69:
51:e9:3e:22:a6:2d:47:8d:eb:df:ac:36:96:2f:4e:
7e:bc:c9:27:58:04:ae:81:ba:a9:a0:a9:73:2b:e9:
b9:78:96:a1:4a:6b:02:f3:28:a6:fc:b2:a8:ec:eb:
2d:07:da:4e:11:f6:33:e2:93:74:1a:93:4f:4f:7c:
89:b0:9a:bd:dc:b2:ef:b1:9d:be:90:24:d3:b6:3b:
96:85:a4:94:af:98:82:d7:f3:7e:3a:0a:66:b7:c9:
bc:f0:0e:e6:8e:8f:69:80:7c:d0:2f:9f:11:49:05:
3b:89:9b:19:fa:29:b6:0d:7a:6e:5e:48:ec:e3:ed:
ee:a0:6a:7f:30:af:f9:26:39:5d:5a:ee:aa:56:5f:
6b:49:0a:34:4c:a8:0c:ea:18:19:e0:1e:13:29:99:
fe:23:40:d3:63:a0:bc:49:69:f5:94:1a:f9:fb:9e:
40:5f:31:82:42:c6:2d:eb:59:e6:44:dd:b6:5e:8b:
df:28:23:91:f8:18:07:6e:ef:eb:bb:5d:57:4a:fa:
26:7d:35:60:c7:fe:8b:5e:26:d6:48:93:c6:d6:86:
ea:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9E:69:AC:11:07:70:C1:7F:0D:DC:0F:F4:D7:57:F8:51:21:0A:F0
X509v3 Authority Key Identifier:
keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cf:35:10:b7:18:70:5c:80:ae:9f:31:df:7d:8b:12:e5:be:
ac:d8:a9:82:d1:1d:5c:f0:ed:63:92:f5:4c:33:94:0f:cb:ec:
84:83:ee:ff:ff:f0:68:7b:8a:11:04:49:63:7f:de:a3:20:af:
00:c7:14:7a:56:4b:08:97:fa:47:e4:40:3d:f8:fd:f3:88:bd:
16:41:e4:90:cd:06:23:fb:67:ca:8d:04:98:04:d7:c0:ef:3f:
d3:a3:45:51:d4:bc:68:25:1f:7c:2b:b9:ef:98:0b:33:60:31:
a2:b6:07:a2:7c:62:41:89:f5:b5:77:ac:f0:cc:99:f3:78:fc:
e8:7c:ce:5a:74:24:93:ef:c5:59:10:f8:a4:21:ac:0a:86:cb:
e7:30:55:cd:c3:58:0a:90:49:6a:16:e0:16:f6:8d:1d:2c:06:
d9:18:c9:2f:56:fc:94:65:28:e4:fc:04:5f:c9:dc:3f:da:33:
25:60:af:78:5b:83:1a:34:30:58:6f:98:b4:77:ba:94:a7:cb:
e0:57:e2:d2:43:7b:8d:d7:ba:54:64:51:3b:d5:cd:81:6c:d2:
b5:6f:22:8f:55:3d:99:da:73:1a:21:77:3c:36:17:9a:78:1f:
fd:33:15:30:19:4c:2f:d1:11:bd:61:cb:a2:98:85:b6:68:ef:
8a:59:4a:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3HoTNrebdqGVZxl8fXgsPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMmU5MTczMTVmMGE4NzhiMjFmYzEzOWQ0OWE4MjFhYWRk
YzNjOTcwHhcNMjUwNDI3MTIwMDEwWhcNMjUwNDI4MTIwMDEwWjAzMTEwLwYDVQQD
Eyg1MTllNjlhYzExMDc3MGMxN2YwZGRjMGZmNGQ3NTdmODUxMjEwYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5QsroZPIKYktcS900dSIvnX0CMx
xmCpBqBqbBqkIOlFzzrQluZggHMReWlR6T4ipi1HjevfrDaWL05+vMknWASugbqp
oKlzK+m5eJahSmsC8yim/LKo7OstB9pOEfYz4pN0GpNPT3yJsJq93LLvsZ2+kCTT
tjuWhaSUr5iC1/N+Ogpmt8m88A7mjo9pgHzQL58RSQU7iZsZ+im2DXpuXkjs4+3u
oGp/MK/5JjldWu6qVl9rSQo0TKgM6hgZ4B4TKZn+I0DTY6C8SWn1lBr5+55AXzGC
QsYt61nmRN22XovfKCOR+BgHbu/ru11XSvomfTVgx/6LXibWSJPG1obqMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGeaawRB3DBfw3cD/TXV/hRIQrwMB8GA1UdIwQY
MBaAFN4ukXMV8Kh4sh/BOdSaghqt3DyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYt
ZjhkNjVjOTgzNzQ0LzEvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yZDViYzgtNWQ5My00YjBhLWE4YjYtZjhkNjVjOTgzNzQ0
LzEvM2k2UmN4WHdxSGl5SDhFNTFKcUNHcTNjUEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADM81ELcY
cFyArp8x332LEuW+rNipgtEdXPDtY5L1TDOUD8vshIPu///waHuKEQRJY3/eoyCv
AMcUelZLCJf6R+RAPfj984i9FkHkkM0GI/tnyo0EmATXwO8/06NFUdS8aCUffCu5
75gLM2AxorYHonxiQYn1tXes8MyZ83j86HzOWnQkk+/FWRD4pCGsCobL5zBVzcNY
CpBJahbgFvaNHSwG2RjJL1b8lGUo5PwEX8ncP9ozJWCveFuDGjQwWG+YtHe6lKfL
4Ffi0kN7jde6VGRRO9XNgWzStW8ij1U9mdpzGiF3PDYXmngf/TMVMBlML9ERvWHL
opiFtmjvillKdg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:49:24 2025 by rpki-client