Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft (raw, json)
Hash identifier: A7OMAhhr7rTpLSD8Kegc8uOPEv08mhunby0Qu7jZxBg=
Subject key identifier: 02:9C:F7:E8:91:0A:DD:F4:9F:56:D6:DF:A7:E2:E7:AC:17:CE:C1:BB
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 01967D57A55F9E2477427B08EAFBBA38700F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
Manifest number: 042A
Signing time: Mon 28 Apr 2025 17:00:18 +0000
Manifest this update: Mon 28 Apr 2025 17:00:18 +0000
Manifest next update: Tue 29 Apr 2025 17:00:18 +0000
Files and hashes: 1: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl (hash: JeZPHqHX90NW5ZyGKlJ2mZpge2OHYUlYq4qW2cmhWUU=)
2: qqGYhZyQ1Jf2yBiQTxnFZklY3mQ.roa (hash: c+EtOwZcoNbafxYOwYXLqi8yAdjVCzKcxk3fMjvNuoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:57:a5:5f:9e:24:77:42:7b:08:ea:fb:ba:38:70:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Apr 28 17:00:18 2025 GMT
Not After : Apr 29 17:00:18 2025 GMT
Subject: CN=029cf7e8910addf49f56d6dfa7e2e7ac17cec1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:a0:03:42:ab:8c:fb:bb:bd:78:c6:51:20:
85:c1:df:b9:ba:4a:fc:c3:ac:bb:24:ed:c3:07:47:
55:a8:d2:6b:0d:8d:48:80:c0:22:9e:e0:3c:29:3b:
0b:6e:cb:37:77:9f:85:cf:e9:1e:00:59:20:41:13:
91:a2:20:b2:96:e3:3e:5d:15:c4:16:f5:01:50:6f:
fa:15:7c:a2:23:de:a4:9c:d8:0e:ea:d2:eb:3c:b4:
5e:ef:92:bb:4b:cd:d6:30:1b:41:f4:77:b2:39:53:
14:db:95:3f:97:fc:f0:25:81:19:81:e1:99:db:8c:
fa:7a:21:11:02:05:af:41:a6:35:cb:d2:3d:83:54:
61:55:af:23:31:17:ee:df:14:ad:7e:d9:af:a7:c3:
9b:a4:e5:d2:4b:28:72:b8:88:6b:4e:9b:a9:6d:39:
0f:ca:3e:64:11:15:81:d2:de:44:6d:7b:25:43:d7:
c3:00:36:ee:01:c8:69:66:b3:3f:e1:be:d9:53:9a:
06:91:84:22:7f:a7:49:3d:3f:b6:e4:50:cd:ba:4c:
c6:2b:9d:5a:15:0e:4b:c5:5e:96:6a:55:fe:6d:c1:
45:7a:a9:94:63:14:ab:d3:79:21:7a:a7:00:87:e4:
d1:71:27:28:bb:4b:f6:ae:8c:84:4a:03:bf:c9:7e:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9C:F7:E8:91:0A:DD:F4:9F:56:D6:DF:A7:E2:E7:AC:17:CE:C1:BB
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:68:72:ef:a6:3a:54:c4:ae:5d:35:fe:47:86:8d:77:1d:19:
81:de:b9:7a:24:2a:b6:98:3f:5b:df:76:4d:02:45:b9:29:50:
be:a5:77:f1:42:a7:78:8d:d0:97:e0:77:b7:f1:4e:0b:fb:6d:
e9:b7:ab:ae:23:42:d6:e8:28:87:31:45:2d:70:52:e8:8a:44:
18:d2:19:e5:9d:a5:10:99:41:9d:8a:28:ee:c1:0c:37:d9:6d:
74:b5:b5:05:a4:ed:84:ef:a3:72:b3:d6:5e:d7:11:e1:06:77:
21:d8:4e:92:3e:f3:b8:86:8c:b3:9d:32:ec:f8:a1:64:62:a2:
bd:fb:8b:a7:c4:7e:9d:3c:22:a1:b1:80:7d:da:99:b5:2f:f6:
06:d0:0f:00:1e:e7:5a:24:68:f2:9e:43:40:df:d8:98:11:9f:
53:6b:db:67:b8:6f:a6:56:53:7b:cc:d8:7a:6e:57:e8:b7:c4:
7c:20:f2:a0:43:6d:7e:e2:7f:43:50:bc:8e:09:4e:2a:ca:74:
9d:0e:45:e0:5a:67:d4:a3:b8:90:b0:3a:32:12:53:16:7f:f4:
84:cd:d6:17:ac:01:02:eb:6e:74:3f:27:f0:30:e9:8b:92:39:
ae:60:e1:cc:2a:38:5b:99:91:b5:88:20:d7:6c:9b:df:e6:e4:
9e:45:64:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9V6VfniR3QnsI6vu6OHAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOGFlNGQ5YWQ4NjNkZGExNDAxYjQ5MGMyOGNmZjgyZDk5
OGUzYjUwHhcNMjUwNDI4MTcwMDE4WhcNMjUwNDI5MTcwMDE4WjAzMTEwLwYDVQQD
EygwMjljZjdlODkxMGFkZGY0OWY1NmQ2ZGZhN2UyZTdhYzE3Y2VjMWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSGgA0KrjPu7vXjGUSCFwd+5ukr8
w6y7JO3DB0dVqNJrDY1IgMAinuA8KTsLbss3d5+Fz+keAFkgQRORoiCyluM+XRXE
FvUBUG/6FXyiI96knNgO6tLrPLRe75K7S83WMBtB9HeyOVMU25U/l/zwJYEZgeGZ
24z6eiERAgWvQaY1y9I9g1RhVa8jMRfu3xStftmvp8ObpOXSSyhyuIhrTpupbTkP
yj5kERWB0t5EbXslQ9fDADbuAchpZrM/4b7ZU5oGkYQif6dJPT+25FDNukzGK51a
FQ5LxV6WalX+bcFFeqmUYxSr03kheqcAh+TRcScou0v2royESgO/yX6mEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKc9+iRCt30n1bW36fi56wXzsG7MB8GA1UdIwQY
MBaAFN2K5Nmthj3aFAG0kMKM/4LZmOO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGIt
NGRlOTM0NWM4M2JmLzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zNDdkNzEtZmY3OC00YjNhLWE1ZGItNGRlOTM0NWM4M2Jm
LzEvM1lyazJhMkdQZG9VQWJTUXdvel9ndG1ZNDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWhy76Y6
VMSuXTX+R4aNdx0Zgd65eiQqtpg/W992TQJFuSlQvqV38UKneI3Ql+B3t/FOC/tt
6berriNC1ugohzFFLXBS6IpEGNIZ5Z2lEJlBnYoo7sEMN9ltdLW1BaTthO+jcrPW
XtcR4QZ3IdhOkj7zuIaMs50y7PihZGKivfuLp8R+nTwiobGAfdqZtS/2BtAPAB7n
WiRo8p5DQN/YmBGfU2vbZ7hvplZTe8zYem5X6LfEfCDyoENtfuJ/Q1C8jglOKsp0
nQ5F4Fpn1KO4kLA6MhJTFn/0hM3WF6wBAutudD8n8DDpi5I5rmDhzCo4W5mRtYgg
12yb3+bknkVkIg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:18 2025 by rpki-client