Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
File: g-3hynyzX11h-NWctQNumT6kO3A.mft (raw, json)
Hash identifier: oVOSp2yTp+n7S0mo/U3vkF/PCLyulW0WRSfMXfdA8zE=
Subject key identifier: 6F:F0:90:F9:81:5F:2F:EB:66:3F:1E:E2:47:F2:B2:79:F6:C4:9D:62
Authority key identifier: 83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
Certificate issuer: /CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Certificate serial: 019694F2FBC19C1DFC43E42DA14B429C5725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
Manifest number: 0D46
Signing time: Sat 03 May 2025 07:01:14 +0000
Manifest this update: Sat 03 May 2025 07:01:14 +0000
Manifest next update: Sun 04 May 2025 07:01:14 +0000
Files and hashes: 1: g-3hynyzX11h-NWctQNumT6kO3A.crl (hash: 05+kOAKXhRR5/K5UPB6yGH1IW4k7xuPt6mAPWR9ReSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:f2:fb:c1:9c:1d:fc:43:e4:2d:a1:4b:42:9c:57:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ede1ca7cb35f5d61f8d59cb5036e993ea43b70
Validity
Not Before: May 3 07:01:14 2025 GMT
Not After : May 4 07:01:14 2025 GMT
Subject: CN=6ff090f9815f2feb663f1ee247f2b279f6c49d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:d1:6c:17:f5:7f:0a:ee:d2:90:d7:50:ab:
a3:fc:d0:ea:08:ab:79:6e:3c:da:78:97:fe:0e:a9:
d7:ac:03:97:8c:c4:af:5d:b1:be:dc:1d:1b:84:e8:
3f:40:40:32:08:f2:d0:d5:51:69:b8:04:9e:ef:6c:
be:00:ca:56:5a:43:14:61:b1:8f:00:84:3c:61:b4:
42:44:59:2e:75:d4:0d:c4:b5:4f:cb:ec:b6:a3:82:
9f:0d:44:ff:da:06:0d:e6:98:a4:c6:4b:7a:f0:64:
db:3a:3d:06:49:9a:8f:0c:19:08:7e:ac:6d:0a:4b:
c6:6d:d3:b7:a3:00:dc:e8:31:b6:af:67:0f:76:d2:
ae:cb:8f:78:e0:01:07:56:7b:5e:f4:67:64:41:9b:
c5:b0:11:e7:57:26:67:b9:12:3f:81:88:fd:5b:0b:
4e:e5:99:9e:8d:fd:a6:b3:4a:55:cc:96:07:82:00:
ef:f9:da:52:ff:69:36:65:a3:d8:b6:1b:31:a8:1f:
54:de:9a:bb:8d:42:03:27:b7:53:98:92:f6:f6:b3:
bc:57:bf:82:a1:14:d5:0b:3e:c9:f8:1a:20:2f:29:
ef:ee:66:dc:6e:d9:72:c1:18:d3:cf:e0:0e:01:63:
2f:ce:12:7f:46:d5:91:f1:ca:e8:57:f5:1f:71:34:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F0:90:F9:81:5F:2F:EB:66:3F:1E:E2:47:F2:B2:79:F6:C4:9D:62
X509v3 Authority Key Identifier:
keyid:83:ED:E1:CA:7C:B3:5F:5D:61:F8:D5:9C:B5:03:6E:99:3E:A4:3B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-3hynyzX11h-NWctQNumT6kO3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f3eb19-85ee-487f-ad12-8b3660ed5ed0/1/g-3hynyzX11h-NWctQNumT6kO3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8e:ed:bd:db:9e:56:67:13:5d:23:1a:e2:69:69:35:ce:ca:
22:5c:5c:d4:c0:e4:70:8d:6c:05:b6:62:d9:8b:4c:a2:e9:05:
d0:1a:d3:85:4d:21:f9:bc:4a:3f:63:60:81:1d:c7:be:f2:6e:
7f:bb:9a:4e:5a:67:8b:64:bd:4c:b6:a2:15:4b:69:e6:53:bc:
85:be:66:82:6c:03:6d:80:44:5c:d9:c4:7d:f7:93:93:59:eb:
e4:91:5b:da:e9:b5:34:09:c3:31:6f:37:b8:53:1e:ab:81:e3:
70:ce:9e:79:c2:a5:a4:f4:87:2a:7a:3a:41:f7:46:9f:74:07:
47:62:e4:c8:91:bd:84:2f:84:b7:2c:a9:bd:95:00:b4:40:b5:
f3:93:cd:76:08:44:a7:22:c2:fc:30:34:1e:2e:80:9f:7b:6d:
ea:a4:35:ea:a8:b2:ea:f7:4f:be:12:47:c8:65:63:a7:b4:41:
70:38:b0:42:91:0b:9e:a7:07:38:bf:70:05:a9:ce:10:fe:f0:
62:89:16:7c:04:2d:00:eb:b3:76:b0:ec:1b:b6:32:ee:1c:f0:
b9:8a:04:ea:ae:5e:7a:76:0c:68:d5:04:82:c5:f3:93:4c:d1:
f5:13:98:6d:5e:19:98:1f:3b:a1:15:65:93:9f:f6:fd:8b:93:
4d:4d:f9:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaU8vvBnB38Q+QtoUtCnFclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZWRlMWNhN2NiMzVmNWQ2MWY4ZDU5Y2I1MDM2ZTk5M2Vh
NDNiNzAwHhcNMjUwNTAzMDcwMTE0WhcNMjUwNTA0MDcwMTE0WjAzMTEwLwYDVQQD
Eyg2ZmYwOTBmOTgxNWYyZmViNjYzZjFlZTI0N2YyYjI3OWY2YzQ5ZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukvRbBf1fwru0pDXUKuj/NDqCKt5
bjzaeJf+DqnXrAOXjMSvXbG+3B0bhOg/QEAyCPLQ1VFpuASe72y+AMpWWkMUYbGP
AIQ8YbRCRFkuddQNxLVPy+y2o4KfDUT/2gYN5pikxkt68GTbOj0GSZqPDBkIfqxt
CkvGbdO3owDc6DG2r2cPdtKuy4944AEHVnte9GdkQZvFsBHnVyZnuRI/gYj9WwtO
5Zmejf2ms0pVzJYHggDv+dpS/2k2ZaPYthsxqB9U3pq7jUIDJ7dTmJL29rO8V7+C
oRTVCz7J+BogLynv7mbcbtlywRjTz+AOAWMvzhJ/RtWR8croV/UfcTQhFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/wkPmBXy/rZj8e4kfysnn2xJ1iMB8GA1UdIwQY
MBaAFIPt4cp8s19dYfjVnLUDbpk+pDtwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy0zaHlueXpYMTFoLU5XY3RRTnVtVDZrTzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mM2ViMTktODVlZS00ODdmLWFkMTIt
OGIzNjYwZWQ1ZWQwLzEvZy0zaHlueXpYMTFoLU5XY3RRTnVtVDZrTzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9mM2ViMTktODVlZS00ODdmLWFkMTItOGIzNjYwZWQ1ZWQw
LzEvZy0zaHlueXpYMTFoLU5XY3RRTnVtVDZrTzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAho7tvdue
VmcTXSMa4mlpNc7KIlxc1MDkcI1sBbZi2YtMoukF0BrThU0h+bxKP2NggR3HvvJu
f7uaTlpni2S9TLaiFUtp5lO8hb5mgmwDbYBEXNnEffeTk1nr5JFb2um1NAnDMW83
uFMeq4HjcM6eecKlpPSHKno6QfdGn3QHR2LkyJG9hC+EtyypvZUAtEC185PNdghE
pyLC/DA0Hi6An3tt6qQ16qiy6vdPvhJHyGVjp7RBcDiwQpELnqcHOL9wBanOEP7w
YokWfAQtAOuzdrDsG7Yy7hzwuYoE6q5eenYMaNUEgsXzk0zR9ROYbV4ZmB87oRVl
k5/2/YuTTU35cg==
-----END CERTIFICATE-----
Generated at Sat May 3 12:36:44 2025 by rpki-client