Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.mft
File: MH3iES3L0Gv7x-h_O_8jcinS0XM.mft (raw, json)
Hash identifier: OLLCBceYWdddFXK0AcCj2SJa74gZnTcrquZX2IjiE2g=
Subject key identifier: 62:8B:A8:C3:05:91:50:14:04:56:BE:95:89:57:8B:23:34:62:6C:F0
Authority key identifier: 30:7D:E2:11:2D:CB:D0:6B:FB:C7:E8:7F:3B:FF:23:72:29:D2:D1:73
Certificate issuer: /CN=307de2112dcbd06bfbc7e87f3bff237229d2d173
Certificate serial: 0196790D5F21E735C436D80E3BFD61DF95CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH3iES3L0Gv7x-h_O_8jcinS0XM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.mft
Manifest number: 44
Signing time: Sun 27 Apr 2025 21:00:41 +0000
Manifest this update: Sun 27 Apr 2025 21:00:41 +0000
Manifest next update: Mon 28 Apr 2025 21:00:41 +0000
Files and hashes: 1: MH3iES3L0Gv7x-h_O_8jcinS0XM.crl (hash: XPLq1lXATUjZgzwoxTpnQzmmxH3CWSJqvFx1js1mM/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH3iES3L0Gv7x-h_O_8jcinS0XM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:5f:21:e7:35:c4:36:d8:0e:3b:fd:61:df:95:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307de2112dcbd06bfbc7e87f3bff237229d2d173
Validity
Not Before: Apr 27 21:00:41 2025 GMT
Not After : Apr 28 21:00:41 2025 GMT
Subject: CN=628ba8c3059150140456be9589578b2334626cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:99:c2:10:d1:f8:0b:bb:7c:cf:9e:2c:58:37:
82:c7:0c:53:19:c7:02:52:73:de:9c:a3:03:23:cc:
37:3b:ff:4f:18:27:fb:52:2f:89:6f:e7:06:c7:0d:
ed:ec:5e:70:69:11:2c:14:60:42:ee:32:71:52:c0:
6c:20:bc:96:fa:21:aa:1f:a6:04:eb:18:08:b6:8b:
fe:28:06:39:a6:01:ab:51:47:40:c2:96:49:6b:89:
2c:af:24:38:26:f1:70:bb:ed:e9:6a:d5:01:e8:fb:
02:33:e0:9d:b4:1a:85:76:ab:a0:c1:a2:23:74:c8:
7b:d9:65:3a:11:f9:fe:a7:9e:de:66:b7:e3:db:2a:
03:bf:d2:22:18:c4:12:44:a6:b1:ad:31:f3:46:10:
ba:f9:29:2e:01:0d:33:6a:89:0e:47:67:4d:3f:69:
70:30:49:9c:3f:cc:7d:98:31:13:e6:3e:dc:12:ca:
d5:92:75:63:cf:4d:5a:50:af:b9:95:77:48:29:72:
c0:27:b0:c7:42:41:7c:10:2a:e2:d0:5d:9f:f3:36:
47:77:01:ea:71:12:81:44:a5:c0:77:95:c5:ca:ee:
6a:32:47:3f:d2:ee:d9:92:e0:8b:e7:05:1b:48:9d:
1a:e5:d8:d2:c7:21:2b:19:e5:23:76:65:da:ba:d8:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8B:A8:C3:05:91:50:14:04:56:BE:95:89:57:8B:23:34:62:6C:F0
X509v3 Authority Key Identifier:
keyid:30:7D:E2:11:2D:CB:D0:6B:FB:C7:E8:7F:3B:FF:23:72:29:D2:D1:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH3iES3L0Gv7x-h_O_8jcinS0XM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3e:a1:50:c9:bb:f0:e0:9d:95:2f:83:0b:93:3e:d7:93:42:
6e:37:9f:08:72:7e:6d:ab:b8:c0:30:f8:2f:a5:9c:c9:3d:c0:
0d:ef:6b:45:e2:17:c2:ac:b4:b0:87:aa:6f:82:d4:51:2c:e5:
73:82:e0:52:f6:fe:82:66:9f:db:7f:c0:e2:b3:1d:cc:ae:d7:
53:7a:8c:20:ac:ca:0e:63:c6:45:b3:4c:9b:1b:6b:4a:91:1b:
6f:b6:07:c4:cf:aa:00:f7:bb:6f:17:d7:1e:c5:4b:f6:2c:34:
98:ea:28:1d:43:84:6b:02:db:0d:d6:a3:d0:8d:32:6a:77:7a:
eb:96:e9:a8:da:30:9d:df:9e:4c:03:09:cc:8d:f7:9c:30:72:
4d:ed:ad:4f:d7:ba:66:4e:2a:5f:42:47:bd:fa:97:8a:e0:23:
52:b4:24:3c:a1:31:ac:32:ab:b2:b6:98:cf:6b:3a:7b:10:f4:
06:fa:16:f2:a5:47:24:9d:10:76:59:b5:03:38:df:d0:d5:f0:
1e:59:75:38:fd:17:15:1e:b4:1d:bf:f8:13:03:07:25:b3:cc:
26:2a:b6:fd:1d:8d:75:cc:76:79:56:3a:e4:15:8e:b4:c7:b9:
26:e2:46:ea:e2:08:f5:7c:76:2a:3f:b3:76:49:ed:79:73:67:
c7:7d:c1:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5DV8h5zXENtgOO/1h35XPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2RlMjExMmRjYmQwNmJmYmM3ZTg3ZjNiZmYyMzcyMjlk
MmQxNzMwHhcNMjUwNDI3MjEwMDQxWhcNMjUwNDI4MjEwMDQxWjAzMTEwLwYDVQQD
Eyg2MjhiYThjMzA1OTE1MDE0MDQ1NmJlOTU4OTU3OGIyMzM0NjI2Y2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pnCENH4C7t8z54sWDeCxwxTGccC
UnPenKMDI8w3O/9PGCf7Ui+Jb+cGxw3t7F5waREsFGBC7jJxUsBsILyW+iGqH6YE
6xgItov+KAY5pgGrUUdAwpZJa4ksryQ4JvFwu+3patUB6PsCM+CdtBqFdqugwaIj
dMh72WU6Efn+p57eZrfj2yoDv9IiGMQSRKaxrTHzRhC6+SkuAQ0zaokOR2dNP2lw
MEmcP8x9mDET5j7cEsrVknVjz01aUK+5lXdIKXLAJ7DHQkF8ECri0F2f8zZHdwHq
cRKBRKXAd5XFyu5qMkc/0u7ZkuCL5wUbSJ0a5djSxyErGeUjdmXautgSVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKLqMMFkVAUBFa+lYlXiyM0YmzwMB8GA1UdIwQY
MBaAFDB94hEty9Br+8fofzv/I3Ip0tFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUgzaUVTM0wwR3Y3eC1oX09fOGpjaW5TMFhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZWM4NzctNTlkNS00MmY5LTk2N2Ut
MjczMjE1MWI4ZTg2LzEvTUgzaUVTM0wwR3Y3eC1oX09fOGpjaW5TMFhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9hZWM4NzctNTlkNS00MmY5LTk2N2UtMjczMjE1MWI4ZTg2
LzEvTUgzaUVTM0wwR3Y3eC1oX09fOGpjaW5TMFhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaT6hUMm7
8OCdlS+DC5M+15NCbjefCHJ+bau4wDD4L6WcyT3ADe9rReIXwqy0sIeqb4LUUSzl
c4LgUvb+gmaf23/A4rMdzK7XU3qMIKzKDmPGRbNMmxtrSpEbb7YHxM+qAPe7bxfX
HsVL9iw0mOooHUOEawLbDdaj0I0yand665bpqNownd+eTAMJzI33nDByTe2tT9e6
Zk4qX0JHvfqXiuAjUrQkPKExrDKrsraYz2s6exD0BvoW8qVHJJ0Qdlm1Azjf0NXw
Hll1OP0XFR60Hb/4EwMHJbPMJiq2/R2Ndcx2eVY65BWOtMe5JuJG6uII9Xx2Kj+z
dknteXNnx33B8g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:30:03 2025 by rpki-client