Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: 3/maDUV/UCCDiW1bE31/F/aJ9vNf7bcruZh2RculEAI=
Subject key identifier: 54:BB:08:19:DB:ED:43:59:96:69:12:E7:93:3C:C5:DE:95:4E:A4:A0
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 0196767A8307008F432BBD8B2FFF2AC80723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 0E25
Signing time: Sun 27 Apr 2025 09:01:02 +0000
Manifest this update: Sun 27 Apr 2025 09:01:02 +0000
Manifest next update: Mon 28 Apr 2025 09:01:02 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: vMBibY1ZgDblzrME2hDbT9jFrPeo36PqFthAn02Vkww=)
2: f98-QGGyvPNag3NBWDooTVrQ2vI.roa (hash: HJhPbHQVg92t7q01K4xm1xNnj11AYPaciJd3bC3Ng+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:83:07:00:8f:43:2b:bd:8b:2f:ff:2a:c8:07:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Apr 27 09:01:02 2025 GMT
Not After : Apr 28 09:01:02 2025 GMT
Subject: CN=54bb0819dbed4359966912e7933cc5de954ea4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:36:a4:79:ef:e3:67:3d:66:a8:f2:1e:b4:
3e:95:3f:a9:5e:70:bb:91:2c:30:23:91:48:64:d2:
99:37:42:89:2c:2c:12:3e:f4:bb:be:ca:bf:12:07:
51:09:8e:be:31:bf:c7:ac:93:6f:e5:e5:df:34:d4:
b1:bd:1d:31:6c:26:72:c9:46:3f:78:0b:73:1a:60:
b9:1e:f8:f8:67:10:a5:7c:71:2f:1d:86:ef:03:ff:
f4:16:99:9f:2f:44:55:e6:f6:1a:41:4b:93:41:67:
02:85:63:73:1c:67:7b:0c:2f:30:f7:8d:89:29:c6:
dd:61:7c:b0:d9:e0:ab:70:54:e0:70:75:ed:08:41:
a9:35:ba:98:c8:01:3f:82:08:8b:bd:12:c0:09:b1:
7a:1a:04:4b:26:98:4d:ae:55:45:05:9b:1d:a7:17:
b9:c1:47:95:b4:68:c6:23:f4:46:9d:41:15:cd:17:
b9:44:eb:90:ce:ac:75:af:42:c0:84:91:dd:0a:a4:
bf:95:cb:90:b7:d4:d2:3c:be:fa:42:e4:cf:f4:f1:
d8:64:45:59:31:37:72:e7:36:09:99:23:0a:aa:f8:
75:bc:b7:03:3b:5b:83:bc:c2:a1:97:71:6e:91:b1:
b1:60:f7:20:58:26:f1:bb:75:c5:d1:d4:bd:e3:c5:
70:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BB:08:19:DB:ED:43:59:96:69:12:E7:93:3C:C5:DE:95:4E:A4:A0
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c1:fa:4c:5c:3f:d7:d0:f2:59:99:fc:6a:47:c7:66:a7:a1:
1a:a7:90:2b:82:d4:d7:20:88:23:d4:bf:36:9d:ce:7b:8d:0d:
cf:54:a7:5f:f3:cf:14:92:3f:67:6f:bc:b8:58:a1:79:ab:47:
d0:b5:6c:85:a5:b4:05:f2:4e:68:df:a3:e1:8d:fc:16:0f:15:
b9:37:af:3f:80:9d:9c:fd:0e:b1:6f:52:77:a8:da:f1:18:64:
63:d0:1e:a4:c9:1b:5c:96:63:48:63:4e:13:1f:a6:c7:5a:fc:
6a:df:f2:d1:50:ee:2d:ca:53:5b:d5:63:57:04:62:19:91:3b:
be:a7:c8:83:be:e7:c6:84:74:aa:1e:cb:f8:b6:64:ca:fb:f1:
1e:fb:b9:ac:1d:cb:b9:10:bd:d0:77:0f:ab:88:22:f0:96:28:
1c:0b:0b:5d:f3:51:20:7a:4b:36:03:34:ac:97:7d:ab:a5:6d:
05:38:0d:7c:e7:bd:2b:12:fb:87:9e:36:79:33:65:07:c9:2b:
5e:e8:53:54:fd:d6:3b:13:ae:38:0c:4d:66:ae:92:8d:bb:bb:
70:b8:dd:e4:87:d0:9f:09:bc:f0:b9:ce:b3:5c:97:94:b8:14:
59:62:4c:5c:b4:8b:c1:f3:c0:f9:2a:73:9d:4a:ea:75:93:bd:
27:ab:ca:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2eoMHAI9DK72LL/8qyAcjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDhkNTA4MjE1MzQwZWFjMGYxNGYwYjc0NzQ5ZDFjOGVj
OWY1NjYwHhcNMjUwNDI3MDkwMTAyWhcNMjUwNDI4MDkwMTAyWjAzMTEwLwYDVQQD
Eyg1NGJiMDgxOWRiZWQ0MzU5OTY2OTEyZTc5MzNjYzVkZTk1NGVhNGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdI2pHnv42c9ZqjyHrQ+lT+pXnC7
kSwwI5FIZNKZN0KJLCwSPvS7vsq/EgdRCY6+Mb/HrJNv5eXfNNSxvR0xbCZyyUY/
eAtzGmC5Hvj4ZxClfHEvHYbvA//0FpmfL0RV5vYaQUuTQWcChWNzHGd7DC8w942J
KcbdYXyw2eCrcFTgcHXtCEGpNbqYyAE/ggiLvRLACbF6GgRLJphNrlVFBZsdpxe5
wUeVtGjGI/RGnUEVzRe5ROuQzqx1r0LAhJHdCqS/lcuQt9TSPL76QuTP9PHYZEVZ
MTdy5zYJmSMKqvh1vLcDO1uDvMKhl3FukbGxYPcgWCbxu3XF0dS948VwnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFS7CBnb7UNZlmkS55M8xd6VTqSgMB8GA1UdIwQY
MBaAFN1I1QghU0DqwPFPC3R0nRyOyfVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iYTE2YmEtYThjOC00NDJhLWJhYjkt
NDVlNDc0MDAyM2RiLzEvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iYTE2YmEtYThjOC00NDJhLWJhYjktNDVlNDc0MDAyM2Ri
LzEvM1VqVkNDRlRRT3JBOFU4TGRIU2RISTdKOVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmsH6TFw/
19DyWZn8akfHZqehGqeQK4LU1yCII9S/Np3Oe40Nz1SnX/PPFJI/Z2+8uFiheatH
0LVshaW0BfJOaN+j4Y38Fg8VuTevP4CdnP0OsW9Sd6ja8RhkY9AepMkbXJZjSGNO
Ex+mx1r8at/y0VDuLcpTW9VjVwRiGZE7vqfIg77nxoR0qh7L+LZkyvvxHvu5rB3L
uRC90HcPq4gi8JYoHAsLXfNRIHpLNgM0rJd9q6VtBTgNfOe9KxL7h542eTNlB8kr
XuhTVP3WOxOuOAxNZq6Sjbu7cLjd5IfQnwm88LnOs1yXlLgUWWJMXLSLwfPA+Spz
nUrqdZO9J6vKlg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:48:36 2025 by rpki-client