Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: MYStms3CbMNblhFj60vhxE6xa3uoB3SFjlak3ujQP7Q=
Subject key identifier: 33:9E:70:C2:CE:65:00:79:96:63:19:14:CA:16:9D:57:42:AA:4F:EA
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 019679B222B5C1433B23258B103CA11D1971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 0C41
Signing time: Mon 28 Apr 2025 00:00:39 +0000
Manifest this update: Mon 28 Apr 2025 00:00:39 +0000
Manifest next update: Tue 29 Apr 2025 00:00:39 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: RFicUb1JnM2JTrVrcHjG6Qs3FwjWI+xczuP1yg5wMbs=)
2: pKu7UglcJmA-j3iLVLdtywNO9BE.roa (hash: Zkb8HbwY2s1iIMkolnog2EvROcriM2gwSI0ajYjdw4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:22:b5:c1:43:3b:23:25:8b:10:3c:a1:1d:19:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Apr 28 00:00:39 2025 GMT
Not After : Apr 29 00:00:39 2025 GMT
Subject: CN=339e70c2ce65007996631914ca169d5742aa4fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:38:1d:1d:5f:b1:27:03:7c:d8:63:ba:76:
be:44:46:12:56:a6:d2:be:29:61:bd:46:8e:9d:f3:
44:db:c3:39:fa:54:4a:19:95:2a:f0:2d:af:60:f0:
5c:a2:1c:39:41:87:31:48:70:ef:fb:3f:fb:24:88:
87:d4:ca:3b:c0:98:8e:34:83:79:88:fe:b6:bb:e3:
16:25:51:99:eb:02:aa:bd:f4:4b:b0:0a:ff:8d:8c:
7a:27:66:0f:cd:85:6b:76:c1:85:46:3e:d2:ca:41:
57:0d:df:19:46:19:ae:ea:e1:a5:ef:e1:4a:ae:7c:
7d:04:97:2a:4c:72:d7:ac:b0:51:ae:9c:9f:1e:80:
03:94:6c:8d:a0:69:d9:56:2e:f8:f4:8d:ff:22:ab:
5d:67:8f:d3:5c:82:d5:25:a9:33:9d:81:56:ce:21:
9b:5a:c1:f0:c6:cd:4d:03:07:96:a0:84:71:ec:67:
c8:9c:03:3a:09:ae:76:d6:47:8c:2a:93:81:44:83:
a4:db:23:cc:6f:39:67:cb:e1:ca:51:37:e1:31:e9:
29:2c:39:f9:cf:c3:f8:3e:21:f4:19:03:28:de:4a:
e8:7d:7c:5f:ca:08:d0:97:1c:b9:e1:b4:a6:00:20:
aa:37:84:2d:45:e1:c1:98:5b:b5:14:1d:8c:46:6e:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9E:70:C2:CE:65:00:79:96:63:19:14:CA:16:9D:57:42:AA:4F:EA
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:53:61:da:54:3a:82:35:d0:8b:18:5f:b8:9f:ca:9b:d4:4f:
f4:05:e1:70:be:19:ba:39:16:4d:ba:66:cc:e3:aa:02:af:a7:
7c:ea:b7:55:9d:9b:99:23:7c:72:ea:98:1c:62:77:ce:70:32:
a5:da:38:cc:15:36:71:c3:44:c5:fe:25:37:b7:de:e3:4f:0b:
58:48:4e:1c:f7:2a:fe:be:d1:55:02:80:35:24:ee:3c:22:5d:
0d:d2:a9:61:53:b1:df:65:0f:ae:24:9b:c9:3f:1c:b3:fe:68:
39:44:bd:b7:9d:a9:d6:aa:6e:96:f6:a2:d2:9f:a4:27:ce:e9:
5b:25:a3:bb:bf:1d:cb:b9:68:34:8c:2b:2c:47:ce:a7:7f:4e:
66:f2:cc:63:cf:41:c0:16:ad:e7:5f:79:e8:86:1f:51:86:e7:
06:76:7c:75:aa:c5:61:5e:05:98:06:d2:81:12:aa:5e:70:ec:
30:e1:a7:4c:96:d3:d4:f7:5e:44:3a:5d:c0:3d:b9:30:dc:61:
15:cf:ff:af:13:64:ca:53:64:a1:63:cb:ac:ac:92:53:80:3a:
7b:d1:91:cb:92:3f:bd:f2:97:f8:5a:c5:7c:1b:c0:31:c7:83:
f9:c2:4c:93:31:ac:ca:b1:62:26:7b:63:0b:0b:a4:11:5e:83:
0a:0e:13:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5siK1wUM7IyWLEDyhHRlxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOGUwNTlkNWViNzc2NDlmYmYxOWI4NGFmMzVmNjg5MWQ5
YzU4MDcwHhcNMjUwNDI4MDAwMDM5WhcNMjUwNDI5MDAwMDM5WjAzMTEwLwYDVQQD
EygzMzllNzBjMmNlNjUwMDc5OTY2MzE5MTRjYTE2OWQ1NzQyYWE0ZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlM4HR1fsScDfNhjuna+REYSVqbS
vilhvUaOnfNE28M5+lRKGZUq8C2vYPBcohw5QYcxSHDv+z/7JIiH1Mo7wJiONIN5
iP62u+MWJVGZ6wKqvfRLsAr/jYx6J2YPzYVrdsGFRj7SykFXDd8ZRhmu6uGl7+FK
rnx9BJcqTHLXrLBRrpyfHoADlGyNoGnZVi749I3/IqtdZ4/TXILVJakznYFWziGb
WsHwxs1NAweWoIRx7GfInAM6Ca521keMKpOBRIOk2yPMbzlny+HKUTfhMekpLDn5
z8P4PiH0GQMo3krofXxfygjQlxy54bSmACCqN4QtReHBmFu1FB2MRm6W4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOecMLOZQB5lmMZFMoWnVdCqk/qMB8GA1UdIwQY
MBaAFNyOBZ1et3ZJ+/GbhK819okdnFgHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80ZjZlZTQtZmE2ZS00MzZlLWIzNDkt
NmVmN2UxMTk5Njk4LzEvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80ZjZlZTQtZmE2ZS00MzZlLWIzNDktNmVmN2UxMTk5Njk4
LzEvM0k0Rm5WNjNka243OFp1RXJ6WDJpUjJjV0FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1Nh2lQ6
gjXQixhfuJ/Km9RP9AXhcL4ZujkWTbpmzOOqAq+nfOq3VZ2bmSN8cuqYHGJ3znAy
pdo4zBU2ccNExf4lN7fe408LWEhOHPcq/r7RVQKANSTuPCJdDdKpYVOx32UPriSb
yT8cs/5oOUS9t52p1qpulvai0p+kJ87pWyWju78dy7loNIwrLEfOp39OZvLMY89B
wBat51956IYfUYbnBnZ8darFYV4FmAbSgRKqXnDsMOGnTJbT1PdeRDpdwD25MNxh
Fc//rxNkylNkoWPLrKySU4A6e9GRy5I/vfKX+FrFfBvAMceD+cJMkzGsyrFiJntj
CwukEV6DCg4T8A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:22:54 2025 by rpki-client