Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
File: 3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json)
Hash identifier: LAIHqL2mvzbZd57HgQT4mQrFF8BhWRCuzeLopgZ8mL8=
Subject key identifier: 32:A6:12:69:DC:B6:E3:6C:43:CC:6F:69:FD:05:25:28:F2:D4:40:47
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 01968C5D2847832D6CAD48693BBAEDD46C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
Manifest number: 0482
Signing time: Thu 01 May 2025 15:00:37 +0000
Manifest this update: Thu 01 May 2025 15:00:37 +0000
Manifest next update: Fri 02 May 2025 15:00:37 +0000
Files and hashes: 1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: IHu3LpTnQVMawFnhmL/rP2eENQPbnRj68HkihnoP4Wk=)
2: S2et9u3-k4c1RbSQYpZyfZKneKE.roa (hash: Ha/+fD6TOAGH3fDS11rGJPIxFiX3z4IR9RxVgbeKPDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:5d:28:47:83:2d:6c:ad:48:69:3b:ba:ed:d4:6c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: May 1 15:00:37 2025 GMT
Not After : May 2 15:00:37 2025 GMT
Subject: CN=32a61269dcb6e36c43cc6f69fd052528f2d44047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:92:46:6b:d0:47:7f:6c:14:c1:46:b4:08:
79:a1:85:46:09:07:a7:1d:12:83:ab:bc:e4:2d:e8:
ba:f2:a4:b9:48:23:aa:c0:ed:d1:0f:55:b2:c3:d0:
87:d0:a3:88:75:09:b3:93:62:dc:08:c6:ee:0e:7e:
f5:d3:4b:c6:45:f4:aa:15:22:b3:45:6e:48:10:03:
99:11:1e:b9:83:da:ed:a4:4e:85:0f:0d:c4:ae:a7:
d3:bf:ad:dd:5d:d7:36:8c:e4:de:d3:47:69:78:c2:
f8:54:59:ea:23:fc:f3:42:c6:40:7d:56:b7:cf:09:
ac:69:6d:c6:96:93:5f:06:3c:42:2e:0e:92:bf:82:
bd:b4:8c:2e:5b:44:73:bf:98:5e:06:19:a7:20:13:
b4:71:25:56:bb:58:00:1e:51:37:8d:07:06:1f:82:
31:29:19:f8:8a:8b:17:81:e3:cb:bb:0a:a2:3c:a6:
94:b3:1e:24:5e:c5:d6:8b:0e:c2:ba:c3:9c:79:25:
b4:b3:cb:c1:61:91:c8:76:af:3b:0c:db:ae:6e:fb:
3b:ab:e8:13:2e:12:bd:d6:a6:e4:ed:50:28:4e:d0:
fe:8c:ec:22:d7:80:36:c9:71:82:bf:01:6f:61:23:
aa:ab:b3:99:f0:d4:b8:45:25:ea:cd:43:e0:da:1a:
ea:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A6:12:69:DC:B6:E3:6C:43:CC:6F:69:FD:05:25:28:F2:D4:40:47
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:dd:8e:26:7d:1b:b7:07:41:a8:92:90:f4:3a:37:fa:de:c7:
03:fd:59:b9:05:db:6f:bc:7a:c5:e4:b9:a9:a2:51:f2:cb:4e:
51:a5:ea:45:62:53:bb:b7:76:6f:19:f8:a6:f4:40:f0:d5:0c:
ba:88:23:12:a4:0c:4d:d5:a6:4e:76:0f:7b:ac:ee:5a:d3:f0:
cc:34:23:5d:29:c8:33:5d:97:30:df:c4:e9:71:dd:fa:74:2b:
df:5f:b9:3c:95:d0:93:17:91:34:ed:54:a4:44:b2:86:ab:db:
b2:37:52:b5:8e:38:a9:91:ae:73:f9:6e:93:a6:3b:3f:da:0b:
4b:a7:c2:dd:f4:96:06:02:70:90:3b:78:ed:3c:df:64:e9:fe:
19:60:07:39:fb:72:a7:80:43:cd:d4:1a:3f:c9:ac:be:69:7b:
2e:06:29:28:8f:96:9c:61:bb:df:14:a4:6f:4e:ce:17:d0:55:
36:f5:ed:0d:01:ca:61:5f:61:e6:63:a8:7a:41:b9:cb:68:e5:
0d:f8:25:95:94:67:f2:75:ac:74:88:c8:46:94:ef:f3:56:3f:
b9:03:a3:cb:b6:46:af:98:3d:94:ba:9f:70:3e:17:47:8e:bd:
e4:0f:9f:64:21:60:cb:5a:9a:7b:59:a0:be:cf:e5:7d:57:07:
df:03:6b:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaMXShHgy1srUhpO7rt1GxKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTgyNzA3YzQ0NGMzMTA2NGIxODk5YzU5N2U5ZWZkNzM0
MzhmOTIwHhcNMjUwNTAxMTUwMDM3WhcNMjUwNTAyMTUwMDM3WjAzMTEwLwYDVQQD
EygzMmE2MTI2OWRjYjZlMzZjNDNjYzZmNjlmZDA1MjUyOGYyZDQ0MDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswSSRmvQR39sFMFGtAh5oYVGCQen
HRKDq7zkLei68qS5SCOqwO3RD1Wyw9CH0KOIdQmzk2LcCMbuDn7100vGRfSqFSKz
RW5IEAOZER65g9rtpE6FDw3ErqfTv63dXdc2jOTe00dpeML4VFnqI/zzQsZAfVa3
zwmsaW3GlpNfBjxCLg6Sv4K9tIwuW0Rzv5heBhmnIBO0cSVWu1gAHlE3jQcGH4Ix
KRn4iosXgePLuwqiPKaUsx4kXsXWiw7CusOceSW0s8vBYZHIdq87DNuubvs7q+gT
LhK91qbk7VAoTtD+jOwi14A2yXGCvwFvYSOqq7OZ8NS4RSXqzUPg2hrqkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKmEmnctuNsQ8xvaf0FJSjy1EBHMB8GA1UdIwQY
MBaAFN4YJwfERMMQZLGJnFl+nv1zQ4+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hnbkI4UkV3eEJrc1ltY1dYNmVfWE5EajVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zYmYzMDEtZDE4OS00NzVkLTk1ZGMt
ZWFhZTNkZThhYjU4LzEvM2hnbkI4UkV3eEJrc1ltY1dYNmVfWE5EajVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zYmYzMDEtZDE4OS00NzVkLTk1ZGMtZWFhZTNkZThhYjU4
LzEvM2hnbkI4UkV3eEJrc1ltY1dYNmVfWE5EajVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAN2OJn0b
twdBqJKQ9Do3+t7HA/1ZuQXbb7x6xeS5qaJR8stOUaXqRWJTu7d2bxn4pvRA8NUM
uogjEqQMTdWmTnYPe6zuWtPwzDQjXSnIM12XMN/E6XHd+nQr31+5PJXQkxeRNO1U
pESyhqvbsjdStY44qZGuc/luk6Y7P9oLS6fC3fSWBgJwkDt47TzfZOn+GWAHOfty
p4BDzdQaP8msvml7LgYpKI+WnGG73xSkb07OF9BVNvXtDQHKYV9h5mOoekG5y2jl
DfgllZRn8nWsdIjIRpTv81Y/uQOjy7ZGr5g9lLqfcD4XR4695A+fZCFgy1qae1mg
vs/lfVcH3wNr2A==
-----END CERTIFICATE-----
Generated at Thu May 1 19:51:36 2025 by rpki-client