Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
File: 3pj4NjKYKX-6uupodyArXEQOWpA.mft (raw, json)
Hash identifier: s6+wa5YgdB8ao78fjgalfiu1wJAdENMvhS49SggZ18k=
Subject key identifier: 5E:75:E6:7D:27:F1:F4:01:4D:7E:69:8C:99:37:1D:40:32:8E:2E:B6
Authority key identifier: DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
Certificate issuer: /CN=de98f8363298297fbabaea6877202b5c440e5a90
Certificate serial: 0196BF6F29618C3258854A7F9CE46E2C29CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
Manifest number: 0BC4
Signing time: Sun 11 May 2025 13:00:55 +0000
Manifest this update: Sun 11 May 2025 13:00:55 +0000
Manifest next update: Mon 12 May 2025 13:00:55 +0000
Files and hashes: 1: 3pj4NjKYKX-6uupodyArXEQOWpA.crl (hash: ahqKF/HTC5tVVHxg1pZb37It/NSoqi8CsEyyKRdX6ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:29:61:8c:32:58:85:4a:7f:9c:e4:6e:2c:29:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de98f8363298297fbabaea6877202b5c440e5a90
Validity
Not Before: May 11 13:00:55 2025 GMT
Not After : May 12 13:00:55 2025 GMT
Subject: CN=5e75e67d27f1f4014d7e698c99371d40328e2eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:c6:39:73:8c:55:f8:5b:b4:dd:7d:19:54:
c9:06:f7:c9:91:c9:c4:5b:e5:6a:41:7c:3e:9d:c3:
ec:1c:be:80:df:64:ac:db:07:d8:b8:35:72:f9:f5:
58:78:59:58:70:7f:0e:f8:d6:26:2a:28:6f:c0:23:
38:1d:bb:8d:c5:c1:6b:36:55:61:49:1f:bb:12:14:
a2:49:22:9b:c0:5c:2a:10:32:70:9b:a6:93:5e:ce:
8a:e3:a5:eb:bd:86:25:a8:15:b2:f1:34:fc:0b:4c:
0f:10:5c:38:d9:2e:04:1b:89:fc:5d:30:fc:cb:17:
76:e1:85:8d:a4:bc:e0:7b:53:48:d8:ba:59:45:b6:
1f:d7:cd:4e:9f:b7:c0:ba:87:ab:78:60:ad:09:94:
b0:70:b6:18:fa:62:40:a2:26:c2:3d:bb:a2:08:6c:
26:af:b5:71:d2:0f:d9:d9:c5:41:4f:2b:ee:f2:1d:
3c:1b:ed:e0:95:48:22:f3:63:50:9b:74:05:ca:4d:
7c:75:c7:0a:f8:04:ed:67:90:9b:d6:7f:a8:17:dd:
fc:93:61:ab:7e:7f:8e:ec:db:50:06:ca:16:42:a9:
db:3e:71:a6:67:d9:f7:d6:af:3a:5b:59:84:41:b8:
30:49:c8:39:c9:95:91:20:7f:95:2a:4e:83:bc:7d:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:75:E6:7D:27:F1:F4:01:4D:7E:69:8C:99:37:1D:40:32:8E:2E:B6
X509v3 Authority Key Identifier:
keyid:DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1c:2f:11:75:e0:d3:1b:b1:6c:8c:53:12:ab:62:46:c3:61:
18:85:98:6f:01:f7:71:72:c3:a9:26:4a:19:92:22:50:d3:a3:
cf:5e:12:15:33:75:93:bb:45:e1:86:c1:25:75:e1:08:b6:9c:
0c:78:db:ce:08:ab:cd:58:bc:7c:ab:41:ec:78:93:87:2c:39:
96:49:50:b2:0c:d5:b1:0e:30:9c:5d:96:59:5a:16:01:55:ab:
2d:0c:44:4d:73:05:c4:0e:89:7e:93:58:bf:de:94:3b:b9:2f:
69:e3:1d:dc:62:cd:d0:6a:c0:93:26:2c:45:e4:c1:f3:6a:cd:
59:27:b0:68:05:25:bc:ce:fa:48:18:b9:98:68:69:34:dc:d8:
47:84:32:6d:61:bb:7d:3c:75:88:12:c2:2a:e7:4c:a4:f2:50:
9c:18:b7:5c:d7:ad:60:8d:ef:86:e5:2a:65:fb:ec:2b:b5:50:
34:41:c0:1a:9b:ed:75:c3:90:0d:cb:e1:65:71:cc:04:a4:56:
b5:b8:95:2d:2a:ec:b2:ac:f9:71:1d:c9:8a:c4:22:fb:da:53:
71:5c:77:8b:20:63:31:8b:3f:ef:70:95:23:a9:8e:b8:58:c7:
5d:70:bc:98:84:cb:92:97:ef:13:51:0c:86:67:95:b2:f1:90:
ad:ca:c0:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/bylhjDJYhUp/nORuLCnLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOThmODM2MzI5ODI5N2ZiYWJhZWE2ODc3MjAyYjVjNDQw
ZTVhOTAwHhcNMjUwNTExMTMwMDU1WhcNMjUwNTEyMTMwMDU1WjAzMTEwLwYDVQQD
Eyg1ZTc1ZTY3ZDI3ZjFmNDAxNGQ3ZTY5OGM5OTM3MWQ0MDMyOGUyZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqazGOXOMVfhbtN19GVTJBvfJkcnE
W+VqQXw+ncPsHL6A32Ss2wfYuDVy+fVYeFlYcH8O+NYmKihvwCM4HbuNxcFrNlVh
SR+7EhSiSSKbwFwqEDJwm6aTXs6K46XrvYYlqBWy8TT8C0wPEFw42S4EG4n8XTD8
yxd24YWNpLzge1NI2LpZRbYf181On7fAuoereGCtCZSwcLYY+mJAoibCPbuiCGwm
r7Vx0g/Z2cVBTyvu8h08G+3glUgi82NQm3QFyk18dccK+ATtZ5Cb1n+oF938k2Gr
fn+O7NtQBsoWQqnbPnGmZ9n31q86W1mEQbgwScg5yZWRIH+VKk6DvH1+OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF515n0n8fQBTX5pjJk3HUAyji62MB8GA1UdIwQY
MBaAFN6Y+DYymCl/urrqaHcgK1xEDlqQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BqNE5qS1lLWC02dXVwb2R5QXJYRVFPV3BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ODBlMjktN2Q4My00NTU4LWI0MTEt
ZTdmYmQ1MGUwMzQ5LzEvM3BqNE5qS1lLWC02dXVwb2R5QXJYRVFPV3BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82ODBlMjktN2Q4My00NTU4LWI0MTEtZTdmYmQ1MGUwMzQ5
LzEvM3BqNE5qS1lLWC02dXVwb2R5QXJYRVFPV3BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBwvEXXg
0xuxbIxTEqtiRsNhGIWYbwH3cXLDqSZKGZIiUNOjz14SFTN1k7tF4YbBJXXhCLac
DHjbzgirzVi8fKtB7HiThyw5lklQsgzVsQ4wnF2WWVoWAVWrLQxETXMFxA6JfpNY
v96UO7kvaeMd3GLN0GrAkyYsReTB82rNWSewaAUlvM76SBi5mGhpNNzYR4QybWG7
fTx1iBLCKudMpPJQnBi3XNetYI3vhuUqZfvsK7VQNEHAGpvtdcOQDcvhZXHMBKRW
tbiVLSrssqz5cR3JisQi+9pTcVx3iyBjMYs/73CVI6mOuFjHXXC8mITLkpfvE1EM
hmeVsvGQrcrAVA==
-----END CERTIFICATE-----
Generated at Sun May 11 20:09:31 2025 by rpki-client