Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
File: 3c6wiktA8fheTroXzcfIPke7WX0.mft (raw, json)
Hash identifier: 2Ozb5lxJqoskHy0ZWZPvQ5/1gIi+oFStPkDcIfo0iEg=
Subject key identifier: BD:74:0C:74:79:E1:53:AC:BC:8A:7C:80:FB:6D:9D:74:6E:14:C2:C8
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Certificate issuer: /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial: 0196A31B91BDCF5E3DA4C06C94499EA397FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
Manifest number: 0A9B
Signing time: Tue 06 May 2025 01:00:15 +0000
Manifest this update: Tue 06 May 2025 01:00:15 +0000
Manifest next update: Wed 07 May 2025 01:00:15 +0000
Files and hashes: 1: 3c6wiktA8fheTroXzcfIPke7WX0.crl (hash: I0v7I0yUlR6amSNJ0BeHkdCA0JkDsCtoNHqihFwtnF0=)
2: wkcnsTzQjgo9eEySS50APSZKqWQ.roa (hash: SKv++65s2nAU0vbkJDBqrGiZUMw6xX7YKBnglQkJRuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1b:91:bd:cf:5e:3d:a4:c0:6c:94:49:9e:a3:97:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Validity
Not Before: May 6 01:00:15 2025 GMT
Not After : May 7 01:00:15 2025 GMT
Subject: CN=bd740c7479e153acbc8a7c80fb6d9d746e14c2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:fa:34:82:71:ef:e1:ad:7c:ac:64:a5:af:
69:e3:3b:eb:3d:e5:b6:40:89:36:3e:9c:9e:1b:1e:
c4:57:33:35:8c:84:c4:0a:e0:a0:97:67:15:9b:28:
29:d0:cb:93:0c:c2:ad:48:82:e8:c2:a3:59:e7:28:
b8:2c:47:6b:e9:91:02:d5:f6:8a:99:bd:ed:0c:59:
a8:4f:e4:78:40:74:f6:f7:a0:1d:cb:f1:19:b2:15:
23:fb:31:a1:9f:d5:65:9d:cb:57:0d:5d:be:e4:25:
5a:4d:3d:d7:d2:6f:a3:9b:0d:c2:24:d3:bb:8b:45:
06:d7:8f:90:8b:97:f4:af:fe:18:9f:aa:1f:3a:6f:
8f:cc:30:3f:52:e9:08:18:bb:44:e0:98:e1:9d:ff:
29:60:4e:18:97:fc:1c:a4:cf:70:69:a6:b1:ff:4c:
8c:88:70:c3:d1:21:df:61:c9:87:41:11:ec:fe:09:
f8:8e:da:40:7d:18:c7:20:9e:ad:b9:00:82:ff:40:
83:f2:20:91:36:b8:93:de:79:df:82:dc:82:cc:03:
b0:b6:99:bd:09:bf:c3:c0:ce:ee:17:4f:7e:8a:99:
94:eb:15:4f:5a:9c:00:0a:92:9d:39:8b:3a:59:5a:
2a:77:d3:97:10:de:55:1f:1c:c9:aa:d2:6a:60:70:
bd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:74:0C:74:79:E1:53:AC:BC:8A:7C:80:FB:6D:9D:74:6E:14:C2:C8
X509v3 Authority Key Identifier:
keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:38:bf:4d:9b:bf:f8:7d:4f:92:1e:9b:8f:98:8e:7c:a9:7b:
73:62:cb:33:a8:2f:ef:63:ec:58:24:75:a1:2e:21:e5:54:fd:
61:60:1c:44:52:51:4e:29:76:dd:41:0b:cb:88:15:ba:00:83:
40:86:aa:ad:ea:7e:ee:50:ec:19:08:59:69:37:48:a9:c9:1c:
67:33:1e:13:00:58:b9:17:59:ce:d0:61:52:b1:83:89:f4:44:
cd:e4:f2:22:cb:b6:fe:39:e8:33:13:39:d7:8e:ec:79:0a:85:
1c:d6:d0:c5:d6:22:e6:01:f9:0f:a2:25:00:ec:05:b4:aa:ce:
58:d2:1b:bf:41:1d:a9:16:50:e1:aa:cc:2b:23:c5:09:18:8a:
7f:d9:5a:e8:d1:ee:38:2b:9e:ea:85:91:0a:8d:a6:15:a8:21:
cd:87:e7:fd:95:97:e4:fb:c4:87:e0:42:34:b9:3a:69:ac:93:
ff:60:d0:0b:36:52:77:08:d2:2f:9a:b2:ed:42:45:7a:2e:06:
3e:d1:29:48:91:30:b6:3e:41:dd:fc:4d:ba:cc:e2:af:b2:7b:
bc:ca:d2:fa:48:a0:84:0c:67:5f:ca:14:93:25:5e:31:e4:45:
81:b8:00:45:84:81:e3:d8:72:57:4f:20:a3:13:de:04:9c:bf:
f5:25:83:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajG5G9z149pMBslEmeo5f8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkY2ViMDhhNGI0MGYxZjg1ZTRlYmExN2NkYzdjODNlNDdi
YjU5N2QwHhcNMjUwNTA2MDEwMDE1WhcNMjUwNTA3MDEwMDE1WjAzMTEwLwYDVQQD
EyhiZDc0MGM3NDc5ZTE1M2FjYmM4YTdjODBmYjZkOWQ3NDZlMTRjMmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cX6NIJx7+GtfKxkpa9p4zvrPeW2
QIk2PpyeGx7EVzM1jITECuCgl2cVmygp0MuTDMKtSILowqNZ5yi4LEdr6ZEC1faK
mb3tDFmoT+R4QHT296Ady/EZshUj+zGhn9VlnctXDV2+5CVaTT3X0m+jmw3CJNO7
i0UG14+Qi5f0r/4Yn6ofOm+PzDA/UukIGLtE4Jjhnf8pYE4Yl/wcpM9waaax/0yM
iHDD0SHfYcmHQRHs/gn4jtpAfRjHIJ6tuQCC/0CD8iCRNriT3nnfgtyCzAOwtpm9
Cb/DwM7uF09+ipmU6xVPWpwACpKdOYs6WVoqd9OXEN5VHxzJqtJqYHC95wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL10DHR54VOsvIp8gPttnXRuFMLIMB8GA1UdIwQY
MBaAFN3OsIpLQPH4Xk66F83HyD5Hu1l9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2M2d2lrdEE4ZmhlVHJvWHpjZklQa2U3V1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi85MmIwZGYtZTBkYi00Mjc2LTgzMzQt
OGRiOTQ0ZTEzODEwLzEvM2M2d2lrdEE4ZmhlVHJvWHpjZklQa2U3V1gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi85MmIwZGYtZTBkYi00Mjc2LTgzMzQtOGRiOTQ0ZTEzODEw
LzEvM2M2d2lrdEE4ZmhlVHJvWHpjZklQa2U3V1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEji/TZu/
+H1Pkh6bj5iOfKl7c2LLM6gv72PsWCR1oS4h5VT9YWAcRFJRTil23UELy4gVugCD
QIaqrep+7lDsGQhZaTdIqckcZzMeEwBYuRdZztBhUrGDifREzeTyIsu2/jnoMxM5
147seQqFHNbQxdYi5gH5D6IlAOwFtKrOWNIbv0EdqRZQ4arMKyPFCRiKf9la6NHu
OCue6oWRCo2mFaghzYfn/ZWX5PvEh+BCNLk6aayT/2DQCzZSdwjSL5qy7UJFei4G
PtEpSJEwtj5B3fxNuszir7J7vMrS+kighAxnX8oUkyVeMeRFgbgARYSB49hyV08g
oxPeBJy/9SWDiA==
-----END CERTIFICATE-----
Generated at Tue May 6 02:55:37 2025 by rpki-client