Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
File: x3Nu3rkvk36kWJPqm89O-D8V_8g.mft (raw, json)
Hash identifier: R2rmW8xptdR14ZOXY0ScF5z4sckhqEmxwUInDlABU5g=
Subject key identifier: 41:BD:48:A1:5B:14:93:D1:9D:F3:8D:39:47:8A:CE:39:0D:25:23:AA
Authority key identifier: C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
Certificate issuer: /CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Certificate serial: 0196C2DD72384327072B97E6909AF3F13FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
Manifest number: 0E38
Signing time: Mon 12 May 2025 05:00:14 +0000
Manifest this update: Mon 12 May 2025 05:00:14 +0000
Manifest next update: Tue 13 May 2025 05:00:14 +0000
Files and hashes: 1: ZfJgayjX3ZyY4keMrrK5ie3SiNQ.roa (hash: I356ijiy3DFzBI7A3YL8pZIG42TC++pOhoxAzv45n5Q=)
2: x3Nu3rkvk36kWJPqm89O-D8V_8g.crl (hash: HlYxpbh03t5eyRfpflN74lKAFn77WIUY+bWwyDMUQL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:72:38:43:27:07:2b:97:e6:90:9a:f3:f1:3f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7736edeb92f937ea45893ea9bcf4ef83f15ffc8
Validity
Not Before: May 12 05:00:14 2025 GMT
Not After : May 13 05:00:14 2025 GMT
Subject: CN=41bd48a15b1493d19df38d39478ace390d2523aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d2:13:f8:f4:2a:59:02:c4:c0:6d:a3:56:81:
3a:e2:35:f6:99:11:7f:7d:88:e8:33:4b:d0:ea:55:
dc:4d:c0:28:fa:46:6c:ce:ae:e9:f1:65:d5:2a:a0:
07:2d:a2:dc:81:30:c5:e8:90:04:04:c4:3f:a7:dd:
e9:52:72:a5:e3:15:36:aa:7e:91:fc:cc:07:89:5a:
8a:98:2d:78:41:ad:72:ad:13:07:b2:17:a2:ee:66:
b0:4e:5e:93:08:fb:28:69:87:b3:cb:ab:39:bc:fc:
ec:37:ff:68:3e:f3:be:a1:46:3f:20:85:ec:fd:fa:
43:68:76:8d:91:4a:48:e4:a3:7a:9d:e8:d8:69:51:
fe:f1:2a:34:8b:aa:b3:93:da:79:cf:c7:44:a2:c5:
17:38:5b:2f:ff:22:e0:40:0d:a4:c8:65:72:b0:e6:
dd:8f:3f:d3:47:5a:1f:48:95:d2:a1:d0:b8:b6:3d:
36:e5:52:fd:e6:2b:7d:63:68:08:75:c6:e5:ae:ce:
c5:a8:a4:a2:be:58:ff:0a:dc:9b:a5:26:5c:90:da:
a0:43:00:f1:61:96:38:2f:c7:a2:cb:62:61:dd:60:
da:69:4e:a7:21:1e:97:ad:b1:0f:09:d1:94:49:d0:
b4:60:8c:5c:7d:83:0b:af:03:ef:fd:de:58:03:76:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BD:48:A1:5B:14:93:D1:9D:F3:8D:39:47:8A:CE:39:0D:25:23:AA
X509v3 Authority Key Identifier:
keyid:C7:73:6E:DE:B9:2F:93:7E:A4:58:93:EA:9B:CF:4E:F8:3F:15:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3Nu3rkvk36kWJPqm89O-D8V_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/61fe00-73b3-45a5-8eff-6696dadb45eb/1/x3Nu3rkvk36kWJPqm89O-D8V_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ca:1e:cd:1a:ad:04:d8:1a:5c:b1:cc:bc:48:85:6c:ce:ff:
78:17:4b:21:54:dd:a6:85:01:51:6c:f5:6d:a2:b8:0d:8a:75:
6d:f2:40:4b:b5:60:5f:af:0c:7c:74:3a:07:4f:40:bd:f6:b5:
fb:b1:2b:db:29:e0:01:af:b6:8f:db:3a:ca:75:14:34:c4:89:
99:f8:d1:62:a0:29:a8:b0:ea:56:73:7f:96:c5:a6:11:db:f5:
66:45:66:76:cc:7a:b1:fc:f6:98:a5:8b:19:f2:f3:f7:dd:d3:
a0:10:7b:21:b8:ba:d4:b1:bf:7a:12:85:ae:4b:c6:76:51:2f:
3c:1f:8b:3c:98:1d:48:1b:58:cc:ba:44:ac:73:f5:d0:e6:6c:
0c:88:89:be:17:9a:7d:be:38:35:64:a9:d3:fb:38:e1:67:ec:
2c:2c:03:a8:d2:f1:c8:aa:8e:33:ac:a1:06:4a:82:4f:bf:a2:
31:ce:e7:91:1a:fa:6e:ac:96:4a:da:6b:ee:0f:a7:3f:49:5d:
67:7c:2f:e3:d5:c0:0d:fb:ee:32:f4:34:ab:87:4e:9f:9b:71:
97:52:df:0e:51:90:ae:21:87:4d:b0:23:ba:d1:da:59:51:86:
c4:48:f3:fb:36:cb:34:d8:6f:12:ef:05:a9:72:cd:20:65:8b:
71:87:c8:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbC3XI4QycHK5fmkJrz8T//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NzM2ZWRlYjkyZjkzN2VhNDU4OTNlYTliY2Y0ZWY4M2Yx
NWZmYzgwHhcNMjUwNTEyMDUwMDE0WhcNMjUwNTEzMDUwMDE0WjAzMTEwLwYDVQQD
Eyg0MWJkNDhhMTViMTQ5M2QxOWRmMzhkMzk0NzhhY2UzOTBkMjUyM2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dIT+PQqWQLEwG2jVoE64jX2mRF/
fYjoM0vQ6lXcTcAo+kZszq7p8WXVKqAHLaLcgTDF6JAEBMQ/p93pUnKl4xU2qn6R
/MwHiVqKmC14Qa1yrRMHshei7mawTl6TCPsoaYezy6s5vPzsN/9oPvO+oUY/IIXs
/fpDaHaNkUpI5KN6nejYaVH+8So0i6qzk9p5z8dEosUXOFsv/yLgQA2kyGVysObd
jz/TR1ofSJXSodC4tj025VL95it9Y2gIdcblrs7FqKSivlj/CtybpSZckNqgQwDx
YZY4L8eiy2Jh3WDaaU6nIR6XrbEPCdGUSdC0YIxcfYMLrwPv/d5YA3bn0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEG9SKFbFJPRnfONOUeKzjkNJSOqMB8GA1UdIwQY
MBaAFMdzbt65L5N+pFiT6pvPTvg/Ff/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYt
NjY5NmRhZGI0NWViLzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82MWZlMDAtNzNiMy00NWE1LThlZmYtNjY5NmRhZGI0NWVi
LzEveDNOdTNya3ZrMzZrV0pQcW04OU8tRDhWXzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8oezRqt
BNgaXLHMvEiFbM7/eBdLIVTdpoUBUWz1baK4DYp1bfJAS7VgX68MfHQ6B09Avfa1
+7Er2yngAa+2j9s6ynUUNMSJmfjRYqApqLDqVnN/lsWmEdv1ZkVmdsx6sfz2mKWL
GfLz993ToBB7Ibi61LG/ehKFrkvGdlEvPB+LPJgdSBtYzLpErHP10OZsDIiJvhea
fb44NWSp0/s44WfsLCwDqNLxyKqOM6yhBkqCT7+iMc7nkRr6bqyWStpr7g+nP0ld
Z3wv49XADfvuMvQ0q4dOn5txl1LfDlGQriGHTbAjutHaWVGGxEjz+zbLNNhvEu8F
qXLNIGWLcYfI2A==
-----END CERTIFICATE-----
Generated at Mon May 12 11:32:25 2025 by rpki-client