Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
File: P2U3Wk029crhof4kWKOAUmz-22o.mft (raw, json)
Hash identifier: GZml2LQ3lkBiqEN082G7gKCXvmEOByTztbPCgaBhEuM=
Subject key identifier: 8F:7C:2F:08:DC:77:68:E8:33:09:D3:AA:0C:93:21:4D:06:2C:4F:62
Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
Certificate issuer: /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Certificate serial: 0196C50320A09B93F2D19F5791962585F11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
Manifest number: 96
Signing time: Mon 12 May 2025 15:00:38 +0000
Manifest this update: Mon 12 May 2025 15:00:38 +0000
Manifest next update: Tue 13 May 2025 15:00:38 +0000
Files and hashes: 1: 9-o0NLiGvlKmMx-qIL22lBoBavY.roa (hash: x3fjMZ9f1cmTHw/gRrQuIfz02fOQCT025xB0UcuPW+Y=)
2: P2U3Wk029crhof4kWKOAUmz-22o.crl (hash: AGiLb6J6Gpws3iLUTp15VQxTviPW2i2rRg/oZo0v3sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:20:a0:9b:93:f2:d1:9f:57:91:96:25:85:f1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Validity
Not Before: May 12 15:00:38 2025 GMT
Not After : May 13 15:00:38 2025 GMT
Subject: CN=8f7c2f08dc7768e83309d3aa0c93214d062c4f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9c:81:08:ba:27:cb:d5:73:f5:78:0b:5d:86:
ce:dc:1e:c7:9d:1a:e3:88:d0:78:09:e6:ac:c2:7a:
2e:03:9f:e6:2a:18:f1:74:54:4a:30:e7:46:b5:4e:
01:18:c9:c3:f9:4d:40:2b:e5:ab:f1:cd:f5:14:ac:
11:f7:a2:c8:53:06:89:e4:2c:99:c7:ee:c4:ee:f2:
86:57:ea:d9:24:f8:4e:5c:2d:ff:f9:23:20:87:98:
cd:6d:91:17:ea:17:02:42:ad:36:bc:b1:8f:89:5a:
c0:26:6a:9b:44:4b:17:e5:c9:fa:3a:4d:b5:07:e5:
15:d6:e5:96:d1:6b:fb:1e:94:8f:96:f7:59:42:08:
8b:ce:98:a1:aa:4e:4b:36:e0:d7:74:7b:f2:9b:0b:
88:8d:b3:be:bd:5e:08:c8:21:be:e8:5b:d1:8d:f5:
bd:d3:67:67:7a:53:17:ed:8c:d9:17:e0:90:ec:44:
77:e1:41:43:07:08:2c:68:0a:3b:e5:a5:8c:34:d2:
fe:4e:b5:b2:f3:d1:7f:c1:d8:f1:c7:16:c5:ff:b4:
5e:9e:71:65:07:11:48:16:9e:0f:21:f8:3d:de:43:
63:ff:07:b3:49:e9:6d:01:76:86:01:de:6a:1a:11:
33:40:62:47:ef:f8:17:f6:6b:c6:e6:72:03:9f:52:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7C:2F:08:DC:77:68:E8:33:09:D3:AA:0C:93:21:4D:06:2C:4F:62
X509v3 Authority Key Identifier:
keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:97:2e:bf:35:e8:27:83:8a:5c:a7:6b:1d:47:06:21:23:d7:
5e:74:1e:e0:e3:dd:2a:71:7f:76:2d:85:5f:a2:4b:05:f3:7d:
76:83:2e:96:8d:3b:af:4b:98:a1:e0:f8:0e:41:c7:65:59:ce:
60:b5:11:d5:2c:fd:01:b3:20:3c:ec:69:be:41:e4:b5:c1:c9:
f9:b7:b3:79:dd:28:4e:8f:4b:9a:69:86:f1:0e:2d:f0:22:ac:
24:79:7f:da:89:7e:d3:e5:fd:58:0e:fc:77:7a:16:7a:9f:25:
85:64:53:2a:87:7e:a7:57:a7:76:15:93:a2:36:7d:0e:90:5a:
b6:df:98:34:cf:a9:50:20:77:11:42:ef:a4:e1:33:c9:23:c3:
c4:4a:2f:36:68:76:6c:51:58:fe:32:04:8b:48:cf:39:51:e8:
ca:bb:09:61:7f:08:7c:7c:ca:cf:2f:20:86:d3:97:6c:8b:a2:
9d:f3:d1:c1:ec:8a:21:5c:0b:32:8f:c3:83:8e:c6:8b:60:22:
04:9a:b8:b9:82:1f:55:9d:86:88:90:a3:54:c4:d3:8f:94:29:
56:11:ed:83:89:fe:d6:b7:b4:47:27:a3:f0:61:3e:8e:7e:a5:
40:0e:1c:d0:eb:4d:2b:bf:79:f3:43:d5:3c:b9:f6:d5:64:5c:
a1:5d:9a:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFAyCgm5Py0Z9XkZYlhfEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNjUzNzVhNGQzNmY1Y2FlMWExZmUyNDU4YTM4MDUyNmNm
ZWRiNmEwHhcNMjUwNTEyMTUwMDM4WhcNMjUwNTEzMTUwMDM4WjAzMTEwLwYDVQQD
Eyg4ZjdjMmYwOGRjNzc2OGU4MzMwOWQzYWEwYzkzMjE0ZDA2MmM0ZjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pyBCLony9Vz9XgLXYbO3B7HnRrj
iNB4CeaswnouA5/mKhjxdFRKMOdGtU4BGMnD+U1AK+Wr8c31FKwR96LIUwaJ5CyZ
x+7E7vKGV+rZJPhOXC3/+SMgh5jNbZEX6hcCQq02vLGPiVrAJmqbREsX5cn6Ok21
B+UV1uWW0Wv7HpSPlvdZQgiLzpihqk5LNuDXdHvymwuIjbO+vV4IyCG+6FvRjfW9
02dnelMX7YzZF+CQ7ER34UFDBwgsaAo75aWMNNL+TrWy89F/wdjxxxbF/7RennFl
BxFIFp4PIfg93kNj/wezSeltAXaGAd5qGhEzQGJH7/gX9mvG5nIDn1JFrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI98Lwjcd2joMwnTqgyTIU0GLE9iMB8GA1UdIwQY
MBaAFD9lN1pNNvXK4aH+JFijgFJs/ttqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82ZDE5MzAtNjgxNS00ODdmLWFiZTkt
ZTI4MTZlZTZiYTU2LzEvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82ZDE5MzAtNjgxNS00ODdmLWFiZTktZTI4MTZlZTZiYTU2
LzEvUDJVM1drMDI5Y3Job2Y0a1dLT0FVbXotMjJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpcuvzXo
J4OKXKdrHUcGISPXXnQe4OPdKnF/di2FX6JLBfN9doMulo07r0uYoeD4DkHHZVnO
YLUR1Sz9AbMgPOxpvkHktcHJ+bezed0oTo9LmmmG8Q4t8CKsJHl/2ol+0+X9WA78
d3oWep8lhWRTKod+p1endhWTojZ9DpBatt+YNM+pUCB3EULvpOEzySPDxEovNmh2
bFFY/jIEi0jPOVHoyrsJYX8IfHzKzy8ghtOXbIuinfPRweyKIVwLMo/Dg47Gi2Ai
BJq4uYIfVZ2GiJCjVMTTj5QpVhHtg4n+1re0Ryej8GE+jn6lQA4c0OtNK79580PV
PLn21WRcoV2aHQ==
-----END CERTIFICATE-----
Generated at Tue May 13 01:08:48 2025 by rpki-client