Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: gPz53rZscy00G+KdUbYNaC6KuTV2YySLyVztEvklNWg=
Subject key identifier: 77:F7:D8:A5:F1:C0:E7:0A:47:6F:66:00:84:DD:25:0E:98:DD:74:6D
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 01969D87E3413CBC96D12C6B43A45EE07667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 0EC9
Signing time: Sun 04 May 2025 23:00:50 +0000
Manifest this update: Sun 04 May 2025 23:00:50 +0000
Manifest next update: Mon 05 May 2025 23:00:50 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: k6IKiEfahEl1UzSsXpd/qfJ/0wGWNBaFmtrEc0M0KEc=)
2: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (hash: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=)
3: jyRg9rzyp13wzC9lPn-bQBVk9SM.roa (hash: DykO+WlsvnZBAvuruj+gmcKA6ANC0St445Gn0td25pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:e3:41:3c:bc:96:d1:2c:6b:43:a4:5e:e0:76:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: May 4 23:00:50 2025 GMT
Not After : May 5 23:00:50 2025 GMT
Subject: CN=77f7d8a5f1c0e70a476f660084dd250e98dd746d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:25:7f:76:b0:8a:60:03:06:d9:a9:87:e0:e8:
89:e3:df:58:d6:9f:14:49:29:b3:9e:f2:3a:01:fe:
10:be:b5:fd:c9:35:86:5a:88:fa:ab:26:56:0b:03:
9e:95:f2:5d:39:f4:af:a2:bf:40:a5:73:1b:b6:5f:
ca:45:aa:2c:58:5a:5c:1a:1d:c1:af:1a:56:60:c9:
3c:aa:3f:1c:10:2b:a2:17:35:c2:4f:93:11:01:20:
f1:50:a4:fb:d8:50:43:0f:8b:f2:7f:f1:ed:dc:ac:
7a:a8:24:a3:f0:c3:15:ab:bd:37:c1:00:ab:9f:90:
c8:d1:b8:14:b1:b8:56:da:1c:c0:18:65:b1:a2:b5:
df:15:b6:d4:75:b7:ac:42:69:22:07:3b:ae:13:f7:
70:65:5c:3e:c2:f8:a2:0e:e2:61:26:98:57:bd:d7:
73:e3:88:37:e1:9a:1e:40:1f:48:29:44:9a:94:c3:
7c:cf:8f:21:85:59:7f:9a:20:77:ef:10:2f:32:cf:
a4:c6:36:73:ec:87:0b:a0:cd:87:5a:81:c6:d1:2f:
a5:cc:f1:27:48:09:bd:a2:be:90:bb:8d:16:aa:b5:
52:c1:9f:bf:65:7f:e2:31:15:d1:25:73:26:db:c5:
a3:02:51:72:a6:8f:79:d5:a7:a6:51:9c:6e:1f:e4:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F7:D8:A5:F1:C0:E7:0A:47:6F:66:00:84:DD:25:0E:98:DD:74:6D
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:3e:d9:7f:d7:e0:62:db:99:d5:48:f0:e9:09:1a:08:59:31:
27:b5:d2:6f:4a:0a:5c:9b:f5:17:7e:2e:05:7a:b9:87:9a:1e:
ec:65:45:b7:d4:b1:94:b8:12:fa:a0:c9:8a:3f:35:b8:7e:f1:
13:ba:1d:6a:d2:82:1b:f1:c5:27:d9:21:8e:50:66:70:19:f8:
b6:9c:26:40:91:8e:7a:30:10:3f:97:f5:e0:c3:bd:6a:77:85:
a8:6d:cc:64:60:a1:d6:4c:bc:08:0b:f9:ee:f5:0d:7d:05:b7:
dc:24:33:a1:e5:75:0f:79:b5:c1:3a:76:90:66:8c:b3:72:73:
e6:8b:41:a0:1c:ce:10:1c:9a:35:e0:3b:8f:8f:c1:7c:d7:2c:
2e:a3:b7:ed:a3:bf:b8:fc:a5:6a:cf:cd:fe:75:a3:45:b8:68:
8b:36:53:62:f7:dd:58:3a:9e:fd:4e:c9:49:8b:2a:73:cb:27:
97:4a:75:53:e5:ab:b1:7e:3c:c2:42:9c:81:b2:df:34:47:c7:
ee:ef:67:cd:9f:6d:4b:db:8a:00:fa:70:cc:8f:fa:6c:7f:53:
c5:da:4c:c4:13:d4:96:11:b8:87:bc:f8:d8:71:9a:ae:b5:cb:
65:3f:e1:1b:7a:eb:4e:88:c4:b4:48:3a:63:b2:0d:96:00:6c:
35:de:62:24
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZadh+NBPLyW0SxrQ6Re4HZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzBkZTg0MGZkNmJmNGIwYWZkMTI3NGU0NGVmZDFiODY2
NTc2MmMwHhcNMjUwNTA0MjMwMDUwWhcNMjUwNTA1MjMwMDUwWjAzMTEwLwYDVQQD
Eyg3N2Y3ZDhhNWYxYzBlNzBhNDc2ZjY2MDA4NGRkMjUwZTk4ZGQ3NDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yV/drCKYAMG2amH4OiJ499Y1p8U
SSmznvI6Af4QvrX9yTWGWoj6qyZWCwOelfJdOfSvor9ApXMbtl/KRaosWFpcGh3B
rxpWYMk8qj8cECuiFzXCT5MRASDxUKT72FBDD4vyf/Ht3Kx6qCSj8MMVq703wQCr
n5DI0bgUsbhW2hzAGGWxorXfFbbUdbesQmkiBzuuE/dwZVw+wviiDuJhJphXvddz
44g34ZoeQB9IKUSalMN8z48hhVl/miB37xAvMs+kxjZz7IcLoM2HWoHG0S+lzPEn
SAm9or6Qu40WqrVSwZ+/ZX/iMRXRJXMm28WjAlFypo951aemUZxuH+SYdQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHf32KXxwOcKR29mAITdJQ6Y3XRtMB8GA1UdIwQY
MBaAFPtw3oQP1r9LCv0SdORO/RuGZXYsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zRGVoQV9XdjBzS19SSjA1RTc5RzRabGRpdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvOWEzZWFjLWY4NjItNDc4OS1hYzIx
LWQ5NDQ0YTNkMGNlMC8xLzEtM0RlaEFfV3Ywc0tfUkowNUU3OUc0WmxkaXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRhLzlhM2VhYy1mODYyLTQ3ODktYWMyMS1kOTQ0NGEzZDBj
ZTAvMS8xLTNEZWhBX1d2MHNLX1JKMDVFNzlHNFpsZGl3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArT7Z
f9fgYtuZ1Ujw6QkaCFkxJ7XSb0oKXJv1F34uBXq5h5oe7GVFt9SxlLgS+qDJij81
uH7xE7odatKCG/HFJ9khjlBmcBn4tpwmQJGOejAQP5f14MO9aneFqG3MZGCh1ky8
CAv57vUNfQW33CQzoeV1D3m1wTp2kGaMs3Jz5otBoBzOEByaNeA7j4/BfNcsLqO3
7aO/uPylas/N/nWjRbhoizZTYvfdWDqe/U7JSYsqc8snl0p1U+WrsX48wkKcgbLf
NEfH7u9nzZ9tS9uKAPpwzI/6bH9TxdpMxBPUlhG4h7z42HGarrXLZT/hG3rrTojE
tEg6Y7INlgBsNd5iJA==
-----END CERTIFICATE-----
Generated at Mon May 5 09:10:07 2025 by rpki-client