Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: J5iBJv2yaTlc8Cqh58nCJgbKYAuBYIf0rFkLPVZD3sA=
Subject key identifier: E2:8C:AF:91:35:65:E0:58:BB:4B:BB:41:F8:81:09:50:95:58:56:CF
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 0196B333D26BC7F9AFE4A6B16356C684BC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 0EEA
Signing time: Fri 09 May 2025 04:00:39 +0000
Manifest this update: Fri 09 May 2025 04:00:39 +0000
Manifest next update: Sat 10 May 2025 04:00:39 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: 0W4LeiWqT9jo3DxV4rx/J7dOZKqlkWW2PvJ9zdpABNA=)
2: 6f05f7w22zRcUpz28tjM6XCdsYk.roa (hash: kl4KaLs8etslFAKNgVQw6su1C8PWL6O+HJhYp1T4Tak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:d2:6b:c7:f9:af:e4:a6:b1:63:56:c6:84:bc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: May 9 04:00:39 2025 GMT
Not After : May 10 04:00:39 2025 GMT
Subject: CN=e28caf913565e058bb4bbb41f8810950955856cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:ec:26:ea:bf:f9:8c:a3:10:29:3e:3e:fb:
53:d2:8c:fe:c1:0c:b3:26:eb:e7:75:81:0e:43:49:
af:3f:e9:af:17:b0:40:8a:07:57:af:f5:c5:27:aa:
c9:23:1f:67:a4:42:c3:14:0b:ac:03:02:60:6c:9b:
cf:b0:0d:06:db:de:22:50:0d:ea:4a:18:6d:a7:68:
62:94:c5:df:e2:95:84:0a:20:bf:b0:85:65:45:6f:
d9:b2:c4:96:df:ac:45:60:c1:da:56:f7:2b:7d:53:
a9:1b:b0:fa:6d:87:d8:ea:0c:e2:fa:03:db:84:9e:
09:50:ba:a6:bb:98:e7:f5:0b:02:38:4e:25:20:a1:
71:17:8d:be:54:b9:4e:2e:af:2e:1e:2a:c3:aa:0e:
a2:bb:36:2d:16:ee:35:c5:5a:28:c9:3d:c1:24:f2:
b2:5e:26:5d:fe:f5:fc:f1:52:64:c3:cf:dd:11:79:
0a:0b:2a:c1:07:7a:31:14:22:72:37:79:30:a3:8b:
3a:e7:0a:ba:8a:5c:da:bf:34:4e:a6:b6:79:37:47:
80:4a:29:f7:b7:2b:0c:0e:0b:8b:f1:74:af:8e:fc:
10:9e:d7:60:f0:6d:cf:75:99:b3:0d:db:8b:70:b8:
ed:f6:1a:3f:db:b1:7e:1d:0b:18:d7:ec:20:82:83:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8C:AF:91:35:65:E0:58:BB:4B:BB:41:F8:81:09:50:95:58:56:CF
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cc:75:e6:5f:b9:61:04:83:02:1f:0f:9d:46:e4:78:26:85:
ae:0a:53:71:77:e6:81:ec:ff:00:c7:d9:e2:b4:80:0d:64:01:
43:8f:8c:4e:bb:81:f1:85:73:75:ac:b9:b3:c7:f1:ec:c7:c0:
64:b7:05:80:4a:bc:45:b5:3b:13:9b:d9:27:1c:fd:17:5e:b3:
ec:16:82:af:2e:99:db:4a:83:dc:42:16:49:7b:59:02:6f:20:
bf:af:33:79:38:bb:a5:7e:bd:69:ad:62:b3:62:14:e0:b0:96:
19:2e:18:0d:b8:4f:07:1d:06:10:4e:b7:7e:c2:d2:9f:2d:74:
3f:bc:dc:e6:67:66:89:0d:7c:d4:7d:66:8d:e8:92:63:ce:6f:
38:eb:fa:12:7d:e3:12:21:35:ca:e3:89:8d:52:88:10:46:02:
33:f7:35:73:6a:90:a4:98:06:ac:51:29:e8:4d:94:df:59:1c:
9d:e3:0e:2d:f5:b8:23:b3:02:69:0f:0e:5f:d1:73:a9:e7:e7:
92:b3:ce:d6:18:1b:54:53:aa:73:7c:cb:60:b0:4a:dc:3c:0f:
d3:1b:d5:f9:12:af:22:8d:df:46:ba:f2:a2:94:f5:39:8d:96:
1a:ee:ac:5b:a9:de:e6:b9:3f:97:1f:60:36:f6:a0:80:f4:de:
20:a9:f3:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZazM9Jrx/mv5KaxY1bGhLwwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjY2E1MjIxOTZmZDA5YmFlNzM5YjZiZDIzMjJlNWViOTBk
YTRmYjkwHhcNMjUwNTA5MDQwMDM5WhcNMjUwNTEwMDQwMDM5WjAzMTEwLwYDVQQD
EyhlMjhjYWY5MTM1NjVlMDU4YmI0YmJiNDFmODgxMDk1MDk1NTg1NmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11nsJuq/+YyjECk+PvtT0oz+wQyz
JuvndYEOQ0mvP+mvF7BAigdXr/XFJ6rJIx9npELDFAusAwJgbJvPsA0G294iUA3q
Shhtp2hilMXf4pWECiC/sIVlRW/ZssSW36xFYMHaVvcrfVOpG7D6bYfY6gzi+gPb
hJ4JULqmu5jn9QsCOE4lIKFxF42+VLlOLq8uHirDqg6iuzYtFu41xVooyT3BJPKy
XiZd/vX88VJkw8/dEXkKCyrBB3oxFCJyN3kwo4s65wq6ilzavzROprZ5N0eASin3
tysMDguL8XSvjvwQntdg8G3PdZmzDduLcLjt9ho/27F+HQsY1+wggoOrOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKMr5E1ZeBYu0u7QfiBCVCVWFbPMB8GA1UdIwQY
MBaAFNzKUiGW/Qm65zm2vSMi5euQ2k+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMt
M2IyNTBhZTE4OTM2LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMtM2IyNTBhZTE4OTM2
LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMx15l+5
YQSDAh8PnUbkeCaFrgpTcXfmgez/AMfZ4rSADWQBQ4+MTruB8YVzday5s8fx7MfA
ZLcFgEq8RbU7E5vZJxz9F16z7BaCry6Z20qD3EIWSXtZAm8gv68zeTi7pX69aa1i
s2IU4LCWGS4YDbhPBx0GEE63fsLSny10P7zc5mdmiQ181H1mjeiSY85vOOv6En3j
EiE1yuOJjVKIEEYCM/c1c2qQpJgGrFEp6E2U31kcneMOLfW4I7MCaQ8OX9Fzqefn
krPO1hgbVFOqc3zLYLBK3DwP0xvV+RKvIo3fRrryopT1OY2WGu6sW6ne5rk/lx9g
NvaggPTeIKnzAg==
-----END CERTIFICATE-----
Generated at Fri May 9 10:17:57 2025 by rpki-client