Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier: muP/UHycwqDnODJLASGte+VBoplCKaAvpIGytja9YzY=
Subject key identifier: 38:09:D1:13:3C:74:98:74:CB:A4:FC:88:CE:8D:4E:BF:CD:1C:F5:0E
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 0196BE5CD615BD9D26670389D3C3C41A8895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 08:01:17 +0000
Manifest this update: Sun 11 May 2025 08:01:17 +0000
Manifest next update: Mon 12 May 2025 08:01:17 +0000
Files and hashes: 1: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: 9Oo6V7kKAh+KyoNZ6Q9dMeg/VCAdD1iy3bqd4ksDFlc=)
2: GCU6ctyJbqAMhWQYVpX0QaP8Qy4.roa (hash: dW5jCxXLX0Q6KCT48fWLPtjZskUAawNAnNuHkyFw1ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:d6:15:bd:9d:26:67:03:89:d3:c3:c4:1a:88:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: May 11 08:01:17 2025 GMT
Not After : May 12 08:01:17 2025 GMT
Subject: CN=3809d1133c749874cba4fc88ce8d4ebfcd1cf50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:18:78:9b:96:63:16:a3:12:77:8a:95:db:
91:76:fe:a8:fd:ea:e3:f9:e3:0d:b6:20:f7:c8:c0:
55:76:07:62:65:e2:ec:11:15:fd:02:e0:b0:c7:0b:
31:1e:4e:a8:2e:ed:77:aa:2a:50:e1:60:7e:fc:09:
96:92:73:73:59:dd:bb:d9:2d:29:fe:cf:1d:7f:52:
a7:52:79:ee:ac:e0:19:eb:7b:dd:40:eb:ee:7c:e4:
99:ac:1a:51:f5:8b:ab:c3:5c:ca:88:4d:69:19:1c:
a4:e8:db:92:ed:19:6f:49:6f:ef:57:c6:a8:94:9e:
a7:59:e1:d1:28:9f:a7:80:24:7e:7b:ca:75:3c:44:
6b:57:e0:da:f7:0d:e5:5d:4d:ff:21:d0:39:26:0b:
02:28:5a:d8:97:ef:7b:67:d5:97:90:93:d9:a3:e2:
b3:98:1f:da:b0:64:2f:76:b0:ce:02:84:a6:2c:fa:
cc:82:67:dd:d2:61:c5:99:85:b3:ff:60:45:3f:ac:
e5:65:bc:bc:cb:ab:78:da:7c:e7:05:4b:9d:38:39:
17:1b:27:3a:bb:98:a2:ad:eb:65:02:ab:e1:b7:9c:
ed:9a:aa:89:3c:8e:42:b8:1f:3c:22:ff:45:b5:81:
12:ed:5f:2a:ea:3d:b6:15:56:c6:35:57:6d:4b:b1:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:09:D1:13:3C:74:98:74:CB:A4:FC:88:CE:8D:4E:BF:CD:1C:F5:0E
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4c:0a:e8:e1:8b:ce:9a:9f:65:7a:80:68:ef:ba:24:52:07:
ca:fa:e7:5a:27:19:f5:4c:2c:b6:19:23:dc:0e:af:99:3b:a3:
dc:74:28:3a:cf:fc:cd:2f:d6:80:90:fc:af:f6:79:58:c5:0a:
78:c2:e3:d7:b9:2e:16:15:84:09:dc:b6:4d:4a:ea:67:a0:cd:
e9:a4:1a:e6:2c:81:35:45:29:c5:fd:d8:af:53:fb:90:c2:bd:
66:27:9c:f8:70:81:40:7d:20:23:af:8b:db:cc:cb:80:80:8d:
2d:fe:c6:79:d2:0b:be:35:20:c4:a1:f0:4d:3c:2a:f9:55:58:
36:6d:dc:da:e9:4d:cb:b2:c0:f0:a3:3a:e5:1b:1c:ce:59:f7:
6d:c9:0d:5d:c5:0e:9b:0b:a9:da:5a:f9:8d:4d:bd:c4:44:01:
49:2e:00:9d:ec:e4:f1:8c:89:4c:92:b2:51:9a:18:e8:69:f8:
67:37:f1:ec:59:a5:b4:b8:77:b3:16:83:7f:13:9b:9b:9e:69:
8d:3e:6a:84:2b:7e:7a:3c:00:b0:50:e8:9b:36:04:ac:74:39:
66:05:b7:da:f3:c2:a1:f3:c8:01:15:67:af:73:ec:68:ed:1c:
cd:05:44:72:9a:00:96:05:ca:bd:01:07:f1:d4:89:7e:dd:40:
c6:b4:7b:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XNYVvZ0mZwOJ08PEGoiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NGRjZDBlZTcwMTRlZmIyZTNiNTU0ZmJiNzA2Mzg0ZWYx
MWQwNTEwHhcNMjUwNTExMDgwMTE3WhcNMjUwNTEyMDgwMTE3WjAzMTEwLwYDVQQD
EygzODA5ZDExMzNjNzQ5ODc0Y2JhNGZjODhjZThkNGViZmNkMWNmNTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8cYeJuWYxajEneKlduRdv6o/erj
+eMNtiD3yMBVdgdiZeLsERX9AuCwxwsxHk6oLu13qipQ4WB+/AmWknNzWd272S0p
/s8df1KnUnnurOAZ63vdQOvufOSZrBpR9Yurw1zKiE1pGRyk6NuS7RlvSW/vV8ao
lJ6nWeHRKJ+ngCR+e8p1PERrV+Da9w3lXU3/IdA5JgsCKFrYl+97Z9WXkJPZo+Kz
mB/asGQvdrDOAoSmLPrMgmfd0mHFmYWz/2BFP6zlZby8y6t42nznBUudODkXGyc6
u5iiretlAqvht5ztmqqJPI5CuB88Iv9FtYES7V8q6j22FVbGNVdtS7HlVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgJ0RM8dJh0y6T8iM6NTr/NHPUOMB8GA1UdIwQY
MBaAFAZNzQ7nAU77LjtVT7twY4TvEdBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kY2IwOGMtNTUxNS00NDVjLWFkOTkt
ZmI0NzQwZmRhMjUwLzEvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kY2IwOGMtNTUxNS00NDVjLWFkOTktZmI0NzQwZmRhMjUw
LzEvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkwK6OGL
zpqfZXqAaO+6JFIHyvrnWicZ9Uwsthkj3A6vmTuj3HQoOs/8zS/WgJD8r/Z5WMUK
eMLj17kuFhWECdy2TUrqZ6DN6aQa5iyBNUUpxf3Yr1P7kMK9Ziec+HCBQH0gI6+L
28zLgICNLf7GedILvjUgxKHwTTwq+VVYNm3c2ulNy7LA8KM65Rsczln3bckNXcUO
mwup2lr5jU29xEQBSS4Anezk8YyJTJKyUZoY6Gn4Zzfx7FmltLh3sxaDfxObm55p
jT5qhCt+ejwAsFDomzYErHQ5ZgW32vPCofPIARVnr3PsaO0czQVEcpoAlgXKvQEH
8dSJft1AxrR7TQ==
-----END CERTIFICATE-----
Generated at Sun May 11 16:04:52 2025 by rpki-client