Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: CZe8IWnRxL+75CODDxod+uehubni2uTKtm2nhZFyH0o=
Subject key identifier: D6:D3:82:63:1C:AF:6D:13:D3:C1:0D:4D:46:98:98:F0:88:C1:6A:6C
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 0196DB5451935FAD2CE47428BAF813B279A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 0C23
Signing time: Fri 16 May 2025 23:00:58 +0000
Manifest this update: Fri 16 May 2025 23:00:58 +0000
Manifest next update: Sat 17 May 2025 23:00:58 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: oqy27enyMFf/10zCPj+VGymLGVCjMzYU4KP7D1zvT7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:db:54:51:93:5f:ad:2c:e4:74:28:ba:f8:13:b2:79:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: May 16 23:00:58 2025 GMT
Not After : May 17 23:00:58 2025 GMT
Subject: CN=d6d382631caf6d13d3c10d4d469898f088c16a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:cb:e5:94:9b:93:ab:a3:39:4f:82:ca:df:
cf:9e:b0:34:16:2f:20:3c:fd:aa:7b:84:44:d2:11:
c4:9d:f0:16:90:a0:13:d0:e6:88:a0:cd:30:00:23:
d6:d6:9b:11:ef:b3:77:20:a1:c9:44:f8:73:7b:69:
38:be:59:60:f8:4b:63:85:2c:51:7f:08:e9:86:34:
c4:a9:aa:de:02:0c:ad:eb:c6:f2:cb:31:09:26:16:
f6:f1:81:d4:73:bd:a1:95:11:df:0c:3e:b2:c4:73:
b9:fc:71:d6:51:cf:5e:7d:57:fe:87:cf:fd:7e:a9:
ca:f9:10:a7:60:dc:79:e3:ab:cd:dc:d5:72:78:88:
14:a6:f6:f5:0f:75:99:4c:ca:2d:c6:37:f1:70:bb:
05:0e:b3:63:00:6a:c2:4c:53:bf:76:65:8f:73:fe:
3a:7d:49:1f:63:47:4e:ea:67:dc:2b:ce:fb:c1:3a:
fd:1e:f0:dc:fe:f4:ca:ed:40:32:0c:df:b2:97:84:
d4:e0:11:cb:67:16:c5:92:df:a1:fd:8b:7d:9f:cb:
50:5c:bf:ba:31:55:75:dc:5a:04:43:3a:5f:d7:28:
17:4b:4e:05:67:bd:b7:31:a3:05:c5:e0:1e:64:84:
6b:9f:b4:b8:0f:c1:c5:0d:88:3e:bf:97:58:95:78:
21:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D3:82:63:1C:AF:6D:13:D3:C1:0D:4D:46:98:98:F0:88:C1:6A:6C
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ed:6c:21:1a:ae:d1:a4:7d:34:38:74:f5:12:9c:04:34:ed:
cd:fe:ec:de:80:dd:f0:14:f6:53:0e:24:47:26:af:23:99:6b:
ac:0e:c8:ed:01:f8:36:b7:b1:3e:7a:95:67:a8:88:b3:e6:6a:
0d:8d:57:4d:b8:97:57:31:ed:47:5f:23:ff:30:6e:a1:75:bd:
0c:57:9f:91:bd:78:d3:94:d2:f3:f7:42:ce:6f:0c:88:9a:65:
e9:5a:d9:2b:96:ea:91:b2:3a:5b:e6:b3:74:5c:7b:9d:c8:56:
d0:da:73:84:56:e9:0d:49:6c:f1:fb:0f:72:68:9e:2a:89:1b:
d5:e8:bb:db:cf:42:66:d5:76:ed:41:54:a2:06:79:5f:bd:7f:
be:b8:28:19:73:22:52:46:9e:84:38:92:40:cf:af:e1:69:bb:
23:6f:f0:73:03:23:53:6b:6a:11:bb:30:cb:d6:81:7f:97:68:
3f:8e:24:12:44:17:a0:0f:6e:6e:5d:8b:81:4e:f1:70:56:17:
77:6b:30:9c:12:6c:70:9f:e9:ef:1d:3d:f4:79:f6:3a:7f:2f:
9e:89:91:a2:d3:af:fb:a9:ee:8e:9e:a2:31:e3:21:3c:70:0f:
ef:95:97:ec:0b:15:ed:a8:04:9c:19:9a:29:7e:b5:78:f4:a2:
06:5c:76:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbbVFGTX60s5HQouvgTsnmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYzQzMzk3N2M3MmI0YmU1ZDg4OGY1Njg1M2VkMzFhMWZm
MWVmYzYwHhcNMjUwNTE2MjMwMDU4WhcNMjUwNTE3MjMwMDU4WjAzMTEwLwYDVQQD
EyhkNmQzODI2MzFjYWY2ZDEzZDNjMTBkNGQ0Njk4OThmMDg4YzE2YTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz3L5ZSbk6ujOU+Cyt/PnrA0Fi8g
PP2qe4RE0hHEnfAWkKAT0OaIoM0wACPW1psR77N3IKHJRPhze2k4vllg+EtjhSxR
fwjphjTEqareAgyt68byyzEJJhb28YHUc72hlRHfDD6yxHO5/HHWUc9efVf+h8/9
fqnK+RCnYNx546vN3NVyeIgUpvb1D3WZTMotxjfxcLsFDrNjAGrCTFO/dmWPc/46
fUkfY0dO6mfcK877wTr9HvDc/vTK7UAyDN+yl4TU4BHLZxbFkt+h/Yt9n8tQXL+6
MVV13FoEQzpf1ygXS04FZ723MaMFxeAeZIRrn7S4D8HFDYg+v5dYlXghqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbTgmMcr20T08ENTUaYmPCIwWpsMB8GA1UdIwQY
MBaAFN7EM5d8crS+XYiPVoU+0xof8e/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80NTZhODUtYjdhMS00MTgzLWE2NGYt
MjIzZjUwOGMwNTVhLzEvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80NTZhODUtYjdhMS00MTgzLWE2NGYtMjIzZjUwOGMwNTVh
LzEvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwO1sIRqu
0aR9NDh09RKcBDTtzf7s3oDd8BT2Uw4kRyavI5lrrA7I7QH4NrexPnqVZ6iIs+Zq
DY1XTbiXVzHtR18j/zBuoXW9DFefkb1405TS8/dCzm8MiJpl6VrZK5bqkbI6W+az
dFx7nchW0NpzhFbpDUls8fsPcmieKokb1ei7289CZtV27UFUogZ5X71/vrgoGXMi
UkaehDiSQM+v4Wm7I2/wcwMjU2tqEbswy9aBf5doP44kEkQXoA9ubl2LgU7xcFYX
d2swnBJscJ/p7x099Hn2On8vnomRotOv+6nujp6iMeMhPHAP75WX7AsV7agEnBma
KX61ePSiBlx2MA==
-----END CERTIFICATE-----
Generated at Sat May 17 08:32:46 2025 by rpki-client