Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
File: p3tNEFqlxNZemaq2926tWJ5ih8w.mft (raw, json)
Hash identifier: vlo4yRsJMb54c/EwQ/cLuO37XCRhS0K5q99L7ZoICEc=
Subject key identifier: 0C:00:9C:68:C3:93:DA:80:FE:30:C4:5C:3B:06:61:18:F6:CC:1E:19
Authority key identifier: A7:7B:4D:10:5A:A5:C4:D6:5E:99:AA:B6:F7:6E:AD:58:9E:62:87:CC
Certificate issuer: /CN=a77b4d105aa5c4d65e99aab6f76ead589e6287cc
Certificate serial: 0196DCD449822598C0485A2EDA16BA212E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
Manifest number: 0341
Signing time: Sat 17 May 2025 06:00:22 +0000
Manifest this update: Sat 17 May 2025 06:00:22 +0000
Manifest next update: Sun 18 May 2025 06:00:22 +0000
Files and hashes: 1: p3tNEFqlxNZemaq2926tWJ5ih8w.crl (hash: hs0UtVNB431/yEGvdjq6Y59+roi+WFQAhlztGpsLxP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:d4:49:82:25:98:c0:48:5a:2e:da:16:ba:21:2e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77b4d105aa5c4d65e99aab6f76ead589e6287cc
Validity
Not Before: May 17 06:00:22 2025 GMT
Not After : May 18 06:00:22 2025 GMT
Subject: CN=0c009c68c393da80fe30c45c3b066118f6cc1e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:d5:7c:17:62:95:0f:c2:c1:0d:fe:cd:0f:
2b:24:68:c6:54:ea:b9:48:27:a7:f7:0d:26:74:f4:
97:eb:6e:96:64:59:a9:2a:f9:3c:c0:4b:8b:5b:b9:
65:9f:70:4b:e2:b1:73:ce:4f:f2:07:61:54:ba:d7:
b4:e8:a0:e4:9b:45:cc:c2:f2:eb:57:a7:af:4d:d2:
af:88:76:c2:99:b6:ca:90:f0:36:ca:28:bb:ba:db:
ae:7b:bb:8c:86:a9:e5:cb:9f:f6:ad:47:0c:5a:8b:
73:34:6f:3b:36:e5:57:59:f5:64:2d:8d:c6:7c:92:
3d:7d:aa:f8:43:7b:5c:52:dc:31:85:0c:00:40:d9:
e4:a6:fc:76:72:03:a9:7e:0b:a3:74:81:6d:1b:d0:
72:00:b2:3e:7b:fd:44:a6:7c:0a:c1:2d:c9:23:b8:
35:c0:48:5f:09:ae:e5:12:4a:2a:d3:12:93:d2:e7:
9c:5a:a8:35:34:23:4b:ae:33:b3:a8:84:a1:a1:c5:
1d:19:5d:7d:d1:dd:5d:b7:c2:94:c3:d9:44:e5:ee:
83:34:49:2b:a5:df:b3:d8:97:07:ed:09:b0:d7:35:
2a:44:18:b1:98:c2:19:18:bb:2c:0d:a7:35:7f:08:
bd:2a:a1:06:6c:3e:13:7f:d1:03:71:cd:12:3c:fc:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:00:9C:68:C3:93:DA:80:FE:30:C4:5C:3B:06:61:18:F6:CC:1E:19
X509v3 Authority Key Identifier:
keyid:A7:7B:4D:10:5A:A5:C4:D6:5E:99:AA:B6:F7:6E:AD:58:9E:62:87:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3tNEFqlxNZemaq2926tWJ5ih8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5ea2a6-ff2f-47fd-b7c8-f4f45043b8bc/1/p3tNEFqlxNZemaq2926tWJ5ih8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:67:43:c4:62:2d:b9:95:83:cd:86:b2:98:42:e8:93:3e:c7:
fd:22:f1:7d:3f:97:4e:a4:ff:8a:0d:7a:56:90:41:e3:ee:1c:
a9:2d:60:e5:0d:31:28:99:26:ad:0f:b9:a6:83:bf:d4:8b:e9:
a4:ee:ad:32:5b:05:bf:d0:dd:9e:74:f5:f4:98:c4:7a:7b:17:
9f:4b:53:3a:35:94:38:39:10:dc:ab:b5:95:42:7f:66:78:02:
40:c3:91:87:50:b1:72:c5:0d:53:e2:82:c4:81:df:7d:6c:37:
a1:db:8f:c1:22:23:f5:e8:6c:5f:2d:e0:27:58:f3:2e:85:05:
68:dc:92:80:48:74:a3:43:05:a5:63:04:67:d3:be:8c:72:c0:
40:30:37:0a:38:e6:59:f5:e9:fd:1a:07:a3:c6:c4:ca:52:f2:
5b:e0:d4:91:7a:dc:b5:5b:0a:5c:4d:e9:37:06:5e:6b:0c:9b:
9d:df:51:34:93:17:6e:ce:d6:79:76:59:99:4b:25:d6:ca:ea:
61:db:c0:17:d4:92:b3:21:fd:ef:29:36:fe:b6:14:a1:fd:d4:
82:0d:9d:5a:56:1a:f3:d1:95:4b:25:1b:00:1e:11:01:79:8c:
99:fa:da:e3:73:89:42:c5:50:85:51:8c:cb:b4:92:36:09:f9:
79:b3:a5:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbc1EmCJZjASFou2ha6IS5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3N2I0ZDEwNWFhNWM0ZDY1ZTk5YWFiNmY3NmVhZDU4OWU2
Mjg3Y2MwHhcNMjUwNTE3MDYwMDIyWhcNMjUwNTE4MDYwMDIyWjAzMTEwLwYDVQQD
EygwYzAwOWM2OGMzOTNkYTgwZmUzMGM0NWMzYjA2NjExOGY2Y2MxZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6PVfBdilQ/CwQ3+zQ8rJGjGVOq5
SCen9w0mdPSX626WZFmpKvk8wEuLW7lln3BL4rFzzk/yB2FUute06KDkm0XMwvLr
V6evTdKviHbCmbbKkPA2yii7utuue7uMhqnly5/2rUcMWotzNG87NuVXWfVkLY3G
fJI9far4Q3tcUtwxhQwAQNnkpvx2cgOpfgujdIFtG9ByALI+e/1EpnwKwS3JI7g1
wEhfCa7lEkoq0xKT0uecWqg1NCNLrjOzqIShocUdGV190d1dt8KUw9lE5e6DNEkr
pd+z2JcH7Qmw1zUqRBixmMIZGLssDac1fwi9KqEGbD4Tf9EDcc0SPPwDjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwAnGjDk9qA/jDEXDsGYRj2zB4ZMB8GA1UdIwQY
MBaAFKd7TRBapcTWXpmqtvdurVieYofMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDN0TkVGcWx4TlplbWFxMjkyNnRXSjVpaDh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81ZWEyYTYtZmYyZi00N2ZkLWI3Yzgt
ZjRmNDUwNDNiOGJjLzEvcDN0TkVGcWx4TlplbWFxMjkyNnRXSjVpaDh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81ZWEyYTYtZmYyZi00N2ZkLWI3YzgtZjRmNDUwNDNiOGJj
LzEvcDN0TkVGcWx4TlplbWFxMjkyNnRXSjVpaDh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWdDxGIt
uZWDzYaymELokz7H/SLxfT+XTqT/ig16VpBB4+4cqS1g5Q0xKJkmrQ+5poO/1Ivp
pO6tMlsFv9DdnnT19JjEensXn0tTOjWUODkQ3Ku1lUJ/ZngCQMORh1CxcsUNU+KC
xIHffWw3oduPwSIj9ehsXy3gJ1jzLoUFaNySgEh0o0MFpWMEZ9O+jHLAQDA3Cjjm
WfXp/RoHo8bEylLyW+DUkXrctVsKXE3pNwZeawybnd9RNJMXbs7WeXZZmUsl1srq
YdvAF9SSsyH97yk2/rYUof3Ugg2dWlYa89GVSyUbAB4RAXmMmfra43OJQsVQhVGM
y7SSNgn5ebOlsw==
-----END CERTIFICATE-----
Generated at Sat May 17 08:21:42 2025 by rpki-client