Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
File: 3YpOHe5bseZXmxFhypEsqcA7Ru0.mft (raw, json)
Hash identifier: ISaLygKUwuxAOMCiBIsU0dpI7+gplOdrG+4z6YoH74U=
Subject key identifier: 23:E0:71:15:B4:4A:8C:F8:F9:44:02:79:C4:F4:1E:13:7B:C8:B1:B1
Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
Certificate issuer: /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Certificate serial: 0196BF6F8598418D6C06D8048E30934D9E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
Manifest number: 0E88
Signing time: Sun 11 May 2025 13:01:18 +0000
Manifest this update: Sun 11 May 2025 13:01:18 +0000
Manifest next update: Mon 12 May 2025 13:01:18 +0000
Files and hashes: 1: 1-hdiWMY5l0xAZuqxRKYMnls1-tQ.roa (hash: T86Jb9a9Ub4X+hYRFQtCytnDevJ3Vo4p0E2BCYldVL4=)
2: 3YpOHe5bseZXmxFhypEsqcA7Ru0.crl (hash: lVHaMEQhFoY0bHlKU+F0nKboleKA5laHPCvSMgAtHKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:85:98:41:8d:6c:06:d8:04:8e:30:93:4d:9e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Validity
Not Before: May 11 13:01:18 2025 GMT
Not After : May 12 13:01:18 2025 GMT
Subject: CN=23e07115b44a8cf8f9440279c4f41e137bc8b1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:9d:45:26:e9:91:2f:62:aa:56:8d:34:5a:
e0:7b:62:88:40:40:8d:cc:46:43:08:e7:19:90:b5:
9d:4a:eb:19:cc:02:6c:64:8e:06:d0:77:ce:9f:66:
81:46:b7:87:0c:d5:7e:89:a2:63:48:35:8b:66:ee:
67:cc:eb:d5:32:21:7c:06:e8:2f:49:4c:e5:ae:10:
e0:f4:3b:04:8a:e9:c9:f6:2e:09:35:2b:f7:b1:4f:
ab:b1:75:6d:99:24:5f:97:82:71:b7:3c:da:80:05:
99:28:7b:15:e5:b6:59:32:2e:c4:af:9c:33:76:13:
6c:78:8f:71:8b:8c:5d:96:82:82:fa:9a:53:54:5e:
3d:1b:14:ef:9c:da:7f:f8:3b:0d:cf:43:8e:ca:e5:
38:da:39:c7:9a:93:ed:38:7e:d6:de:c8:8b:8e:1b:
30:a9:89:63:e5:b3:17:a3:b7:ca:6a:19:a8:10:e2:
3f:d7:b7:47:ed:b0:11:90:26:b5:63:b9:1c:a5:59:
d7:09:73:5e:bc:77:fe:fc:90:42:18:ce:58:18:32:
a5:93:7b:53:a8:37:19:5d:59:cb:a1:03:16:81:7e:
f7:38:cb:e0:a2:a1:11:3e:1f:ed:cf:9e:04:2f:19:
10:36:c4:f9:1b:9b:64:02:a3:b3:4f:6e:17:2b:0a:
15:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E0:71:15:B4:4A:8C:F8:F9:44:02:79:C4:F4:1E:13:7B:C8:B1:B1
X509v3 Authority Key Identifier:
keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9a:43:bd:97:69:96:c5:9e:20:39:1a:4e:31:de:24:b7:b0:
d1:dd:87:21:1f:00:8c:d6:55:30:af:0c:16:87:6c:d5:1a:43:
6a:05:46:fa:61:1e:13:dd:07:60:be:f5:d6:e7:41:0a:67:a4:
b6:5f:f1:ba:13:b3:ee:3f:75:cc:b8:f4:23:67:56:31:e4:95:
cb:0e:50:06:cf:45:b0:fe:17:b6:3f:2c:53:19:f4:fb:a0:7b:
08:ae:a9:54:4e:15:af:54:5c:73:4b:07:f6:e0:42:c5:a8:58:
36:99:ca:5e:b5:da:ca:b3:89:7c:0e:ef:77:a8:fd:5f:13:e3:
1f:17:ba:66:bd:9c:90:8b:d6:7f:f4:93:ff:e4:be:da:8d:fb:
af:da:e8:db:1e:6a:30:de:a9:ff:a5:d0:a7:7e:75:75:ae:84:
ca:d5:cd:44:fa:b6:74:4a:ca:b2:19:98:46:71:0d:c5:00:6b:
27:67:16:aa:9c:a7:9a:6d:bf:f9:10:6d:05:28:79:4e:90:78:
78:b9:14:51:50:e2:50:b1:3f:8f:04:ee:96:db:9b:22:d0:6f:
b1:5a:7a:6c:a5:eb:a7:80:b6:70:6a:e8:d5:bd:16:c3:89:ff:
9c:83:b5:0e:b5:7d:15:f3:b2:f9:00:1e:2d:70:fb:ba:b3:47:
0f:8e:5d:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/b4WYQY1sBtgEjjCTTZ5tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOGE0ZTFkZWU1YmIxZTY1NzliMTE2MWNhOTEyY2E5YzAz
YjQ2ZWQwHhcNMjUwNTExMTMwMTE4WhcNMjUwNTEyMTMwMTE4WjAzMTEwLwYDVQQD
EygyM2UwNzExNWI0NGE4Y2Y4Zjk0NDAyNzljNGY0MWUxMzdiYzhiMWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo12dRSbpkS9iqlaNNFrge2KIQECN
zEZDCOcZkLWdSusZzAJsZI4G0HfOn2aBRreHDNV+iaJjSDWLZu5nzOvVMiF8Bugv
SUzlrhDg9DsEiunJ9i4JNSv3sU+rsXVtmSRfl4JxtzzagAWZKHsV5bZZMi7Er5wz
dhNseI9xi4xdloKC+ppTVF49GxTvnNp/+DsNz0OOyuU42jnHmpPtOH7W3siLjhsw
qYlj5bMXo7fKahmoEOI/17dH7bARkCa1Y7kcpVnXCXNevHf+/JBCGM5YGDKlk3tT
qDcZXVnLoQMWgX73OMvgoqERPh/tz54ELxkQNsT5G5tkAqOzT24XKwoVFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPgcRW0Soz4+UQCecT0HhN7yLGxMB8GA1UdIwQY
MBaAFN2KTh3uW7HmV5sRYcqRLKnAO0btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1lwT0hlNWJzZVpYbXhGaHlwRXNxY0E3UnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS81ZDE5MDgtNmM0ZC00NTgxLThmMTAt
OTg1YWFjNWJlYjMwLzEvM1lwT0hlNWJzZVpYbXhGaHlwRXNxY0E3UnUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS81ZDE5MDgtNmM0ZC00NTgxLThmMTAtOTg1YWFjNWJlYjMw
LzEvM1lwT0hlNWJzZVpYbXhGaHlwRXNxY0E3UnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZpDvZdp
lsWeIDkaTjHeJLew0d2HIR8AjNZVMK8MFods1RpDagVG+mEeE90HYL711udBCmek
tl/xuhOz7j91zLj0I2dWMeSVyw5QBs9FsP4Xtj8sUxn0+6B7CK6pVE4Vr1Rcc0sH
9uBCxahYNpnKXrXayrOJfA7vd6j9XxPjHxe6Zr2ckIvWf/ST/+S+2o37r9ro2x5q
MN6p/6XQp351da6EytXNRPq2dErKshmYRnENxQBrJ2cWqpynmm2/+RBtBSh5TpB4
eLkUUVDiULE/jwTultubItBvsVp6bKXrp4C2cGro1b0Ww4n/nIO1DrV9FfOy+QAe
LXD7urNHD45dNA==
-----END CERTIFICATE-----
Generated at Sun May 11 15:37:35 2025 by rpki-client