Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
File: k3hbOp4zxStYueyVo3cj8ACL-UY.mft (raw, json)
Hash identifier: dunhimYzP7dn5s6tOnXFcAB0joIIS8KCa/QfW+w9eP4=
Subject key identifier: 06:C4:3D:9C:FB:FA:CF:AF:C7:86:E7:0C:17:F7:BE:E7:3D:91:AE:95
Authority key identifier: 93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
Certificate issuer: /CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Certificate serial: 0196C4953956CACB118CBD4FBC99A288117F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 13:00:35 +0000
Manifest this update: Mon 12 May 2025 13:00:35 +0000
Manifest next update: Tue 13 May 2025 13:00:35 +0000
Files and hashes: 1: k3hbOp4zxStYueyVo3cj8ACL-UY.crl (hash: 1N36zJ53WXHUcsdnLiG4qHhpgteZq6qHWL9M60tETVA=)
2: nuidpU4aDNDfpkpE3RPeG40f1q4.roa (hash: KG4XUtkHgFpia+tczkzg4tQ7m8oF5y68xoUIqm5c/jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:39:56:ca:cb:11:8c:bd:4f:bc:99:a2:88:11:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Validity
Not Before: May 12 13:00:35 2025 GMT
Not After : May 13 13:00:35 2025 GMT
Subject: CN=06c43d9cfbfacfafc786e70c17f7bee73d91ae95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b1:7b:82:bc:ac:7c:07:81:52:7a:44:4c:b6:
c5:6e:a2:43:1e:91:6b:08:8f:13:98:e8:d1:6f:03:
d3:de:88:e3:d5:e6:fa:a4:02:7a:da:7e:68:5c:22:
3e:bb:cc:a7:e2:28:80:5d:86:89:ab:31:40:8c:49:
75:cb:7b:6a:f5:7f:4b:c5:6a:ba:4c:9b:86:69:9a:
bf:2a:9a:38:95:f3:43:0e:19:89:d2:e0:bb:44:b9:
59:47:54:dc:15:dc:53:c3:a6:26:97:59:76:7c:57:
3e:8e:81:9e:ec:2a:bd:91:fa:43:04:fa:5b:33:4c:
f1:ce:0f:e8:61:4f:af:6d:0f:3d:ab:f7:ff:5c:a5:
ae:80:e0:21:b5:8f:8f:4a:01:2d:97:14:a5:67:4d:
04:e0:8b:a2:1d:d2:de:cf:96:fd:d4:95:51:c8:df:
eb:02:15:e8:5e:a6:cd:00:eb:64:b9:0f:70:d6:f6:
51:7c:8e:8f:79:55:6b:c7:ad:64:2c:f0:8a:9b:ab:
2e:5b:af:42:43:8e:38:ef:aa:68:d6:56:b0:28:87:
e4:e8:a1:3b:82:c4:15:cf:fe:e0:cb:09:35:b7:72:
81:bd:d0:c9:b0:d3:89:74:31:6f:24:2b:b2:46:ce:
f6:b2:a7:c2:0e:1c:7c:db:38:73:41:b0:33:c6:9c:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C4:3D:9C:FB:FA:CF:AF:C7:86:E7:0C:17:F7:BE:E7:3D:91:AE:95
X509v3 Authority Key Identifier:
keyid:93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8c:96:ec:f0:74:a0:63:10:00:63:3a:fc:77:f3:e8:e7:9b:
88:47:9d:fa:c5:7b:9f:89:90:89:83:37:fe:9a:80:80:d3:aa:
fb:8f:15:b0:c0:b2:80:4c:59:71:c7:20:aa:c3:3b:e1:bd:b8:
bc:3f:d3:73:26:3b:ac:8a:02:2e:ea:f6:fe:4e:2f:35:84:de:
47:4a:b0:2f:9b:03:24:f8:e4:36:36:5f:39:4d:23:09:65:ce:
d5:c4:f9:52:4c:b3:08:b8:d6:50:d7:cb:bc:ed:00:c5:f1:4e:
56:65:d0:77:94:10:e7:29:4c:5a:9c:05:8a:87:13:14:56:39:
8c:b2:80:b5:e2:f2:15:93:cc:01:71:a9:f4:9a:c9:35:a2:fc:
d7:6f:96:ca:ac:b6:56:78:cc:5d:55:df:bd:1c:89:a3:cf:4a:
12:2e:2e:ad:7e:a9:ee:7b:17:10:30:cb:14:e4:28:b9:39:67:
45:c6:f4:75:81:18:ad:f1:e3:03:36:66:86:55:8c:40:78:79:
8c:a0:84:20:7a:ba:0e:e8:60:f4:16:2e:f9:a8:5a:31:1e:31:
d8:92:ce:84:08:97:1f:41:46:7e:ce:8a:a5:4c:9e:d5:df:97:
7e:42:f9:f5:3c:69:36:b5:d1:fb:f9:f1:0f:9e:46:b4:03:67:
fc:40:92:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbElTlWyssRjL1PvJmiiBF/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNzg1YjNhOWUzM2M1MmI1OGI5ZWM5NWEzNzcyM2YwMDA4
YmY5NDYwHhcNMjUwNTEyMTMwMDM1WhcNMjUwNTEzMTMwMDM1WjAzMTEwLwYDVQQD
EygwNmM0M2Q5Y2ZiZmFjZmFmYzc4NmU3MGMxN2Y3YmVlNzNkOTFhZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLF7grysfAeBUnpETLbFbqJDHpFr
CI8TmOjRbwPT3ojj1eb6pAJ62n5oXCI+u8yn4iiAXYaJqzFAjEl1y3tq9X9LxWq6
TJuGaZq/Kpo4lfNDDhmJ0uC7RLlZR1TcFdxTw6Yml1l2fFc+joGe7Cq9kfpDBPpb
M0zxzg/oYU+vbQ89q/f/XKWugOAhtY+PSgEtlxSlZ00E4IuiHdLez5b91JVRyN/r
AhXoXqbNAOtkuQ9w1vZRfI6PeVVrx61kLPCKm6suW69CQ44476po1lawKIfk6KE7
gsQVz/7gywk1t3KBvdDJsNOJdDFvJCuyRs72sqfCDhx82zhzQbAzxpyXpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbEPZz7+s+vx4bnDBf3vuc9ka6VMB8GA1UdIwQY
MBaAFJN4WzqeM8UrWLnslaN3I/AAi/lGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80ODI5ODQtZDllNC00ZDMzLWE4ZWMt
ZjRiYWI3MTllMDcwLzEvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80ODI5ODQtZDllNC00ZDMzLWE4ZWMtZjRiYWI3MTllMDcw
LzEvazNoYk9wNHp4U3RZdWV5Vm8zY2o4QUNMLVVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYyW7PB0
oGMQAGM6/Hfz6OebiEed+sV7n4mQiYM3/pqAgNOq+48VsMCygExZcccgqsM74b24
vD/TcyY7rIoCLur2/k4vNYTeR0qwL5sDJPjkNjZfOU0jCWXO1cT5UkyzCLjWUNfL
vO0AxfFOVmXQd5QQ5ylMWpwFiocTFFY5jLKAteLyFZPMAXGp9JrJNaL812+Wyqy2
VnjMXVXfvRyJo89KEi4urX6p7nsXEDDLFOQouTlnRcb0dYEYrfHjAzZmhlWMQHh5
jKCEIHq6Duhg9BYu+ahaMR4x2JLOhAiXH0FGfs6KpUye1d+XfkL59TxpNrXR+/nx
D55GtANn/ECS1w==
-----END CERTIFICATE-----
Generated at Mon May 12 18:57:35 2025 by rpki-client