Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
File: I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft (raw, json)
Hash identifier: PRNec3wuA+O/+x7km4bl4Vz5/Hs9b0GkND3dhbyf93E=
Subject key identifier: 92:8F:BA:A1:23:14:46:76:59:73:7D:B7:B8:9E:E4:34:48:E7:B8:FA
Authority key identifier: 23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
Certificate issuer: /CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Certificate serial: 0196A72F5B2EF03208E1CC75163279D58391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
Manifest number: 147D
Signing time: Tue 06 May 2025 20:00:20 +0000
Manifest this update: Tue 06 May 2025 20:00:20 +0000
Manifest next update: Wed 07 May 2025 20:00:20 +0000
Files and hashes: 1: I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl (hash: wl3lFN83qyC8U1H0SRtzeqTnMpawtLNil+3dx6n9E0A=)
2: ytASscQl-jcvF2Td7QzFghuuoNE.roa (hash: H19QKz9GlVTgCFc+7rr/9vdcrrvYDR0hpeCGpVF7EE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:5b:2e:f0:32:08:e1:cc:75:16:32:79:d5:83:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Validity
Not Before: May 6 20:00:20 2025 GMT
Not After : May 7 20:00:20 2025 GMT
Subject: CN=928fbaa12314467659737db7b89ee43448e7b8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:27:2d:e0:d1:b3:5f:2b:f5:10:5d:c7:da:
d1:24:1b:9c:8c:08:9b:cf:3c:26:82:80:ce:f3:96:
a8:12:56:83:55:4d:42:00:e0:38:62:c4:9a:94:69:
ce:49:18:8f:a5:fd:f0:16:36:8c:77:94:d1:7e:db:
71:48:11:d6:02:83:b1:9a:5a:c0:7a:a3:5e:0d:55:
d5:17:ab:05:a0:54:bc:b2:c2:18:75:97:25:43:d4:
b2:d9:3d:51:3e:2a:8f:02:51:a3:8e:ae:6a:7f:1c:
e9:c5:c4:80:49:f9:3c:a8:eb:71:2d:eb:07:3f:62:
02:aa:e1:fb:0f:ec:9f:67:fe:e1:5c:ea:04:f6:87:
2d:d4:3f:d5:87:9d:4b:59:e0:70:32:70:f4:8f:80:
12:8e:31:29:a5:31:76:12:7a:22:28:92:ac:8c:44:
8a:d8:90:04:fa:2c:be:bd:e4:72:c2:ee:30:6e:93:
b3:0e:5f:a9:ec:77:aa:9d:15:ae:d6:3c:5a:5d:04:
69:eb:e0:f4:e4:dc:13:b7:f9:f1:a2:9b:8f:5c:0f:
5e:4e:83:0e:85:29:f0:b5:bf:c3:2a:bf:d8:9c:85:
3b:b7:92:8b:3e:29:da:c1:8e:fd:f7:24:de:78:8b:
2e:e9:34:e6:a4:b3:2b:a0:db:e3:0e:71:f4:ea:f4:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8F:BA:A1:23:14:46:76:59:73:7D:B7:B8:9E:E4:34:48:E7:B8:FA
X509v3 Authority Key Identifier:
keyid:23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4a:60:8c:02:33:dd:fc:8e:5a:2f:ab:67:31:8a:6a:2a:be:
cf:c6:c3:35:75:58:41:38:2e:34:85:7a:4a:73:27:4e:5a:ad:
3a:5d:a6:bb:04:d3:b0:14:1f:2a:2a:71:f9:9c:ef:f4:f6:3e:
43:53:14:8c:ad:3b:1e:30:ef:da:9c:91:9f:f2:0c:b2:c7:ff:
c5:4e:e0:17:d1:d0:1a:9a:95:83:8c:68:10:43:65:c0:31:69:
07:ba:c1:35:d0:1b:fb:8b:6e:f5:e5:88:03:b3:ed:df:06:4d:
99:73:c4:90:d7:6d:8c:c7:5d:f6:b7:ac:17:9b:c2:ba:e7:42:
d9:c9:f5:e0:c1:a1:7f:74:fe:30:e3:c8:57:ed:f7:2f:20:4c:
a2:48:b6:17:0f:59:e0:86:37:56:77:8e:3e:93:01:52:78:04:
32:b1:7a:c6:c6:a9:6b:17:03:7d:0f:c1:c2:7f:97:1d:49:f9:
f0:c3:a2:10:2b:15:a2:d2:44:3f:54:43:b2:07:ae:2f:51:b5:
b7:ea:0e:18:bd:39:8f:fb:70:83:ea:5c:40:20:fe:53:74:2b:
54:27:8f:29:8c:f2:9d:fd:9e:21:dd:21:4b:28:8a:7f:af:3c:
4d:84:d7:5c:d1:ad:5f:55:f8:96:02:0b:46:f7:8c:75:e9:24:
22:6d:ca:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZanL1su8DII4cx1FjJ51YORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2IyYjUwYmYwYzE4YTUzMWU2ZGIxNTY2N2JlN2VkNzZi
YjI4MjEwHhcNMjUwNTA2MjAwMDIwWhcNMjUwNTA3MjAwMDIwWjAzMTEwLwYDVQQD
Eyg5MjhmYmFhMTIzMTQ0Njc2NTk3MzdkYjdiODllZTQzNDQ4ZTdiOGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV0nLeDRs18r9RBdx9rRJBucjAib
zzwmgoDO85aoElaDVU1CAOA4YsSalGnOSRiPpf3wFjaMd5TRfttxSBHWAoOxmlrA
eqNeDVXVF6sFoFS8ssIYdZclQ9Sy2T1RPiqPAlGjjq5qfxzpxcSASfk8qOtxLesH
P2ICquH7D+yfZ/7hXOoE9oct1D/Vh51LWeBwMnD0j4ASjjEppTF2EnoiKJKsjESK
2JAE+iy+veRywu4wbpOzDl+p7HeqnRWu1jxaXQRp6+D05NwTt/nxopuPXA9eToMO
hSnwtb/DKr/YnIU7t5KLPinawY799yTeeIsu6TTmpLMroNvjDnH06vSeGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKPuqEjFEZ2WXN9t7ie5DRI57j6MB8GA1UdIwQY
MBaAFCN7K1C/DBilMebbFWZ75+12uyghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTNzclVMOE1HS1V4NXRzVlpudm43WGE3S0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8zZDZkNTEtM2Q1Ny00M2E4LWI2N2Yt
YjYxNWRmN2ZjZTllLzEvSTNzclVMOE1HS1V4NXRzVlpudm43WGE3S0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8zZDZkNTEtM2Q1Ny00M2E4LWI2N2YtYjYxNWRmN2ZjZTll
LzEvSTNzclVMOE1HS1V4NXRzVlpudm43WGE3S0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkpgjAIz
3fyOWi+rZzGKaiq+z8bDNXVYQTguNIV6SnMnTlqtOl2muwTTsBQfKipx+Zzv9PY+
Q1MUjK07HjDv2pyRn/IMssf/xU7gF9HQGpqVg4xoEENlwDFpB7rBNdAb+4tu9eWI
A7Pt3wZNmXPEkNdtjMdd9resF5vCuudC2cn14MGhf3T+MOPIV+33LyBMoki2Fw9Z
4IY3VneOPpMBUngEMrF6xsapaxcDfQ/Bwn+XHUn58MOiECsVotJEP1RDsgeuL1G1
t+oOGL05j/twg+pcQCD+U3QrVCePKYzynf2eId0hSyiKf688TYTXXNGtX1X4lgIL
RveMdekkIm3KXQ==
-----END CERTIFICATE-----
Generated at Wed May 7 04:20:29 2025 by rpki-client