Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
File: 3A-eoEY21-cUGLkwkczQ5XAVvkk.mft (raw, json)
Hash identifier: TynkxILc3UnP/eBJbZ1VdM23f4phqFfvR9QDXADmnjw=
Subject key identifier: C1:78:41:1D:FC:68:3D:2C:80:46:19:6D:22:A3:F6:EE:60:69:A0:34
Authority key identifier: DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
Certificate issuer: /CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Certificate serial: 0196B258D721F4CFA2853FFDC3E866E6C538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
Manifest number: 152E
Signing time: Fri 09 May 2025 00:01:28 +0000
Manifest this update: Fri 09 May 2025 00:01:28 +0000
Manifest next update: Sat 10 May 2025 00:01:28 +0000
Files and hashes: 1: 3A-eoEY21-cUGLkwkczQ5XAVvkk.crl (hash: 97R4wPY+kipwySemVQdymXIIqaulZaK0rzc6317R5D0=)
2: L9o7KQxJPRJhzeZqHSfbm_7F0-s.roa (hash: nN3JagCFrpyGEb5Wr7V9qHCmIBDIlF1ypYg9dy1tB3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:d7:21:f4:cf:a2:85:3f:fd:c3:e8:66:e6:c5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Validity
Not Before: May 9 00:01:28 2025 GMT
Not After : May 10 00:01:28 2025 GMT
Subject: CN=c178411dfc683d2c8046196d22a3f6ee6069a034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:3d:28:38:e4:45:5c:b0:ae:11:c5:ba:c5:
21:53:99:6e:6f:8e:b0:3a:ea:7c:c9:e1:de:e8:f6:
a6:af:26:47:d9:dc:57:d6:c8:78:f6:52:57:c6:22:
9e:7f:05:ee:44:6a:fd:48:43:e9:3f:db:72:d7:51:
22:fc:d3:d6:3a:a0:78:b1:01:13:be:bd:d7:04:47:
6c:61:74:da:42:ab:0d:5e:12:72:8c:3a:c5:4f:35:
73:a1:48:1b:e4:8b:a8:45:99:fc:e6:04:99:77:27:
7b:26:54:de:42:11:e7:d1:6d:8a:ed:1c:10:93:83:
54:9d:a8:10:26:24:09:d2:48:c3:80:f3:51:84:2e:
08:96:66:57:37:60:3f:44:ae:e0:c1:ee:ac:21:03:
bf:18:a2:50:a9:54:0a:33:4d:a6:5e:52:86:f8:17:
a8:bf:a5:b1:ef:d9:cb:3c:9a:a8:5d:be:ed:9f:40:
73:bf:bd:56:d9:d8:a6:32:84:ff:a1:01:af:b6:08:
2d:64:18:aa:56:eb:c1:e8:a5:85:e0:7c:a3:85:56:
e2:60:67:6b:1e:06:72:27:ad:6e:7c:e1:5d:6e:c0:
a4:62:5a:95:94:ed:9c:30:11:77:e9:9b:ca:09:6d:
66:72:35:d4:31:52:02:33:58:ae:ac:f2:04:f4:ca:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:78:41:1D:FC:68:3D:2C:80:46:19:6D:22:A3:F6:EE:60:69:A0:34
X509v3 Authority Key Identifier:
keyid:DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cf:b5:11:ca:4e:a4:3a:e2:96:ef:a3:3c:9d:50:c5:37:ba:
ac:b1:76:e1:76:76:35:1a:4d:56:37:25:c5:e8:7a:f4:5c:84:
4a:e7:ff:70:8d:e0:60:ac:02:fa:3d:90:7e:0f:8c:71:d7:ce:
1c:7c:57:62:3a:b2:38:a5:42:ff:05:72:3c:ca:82:8d:10:c1:
e2:62:36:bb:26:09:55:77:dd:90:66:34:2b:d0:a5:0b:f7:8d:
e7:f0:1c:58:f2:1d:c9:ba:1b:b3:f3:71:db:3e:aa:af:b3:50:
eb:5f:ba:23:0e:a9:50:ab:ef:5d:94:ea:f5:8e:f4:3b:e9:34:
20:ee:ee:92:f5:9f:f6:b2:84:20:35:1f:9c:5b:ea:75:e0:83:
32:4b:a9:85:cb:5a:4f:bf:25:ee:bd:92:64:49:12:ef:d7:17:
2a:84:57:26:06:8b:e4:a8:36:69:8f:27:70:0a:3e:d7:60:67:
17:40:cd:b1:2b:78:15:9a:fc:5d:f3:08:41:ff:9b:54:a4:d6:
27:33:2f:3d:17:68:b5:90:96:cd:d0:38:ea:8a:f6:03:bb:59:
bc:ef:61:e6:eb:ac:de:a4:cb:4f:07:ad:3c:fd:f3:d8:2e:6e:
77:cd:6e:89:ec:6c:20:53:9c:bb:69:f4:55:b3:c0:58:ae:4d:
d2:1c:e2:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZayWNch9M+ihT/9w+hm5sU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGY5ZWEwNDYzNmQ3ZTcxNDE4YjkzMDkxY2NkMGU1NzAx
NWJlNDkwHhcNMjUwNTA5MDAwMTI4WhcNMjUwNTEwMDAwMTI4WjAzMTEwLwYDVQQD
EyhjMTc4NDExZGZjNjgzZDJjODA0NjE5NmQyMmEzZjZlZTYwNjlhMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyM9KDjkRVywrhHFusUhU5lub46w
Oup8yeHe6PamryZH2dxX1sh49lJXxiKefwXuRGr9SEPpP9ty11Ei/NPWOqB4sQET
vr3XBEdsYXTaQqsNXhJyjDrFTzVzoUgb5IuoRZn85gSZdyd7JlTeQhHn0W2K7RwQ
k4NUnagQJiQJ0kjDgPNRhC4IlmZXN2A/RK7gwe6sIQO/GKJQqVQKM02mXlKG+Beo
v6Wx79nLPJqoXb7tn0Bzv71W2dimMoT/oQGvtggtZBiqVuvB6KWF4HyjhVbiYGdr
HgZyJ61ufOFdbsCkYlqVlO2cMBF36ZvKCW1mcjXUMVICM1iurPIE9MryIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMF4QR38aD0sgEYZbSKj9u5gaaA0MB8GA1UdIwQY
MBaAFNwPnqBGNtfnFBi5MJHM0OVwFb5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wMWJmOTYtODFiNi00ZTRjLWFiODAt
ZTBiYzQxMDc4NDI2LzEvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8wMWJmOTYtODFiNi00ZTRjLWFiODAtZTBiYzQxMDc4NDI2
LzEvM0EtZW9FWTIxLWNVR0xrd2tjelE1WEFWdmtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8+1EcpO
pDrilu+jPJ1QxTe6rLF24XZ2NRpNVjclxeh69FyESuf/cI3gYKwC+j2Qfg+McdfO
HHxXYjqyOKVC/wVyPMqCjRDB4mI2uyYJVXfdkGY0K9ClC/eN5/AcWPIdybobs/Nx
2z6qr7NQ61+6Iw6pUKvvXZTq9Y70O+k0IO7ukvWf9rKEIDUfnFvqdeCDMkuphcta
T78l7r2SZEkS79cXKoRXJgaL5Kg2aY8ncAo+12BnF0DNsSt4FZr8XfMIQf+bVKTW
JzMvPRdotZCWzdA46or2A7tZvO9h5uus3qTLTwetPP3z2C5ud81uiexsIFOcu2n0
VbPAWK5N0hzigA==
-----END CERTIFICATE-----
Generated at Fri May 9 06:12:40 2025 by rpki-client