Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier: qWfVwyAty7X0HcOD7In59FB2ORS4PGyg8EpK692PmuA=
Subject key identifier: FE:BC:D8:9C:8B:10:5A:EF:AB:9E:84:1A:11:C4:28:B7:96:3D:FF:70
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial: 0196B85A76BA4184EA6B50914573E8DA286A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 04:00:58 +0000
Manifest this update: Sat 10 May 2025 04:00:58 +0000
Manifest next update: Sun 11 May 2025 04:00:58 +0000
Files and hashes: 1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: Fn0l+f+3p4UE6jsx0V6pqvgDaHt2xPl9epVf5FqqwMo=)
2: eB3vCKwTA_4LHzl8qmjJhPE1E0I.roa (hash: 4iTyC4OoX2gbX1y0Qqu+BwBX8s/wE3y91+xS9nzRcWU=)
3: p8zRssL-qoCfvvI_dtLWUNgx7c4.roa (hash: zYGisfdidI1eM9pSCirssYszt8G/y6UD9xrE/AACroU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:76:ba:41:84:ea:6b:50:91:45:73:e8:da:28:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Validity
Not Before: May 10 04:00:58 2025 GMT
Not After : May 11 04:00:58 2025 GMT
Subject: CN=febcd89c8b105aefab9e841a11c428b7963dff70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:1e:52:db:be:01:f3:f0:77:d2:93:4a:10:
c8:19:26:55:1d:5c:5f:9a:96:40:b9:f3:32:0c:6e:
53:bd:62:df:89:b9:8f:c0:70:f1:5d:b7:9c:04:9c:
0f:c8:68:c2:b1:c8:36:0f:2a:7c:4f:ec:85:fd:f7:
93:cd:41:93:6c:cd:c2:6a:b9:3d:53:19:71:a2:0e:
ff:83:6f:d8:63:fb:a7:04:ba:00:a2:01:d8:3b:f6:
3d:b4:d6:fb:48:8a:fe:c6:de:a5:5b:ed:b0:fe:5e:
6e:18:7a:8d:07:0d:8a:f2:e3:94:f2:76:b4:96:07:
ba:e9:30:4e:4c:91:d5:db:9d:03:ef:66:37:e8:66:
90:fa:59:70:49:56:5b:97:cd:02:9e:11:ca:00:c4:
35:2d:03:f7:67:89:f6:2d:c0:b0:33:21:dc:4b:85:
21:80:dc:de:2c:be:ac:65:ca:14:73:e4:7e:c3:d1:
83:0c:78:2f:c7:7f:94:35:a2:12:9e:c4:3d:18:4a:
b1:71:6d:6d:00:37:fd:c8:29:c1:4b:3f:28:81:b6:
4a:f7:81:7c:d2:6a:5f:cf:84:3a:00:61:9d:77:fa:
e3:e2:be:96:a4:ae:51:92:2f:99:5b:c6:fd:00:5f:
f4:59:a4:f5:38:8b:0e:32:49:dc:fd:91:f4:78:b2:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BC:D8:9C:8B:10:5A:EF:AB:9E:84:1A:11:C4:28:B7:96:3D:FF:70
X509v3 Authority Key Identifier:
keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f3:ee:9e:38:2b:dd:0b:44:71:0c:62:35:14:f8:5b:bd:2f:
82:f3:e4:d1:d4:b2:ee:dc:7e:86:4b:a0:06:da:e3:ff:08:f3:
1f:7d:0c:72:c0:5f:d4:41:ce:2d:f7:d0:5b:1a:77:37:ad:5a:
ed:24:38:68:51:04:68:3c:c9:65:3d:72:9a:b9:d3:de:92:17:
13:81:9a:ee:97:77:cf:4b:2d:f3:e6:4c:d6:08:79:99:74:ce:
8b:a7:75:6f:8b:4e:b5:83:19:18:66:bc:74:fb:1e:5f:91:7a:
1b:4e:cf:4f:10:c7:4d:bc:08:ea:8b:88:72:29:f8:28:2e:43:
45:f6:18:6b:35:22:57:fe:58:cf:65:a8:c9:c1:97:a4:82:34:
e7:ca:64:03:a4:73:e6:8d:34:12:33:58:be:f8:23:c2:2a:ab:
fe:ae:7a:2f:1d:6b:8a:91:f6:73:6a:66:42:7f:47:e3:50:5a:
38:31:2e:ae:55:a1:02:6b:41:8b:ae:8e:13:a3:d7:80:e3:03:
63:bc:ce:f8:1c:b1:01:87:e6:b9:32:5f:0e:ed:f7:4a:fc:35:
b6:1a:2c:c8:a6:58:5d:70:36:42:30:dc:ef:a6:ff:db:0e:9f:
cc:f9:20:6c:b0:81:f1:d7:f4:9c:ba:4e:62:e5:98:dc:3b:3f:
06:83:bb:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4Wna6QYTqa1CRRXPo2ihqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDMwYWY4Yzc1MzhiOWM1YWY4NTJmMWM0MmExNzVhYWY0
NmY3ZTAwHhcNMjUwNTEwMDQwMDU4WhcNMjUwNTExMDQwMDU4WjAzMTEwLwYDVQQD
EyhmZWJjZDg5YzhiMTA1YWVmYWI5ZTg0MWExMWM0MjhiNzk2M2RmZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotoeUtu+AfPwd9KTShDIGSZVHVxf
mpZAufMyDG5TvWLfibmPwHDxXbecBJwPyGjCscg2Dyp8T+yF/feTzUGTbM3Cark9
Uxlxog7/g2/YY/unBLoAogHYO/Y9tNb7SIr+xt6lW+2w/l5uGHqNBw2K8uOU8na0
lge66TBOTJHV250D72Y36GaQ+llwSVZbl80CnhHKAMQ1LQP3Z4n2LcCwMyHcS4Uh
gNzeLL6sZcoUc+R+w9GDDHgvx3+UNaISnsQ9GEqxcW1tADf9yCnBSz8ogbZK94F8
0mpfz4Q6AGGdd/rj4r6WpK5Rki+ZW8b9AF/0WaT1OIsOMknc/ZH0eLKYuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP682JyLEFrvq56EGhHEKLeWPf9wMB8GA1UdIwQY
MBaAFNwDCvjHU4ucWvhS8cQqF1qvRvfgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84ZjVlNzUtMTMzNC00ZmIwLTlmNmEt
YmRkYzE4YzdhM2YzLzEvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84ZjVlNzUtMTMzNC00ZmIwLTlmNmEtYmRkYzE4YzdhM2Yz
LzEvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPPunjgr
3QtEcQxiNRT4W70vgvPk0dSy7tx+hkugBtrj/wjzH30McsBf1EHOLffQWxp3N61a
7SQ4aFEEaDzJZT1ymrnT3pIXE4Ga7pd3z0st8+ZM1gh5mXTOi6d1b4tOtYMZGGa8
dPseX5F6G07PTxDHTbwI6ouIcin4KC5DRfYYazUiV/5Yz2WoycGXpII058pkA6Rz
5o00EjNYvvgjwiqr/q56Lx1ripH2c2pmQn9H41BaODEurlWhAmtBi66OE6PXgOMD
Y7zO+ByxAYfmuTJfDu33Svw1thosyKZYXXA2QjDc76b/2w6fzPkgbLCB8df0nLpO
YuWY3Ds/BoO7VA==
-----END CERTIFICATE-----
Generated at Sat May 10 13:42:06 2025 by rpki-client