Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
File: 3KLzDk5paSsbT-zrrpH9VgS97JM.mft (raw, json)
Hash identifier: lWIpkef8/q6MRhFZTUumtT+fTqAqNkcuaqIRgdz/duI=
Subject key identifier: 56:A4:FC:49:0A:22:96:8B:4D:12:D3:98:19:32:75:65:6E:E0:A2:46
Authority key identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
Certificate issuer: /CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Certificate serial: 0196C15D728741537600C689CE5A09F4B7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
Manifest number: 04EF
Signing time: Sun 11 May 2025 22:00:48 +0000
Manifest this update: Sun 11 May 2025 22:00:48 +0000
Manifest next update: Mon 12 May 2025 22:00:48 +0000
Files and hashes: 1: 3KLzDk5paSsbT-zrrpH9VgS97JM.crl (hash: /vyJeMj/aPvCTxilNHNJbDeHSVSIcH4Ks4JERNAE96c=)
2: AJoKV4qloK-gv346yQRe9jE_1Lc.roa (hash: cy9XY0oo3u/4Yi8UZQJSoFS5/DHP0ILoCjdTHcKoQDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:72:87:41:53:76:00:c6:89:ce:5a:09:f4:b7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Validity
Not Before: May 11 22:00:48 2025 GMT
Not After : May 12 22:00:48 2025 GMT
Subject: CN=56a4fc490a22968b4d12d398193275656ee0a246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:21:44:eb:ab:84:bf:75:58:e9:7b:86:2f:
ed:72:80:c3:8b:c5:69:76:82:6b:31:e2:e4:a9:e0:
02:76:98:fe:72:d0:98:02:02:57:13:ab:89:1f:6a:
da:c3:3d:46:22:15:b3:bb:54:dc:c8:51:e3:51:fb:
ef:1d:8c:d6:5a:da:aa:f2:c8:95:c6:12:2f:3c:69:
9f:cc:91:e1:e1:ea:10:37:4c:b3:db:05:85:3f:d7:
d0:92:98:ee:90:b6:a8:ab:c6:cc:dc:dc:38:a1:1c:
75:0d:60:f1:29:db:1e:19:80:ec:54:cc:a4:51:8d:
10:92:0d:00:7b:44:2f:b2:7f:89:58:2a:60:7f:18:
6f:28:f1:c6:ce:5e:ec:12:59:92:05:eb:f4:68:f4:
58:79:9d:6d:73:c6:d8:3d:a5:a0:86:3c:b6:94:c6:
6c:e7:8b:26:27:6f:e8:26:1d:db:03:d4:41:2c:17:
6e:80:5e:c4:bf:28:82:3e:d5:40:ed:9c:92:06:5c:
de:c2:3c:1d:44:7b:8a:66:89:84:8b:04:6c:bb:15:
d6:70:78:2b:e3:4f:78:a1:c7:1e:60:0a:4e:5a:78:
7b:ab:cd:61:8d:b4:09:52:16:37:f4:be:48:8d:58:
cb:46:0f:10:4b:72:28:d7:c2:ff:f6:97:25:6c:55:
67:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A4:FC:49:0A:22:96:8B:4D:12:D3:98:19:32:75:65:6E:E0:A2:46
X509v3 Authority Key Identifier:
keyid:DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c3:41:13:83:41:31:b8:5c:86:65:24:83:db:b5:8d:b6:43:
57:86:db:65:e4:71:49:41:33:e2:c8:f4:4b:4e:6d:98:23:d3:
8b:63:2e:7f:ab:a9:d4:70:8c:81:09:01:a6:2e:cb:01:07:b7:
47:2e:ee:d1:0b:e0:c9:be:b6:e3:43:2b:d6:f5:21:40:31:19:
0d:da:b7:cf:8d:19:4f:bb:0e:40:f9:5d:15:dc:98:32:f9:26:
c0:2c:bb:b2:21:19:12:16:ec:4e:ad:ac:0d:19:25:ae:48:98:
36:b2:bf:f3:6d:d2:44:29:0c:7c:0c:51:e4:77:e8:83:2f:d4:
64:2b:7c:c1:e0:6d:c1:f4:67:95:05:77:77:f7:12:10:0d:d9:
fa:ab:2e:2d:f1:b1:0d:26:74:23:3e:80:15:6d:6c:8f:e3:3e:
2b:c8:31:c1:92:9f:ba:54:e2:fd:39:1e:f4:e8:27:9b:2e:d8:
37:45:d6:5d:0f:a4:9f:ce:67:5d:38:85:9e:67:68:24:6a:cd:
e3:3d:17:0c:72:c9:21:30:e3:74:ce:ec:ec:91:65:ce:37:09:
c0:a6:62:57:62:d6:f2:8a:ec:68:d2:f9:ee:2c:c2:62:f3:db:
61:0e:5e:23:5c:68:b3:5b:15:b8:02:d1:82:09:7c:92:80:51:
93:e3:39:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBXXKHQVN2AMaJzloJ9LfMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTJmMzBlNGU2OTY5MmIxYjRmZWNlYmFlOTFmZDU2MDRi
ZGVjOTMwHhcNMjUwNTExMjIwMDQ4WhcNMjUwNTEyMjIwMDQ4WjAzMTEwLwYDVQQD
Eyg1NmE0ZmM0OTBhMjI5NjhiNGQxMmQzOTgxOTMyNzU2NTZlZTBhMjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrQhROurhL91WOl7hi/tcoDDi8Vp
doJrMeLkqeACdpj+ctCYAgJXE6uJH2rawz1GIhWzu1TcyFHjUfvvHYzWWtqq8siV
xhIvPGmfzJHh4eoQN0yz2wWFP9fQkpjukLaoq8bM3Nw4oRx1DWDxKdseGYDsVMyk
UY0Qkg0Ae0Qvsn+JWCpgfxhvKPHGzl7sElmSBev0aPRYeZ1tc8bYPaWghjy2lMZs
54smJ2/oJh3bA9RBLBdugF7EvyiCPtVA7ZySBlzewjwdRHuKZomEiwRsuxXWcHgr
4094occeYApOWnh7q81hjbQJUhY39L5IjVjLRg8QS3Io18L/9pclbFVn8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFak/EkKIpaLTRLTmBkydWVu4KJGMB8GA1UdIwQY
MBaAFNyi8w5OaWkrG0/s666R/VYEveyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tMekRrNXBhU3NiVC16cnJwSDlWZ1M5N0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8wMzY1NDktNDVkMC00NTY1LTgyOGYt
ZWIzZTc4NWQ5MDk3LzEvM0tMekRrNXBhU3NiVC16cnJwSDlWZ1M5N0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8wMzY1NDktNDVkMC00NTY1LTgyOGYtZWIzZTc4NWQ5MDk3
LzEvM0tMekRrNXBhU3NiVC16cnJwSDlWZ1M5N0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcNBE4NB
MbhchmUkg9u1jbZDV4bbZeRxSUEz4sj0S05tmCPTi2Muf6up1HCMgQkBpi7LAQe3
Ry7u0Qvgyb6240Mr1vUhQDEZDdq3z40ZT7sOQPldFdyYMvkmwCy7siEZEhbsTq2s
DRklrkiYNrK/823SRCkMfAxR5Hfogy/UZCt8weBtwfRnlQV3d/cSEA3Z+qsuLfGx
DSZ0Iz6AFW1sj+M+K8gxwZKfulTi/Tke9Ognmy7YN0XWXQ+kn85nXTiFnmdoJGrN
4z0XDHLJITDjdM7s7JFlzjcJwKZiV2LW8orsaNL57izCYvPbYQ5eI1xos1sVuALR
ggl8koBRk+M5HA==
-----END CERTIFICATE-----
Generated at Mon May 12 04:38:18 2025 by rpki-client