Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
File: 3rwtwyLztJZucDtdjIi3FvDZsOk.mft (raw, json)
Hash identifier: SC5Iu8oTssBBk4/jSA1Tjwr9OvC/76ndFK/Rb3nm7lc=
Subject key identifier: 16:79:86:BA:67:2E:D5:10:22:1B:EE:61:29:3B:FA:5C:7D:1E:66:B4
Authority key identifier: DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
Certificate issuer: /CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Certificate serial: 0196DC6676D73CFC5E18745A80AB052CA7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
Manifest number: 1302
Signing time: Sat 17 May 2025 04:00:24 +0000
Manifest this update: Sat 17 May 2025 04:00:24 +0000
Manifest next update: Sun 18 May 2025 04:00:24 +0000
Files and hashes: 1: 3rwtwyLztJZucDtdjIi3FvDZsOk.crl (hash: EdqQEYO4yh72lNW8HRx/+WJv6VQJwrqFiTFGvmhRC7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:66:76:d7:3c:fc:5e:18:74:5a:80:ab:05:2c:a7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debc2dc322f3b4966e703b5d8c88b716f0d9b0e9
Validity
Not Before: May 17 04:00:24 2025 GMT
Not After : May 18 04:00:24 2025 GMT
Subject: CN=167986ba672ed510221bee61293bfa5c7d1e66b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:dc:67:60:db:5b:a6:b3:c2:93:3d:7d:6c:
50:6f:cc:65:a5:75:8b:fb:e4:d9:55:4d:03:40:03:
d6:ab:f0:71:36:f0:e0:b2:8e:75:8e:e6:8f:6e:f2:
0d:5a:5f:3c:2f:48:0f:79:9f:3b:6d:81:a4:14:bd:
3c:f9:59:da:59:2c:49:91:84:fc:28:8f:6d:8a:b2:
1f:ca:9a:23:7f:f0:fa:93:e5:cb:c9:dd:70:9a:a1:
d7:b3:bf:d2:d1:35:df:34:ce:2d:2b:7e:76:37:56:
1c:ee:c8:cb:a4:b0:2a:2a:f8:6a:27:c7:55:04:15:
60:ec:8c:2f:68:40:ee:2c:f2:d5:04:f4:32:82:6f:
8a:cb:ca:c1:cd:20:b6:e9:18:02:71:89:2b:ed:dd:
3f:76:81:d4:42:49:0c:a9:57:47:33:c1:fb:10:55:
4f:e4:27:5b:17:17:64:47:42:0b:bf:82:d2:37:52:
1b:48:e6:9f:32:1c:69:5f:21:82:69:b4:fa:00:a5:
db:32:8c:84:b5:3e:19:48:87:9c:c3:ee:67:91:9e:
f6:be:8b:c3:9d:9c:07:9f:b9:d1:ee:88:fd:0b:e9:
01:7f:77:b3:8e:f8:ea:ba:2b:0c:b1:0a:b9:5c:7c:
b2:d2:8d:75:b6:c3:24:09:09:30:9d:46:99:08:4c:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:79:86:BA:67:2E:D5:10:22:1B:EE:61:29:3B:FA:5C:7D:1E:66:B4
X509v3 Authority Key Identifier:
keyid:DE:BC:2D:C3:22:F3:B4:96:6E:70:3B:5D:8C:88:B7:16:F0:D9:B0:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rwtwyLztJZucDtdjIi3FvDZsOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/800dec-b66c-4e1a-a6cc-e88e1a668be4/1/3rwtwyLztJZucDtdjIi3FvDZsOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b8:43:ff:13:e4:3d:d6:3c:78:3d:7b:91:42:2c:b1:a8:c6:
ae:29:93:e9:03:d7:e5:71:2b:73:f0:d2:01:42:aa:6a:e3:aa:
31:73:10:73:07:d0:73:88:11:06:54:a1:24:ec:a1:cc:0b:43:
8c:f0:9e:cf:49:50:31:79:38:79:fa:fe:be:56:7d:c2:af:da:
7b:3f:8c:4a:0c:e0:87:f3:da:bb:f4:90:1c:55:f6:e1:33:3a:
89:06:77:18:9a:d4:86:bb:f2:e2:6b:48:e2:db:b2:fb:2d:d1:
f3:c1:5b:69:5e:71:4b:81:ed:79:d1:d9:10:eb:60:57:d0:2a:
0c:ba:c8:65:19:54:df:ca:1b:db:ca:af:86:3d:78:68:58:1d:
00:13:4c:21:f4:a8:6c:2e:1c:e7:cb:66:11:78:6e:06:24:be:
16:5d:e3:47:38:ae:50:dd:48:0f:44:6c:bc:23:f9:a4:aa:e3:
06:ea:5b:23:8f:d3:28:62:c1:5f:5b:e6:92:71:9b:79:79:0d:
2c:46:f5:99:47:77:0b:56:bf:8b:30:a5:87:77:4a:99:72:c7:
c2:b2:9a:2f:46:05:e8:f3:01:6b:e0:8e:63:4e:d8:30:a4:8b:
44:bd:e3:6c:6c:56:ea:89:45:62:e1:2d:a3:b9:dd:d1:35:74:
75:3b:a2:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbcZnbXPPxeGHRagKsFLKekMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYmMyZGMzMjJmM2I0OTY2ZTcwM2I1ZDhjODhiNzE2ZjBk
OWIwZTkwHhcNMjUwNTE3MDQwMDI0WhcNMjUwNTE4MDQwMDI0WjAzMTEwLwYDVQQD
EygxNjc5ODZiYTY3MmVkNTEwMjIxYmVlNjEyOTNiZmE1YzdkMWU2NmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBDcZ2DbW6azwpM9fWxQb8xlpXWL
++TZVU0DQAPWq/BxNvDgso51juaPbvINWl88L0gPeZ87bYGkFL08+VnaWSxJkYT8
KI9tirIfypojf/D6k+XLyd1wmqHXs7/S0TXfNM4tK352N1Yc7sjLpLAqKvhqJ8dV
BBVg7IwvaEDuLPLVBPQygm+Ky8rBzSC26RgCcYkr7d0/doHUQkkMqVdHM8H7EFVP
5CdbFxdkR0ILv4LSN1IbSOafMhxpXyGCabT6AKXbMoyEtT4ZSIecw+5nkZ72vovD
nZwHn7nR7oj9C+kBf3ezjvjquisMsQq5XHyy0o11tsMkCQkwnUaZCEzhrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZ5hrpnLtUQIhvuYSk7+lx9Hma0MB8GA1UdIwQY
MBaAFN68LcMi87SWbnA7XYyItxbw2bDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3J3dHd5THp0Slp1Y0R0ZGpJaTNGdkRac09rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84MDBkZWMtYjY2Yy00ZTFhLWE2Y2Mt
ZTg4ZTFhNjY4YmU0LzEvM3J3dHd5THp0Slp1Y0R0ZGpJaTNGdkRac09rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84MDBkZWMtYjY2Yy00ZTFhLWE2Y2MtZTg4ZTFhNjY4YmU0
LzEvM3J3dHd5THp0Slp1Y0R0ZGpJaTNGdkRac09rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbhD/xPk
PdY8eD17kUIssajGrimT6QPX5XErc/DSAUKqauOqMXMQcwfQc4gRBlShJOyhzAtD
jPCez0lQMXk4efr+vlZ9wq/aez+MSgzgh/Pau/SQHFX24TM6iQZ3GJrUhrvy4mtI
4tuy+y3R88FbaV5xS4HtedHZEOtgV9AqDLrIZRlU38ob28qvhj14aFgdABNMIfSo
bC4c58tmEXhuBiS+Fl3jRziuUN1ID0RsvCP5pKrjBupbI4/TKGLBX1vmknGbeXkN
LEb1mUd3C1a/izClh3dKmXLHwrKaL0YF6PMBa+COY07YMKSLRL3jbGxW6olFYuEt
o7nd0TV0dTuiNQ==
-----END CERTIFICATE-----
Generated at Sat May 17 08:22:32 2025 by rpki-client