Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
File: f3BJpbLfBi_E4RlYQGU8P1kgySE.mft (raw, json)
Hash identifier: 7dpyc2igySHKHP5QrQXNbs0elkS6YEuc810EVAd6alM=
Subject key identifier: CC:63:06:D7:49:10:B3:B3:92:59:22:9E:CE:02:A0:AD:FD:6B:64:4A
Authority key identifier: 7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
Certificate issuer: /CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Certificate serial: 01969E9A5EED04F8E7CBB52F9E3889AA17DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
Manifest number: 14B2
Signing time: Mon 05 May 2025 04:00:39 +0000
Manifest this update: Mon 05 May 2025 04:00:39 +0000
Manifest next update: Tue 06 May 2025 04:00:39 +0000
Files and hashes: 1: f3BJpbLfBi_E4RlYQGU8P1kgySE.crl (hash: yHMldjqnFhrL+VYgjHSd5MVe6apilBj6pMQDAroNHxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:5e:ed:04:f8:e7:cb:b5:2f:9e:38:89:aa:17:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Validity
Not Before: May 5 04:00:39 2025 GMT
Not After : May 6 04:00:39 2025 GMT
Subject: CN=cc6306d74910b3b39259229ece02a0adfd6b644a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:3f:88:e8:2a:05:2e:96:56:e1:11:19:35:
5c:eb:e0:08:e8:ae:e8:17:41:0a:e2:ea:85:54:83:
01:b0:0b:de:0a:51:9c:5e:3d:ca:cd:25:88:71:90:
00:15:23:b4:5c:fe:ad:6a:68:1f:d2:db:47:3c:9b:
4e:ca:f4:9d:ea:65:76:ca:98:0b:a4:11:9d:7c:a0:
e7:03:bf:04:a5:16:15:d4:50:88:7f:b5:2c:cf:26:
47:c1:30:29:53:31:f7:10:37:9c:f2:fe:f7:c9:00:
69:61:b7:2a:f7:b1:ed:54:45:1a:f0:c9:49:75:a7:
cc:b6:97:38:67:d7:6a:06:1b:cd:5a:62:26:ff:91:
c6:15:d3:cf:80:5e:93:bd:fc:88:1a:14:a9:9b:f3:
f8:d0:8a:ab:60:ec:03:8f:26:14:6b:ae:f4:5e:cf:
78:90:40:45:d9:02:70:b1:60:fe:c4:c1:be:52:f2:
52:fb:5b:c6:b3:87:98:2e:3d:39:c8:0e:87:9e:8b:
07:b1:85:5f:02:10:75:86:ae:d2:e5:26:19:3c:64:
e6:2c:60:51:c7:11:a4:a0:7c:a3:e7:4e:56:28:3a:
7f:33:75:f7:1a:c9:e9:83:3e:f9:bb:76:46:81:ae:
72:0b:ae:9f:72:d9:72:e5:4c:4d:2f:9c:dd:65:55:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:63:06:D7:49:10:B3:B3:92:59:22:9E:CE:02:A0:AD:FD:6B:64:4A
X509v3 Authority Key Identifier:
keyid:7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cb:24:e4:c9:27:3e:b3:5f:f1:e7:28:13:29:23:0a:c8:23:
0c:25:43:ed:73:5c:ae:fe:a3:c6:6c:fa:84:82:fe:2d:5f:b9:
9c:83:0b:14:2c:da:c6:98:80:fa:5e:c4:39:ee:de:5f:60:43:
ad:5f:f7:25:dc:03:de:53:9a:4c:f4:cd:8f:b7:15:48:dd:85:
03:5a:9e:3d:70:91:df:04:9a:4e:98:ea:38:2d:61:80:ba:47:
da:30:b6:7d:e3:cd:0e:f0:25:fb:42:16:97:b5:74:56:43:18:
bc:3e:c3:1d:d6:1b:21:f4:cf:de:44:ea:51:ef:10:c1:1d:e0:
2d:ca:a0:fd:b5:b9:97:56:aa:18:b6:db:44:9d:ff:9e:53:90:
24:88:7d:c8:c3:aa:41:59:3f:05:d9:ce:a3:20:d0:a5:1a:60:
7f:66:bc:6d:01:33:6e:a2:ca:e7:b1:0b:b9:34:0b:a7:2c:23:
48:3b:11:d8:78:bd:78:06:f5:d0:ac:40:58:49:95:dc:fe:96:
8e:e4:6a:a9:41:b3:43:e2:3f:4b:d2:e3:6d:b6:9c:25:6e:03:
9b:8d:77:1b:2a:b7:d3:a9:89:a1:c5:d3:97:ba:c5:cf:b3:7f:
a5:d2:9e:27:43:df:1b:5b:6f:11:76:34:4d:e4:c3:aa:85:a4:
20:2d:8a:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeml7tBPjny7UvnjiJqhfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNzA0OWE1YjJkZjA2MmZjNGUxMTk1ODQwNjUzYzNmNTky
MGM5MjEwHhcNMjUwNTA1MDQwMDM5WhcNMjUwNTA2MDQwMDM5WjAzMTEwLwYDVQQD
EyhjYzYzMDZkNzQ5MTBiM2IzOTI1OTIyOWVjZTAyYTBhZGZkNmI2NDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDg/iOgqBS6WVuERGTVc6+AI6K7o
F0EK4uqFVIMBsAveClGcXj3KzSWIcZAAFSO0XP6tamgf0ttHPJtOyvSd6mV2ypgL
pBGdfKDnA78EpRYV1FCIf7UszyZHwTApUzH3EDec8v73yQBpYbcq97HtVEUa8MlJ
dafMtpc4Z9dqBhvNWmIm/5HGFdPPgF6TvfyIGhSpm/P40IqrYOwDjyYUa670Xs94
kEBF2QJwsWD+xMG+UvJS+1vGs4eYLj05yA6HnosHsYVfAhB1hq7S5SYZPGTmLGBR
xxGkoHyj505WKDp/M3X3Gsnpgz75u3ZGga5yC66fctly5UxNL5zdZVUzmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxjBtdJELOzklkins4CoK39a2RKMB8GA1UdIwQY
MBaAFH9wSaWy3wYvxOEZWEBlPD9ZIMkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjNCSnBiTGZCaV9FNFJsWVFHVThQMWtneVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hM2IwOWMtYTk0YS00NmU1LWE3NzYt
ZjQwZWQ1MDFmMWRmLzEvZjNCSnBiTGZCaV9FNFJsWVFHVThQMWtneVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9hM2IwOWMtYTk0YS00NmU1LWE3NzYtZjQwZWQ1MDFmMWRm
LzEvZjNCSnBiTGZCaV9FNFJsWVFHVThQMWtneVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcsk5Mkn
PrNf8ecoEykjCsgjDCVD7XNcrv6jxmz6hIL+LV+5nIMLFCzaxpiA+l7EOe7eX2BD
rV/3JdwD3lOaTPTNj7cVSN2FA1qePXCR3wSaTpjqOC1hgLpH2jC2fePNDvAl+0IW
l7V0VkMYvD7DHdYbIfTP3kTqUe8QwR3gLcqg/bW5l1aqGLbbRJ3/nlOQJIh9yMOq
QVk/BdnOoyDQpRpgf2a8bQEzbqLK57ELuTQLpywjSDsR2Hi9eAb10KxAWEmV3P6W
juRqqUGzQ+I/S9LjbbacJW4Dm413Gyq306mJocXTl7rFz7N/pdKeJ0PfG1tvEXY0
TeTDqoWkIC2KBg==
-----END CERTIFICATE-----
Generated at Mon May 5 13:52:32 2025 by rpki-client