Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
File: cs3rVmQuM1iXcef9pxu3HgF_nZY.mft (raw, json)
Hash identifier: t6tBvXTsOqaJJt7mOGLGovQEeZD5HbMX9+hzRjg5VCw=
Subject key identifier: DC:EA:B8:E3:52:A4:F9:3B:22:5D:A6:D7:78:63:25:6B:36:E1:94:ED
Authority key identifier: 72:CD:EB:56:64:2E:33:58:97:71:E7:FD:A7:1B:B7:1E:01:7F:9D:96
Certificate issuer: /CN=72cdeb56642e33589771e7fda71bb71e017f9d96
Certificate serial: 0196A19B7DB9921CD992B25286391862A46C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
Manifest number: 0A43
Signing time: Mon 05 May 2025 18:00:44 +0000
Manifest this update: Mon 05 May 2025 18:00:44 +0000
Manifest next update: Tue 06 May 2025 18:00:44 +0000
Files and hashes: 1: cs3rVmQuM1iXcef9pxu3HgF_nZY.crl (hash: nzg29aDFMm2vpBfar35ObvMnlncyLYdFH7DjxQ/Z75c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:7d:b9:92:1c:d9:92:b2:52:86:39:18:62:a4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cdeb56642e33589771e7fda71bb71e017f9d96
Validity
Not Before: May 5 18:00:44 2025 GMT
Not After : May 6 18:00:44 2025 GMT
Subject: CN=dceab8e352a4f93b225da6d77863256b36e194ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:f6:a4:f2:a3:a2:b6:4f:a6:bc:70:63:90:
a4:91:77:28:07:9f:6c:17:86:4e:a7:ba:ef:7f:ff:
e8:05:e4:a1:0a:b3:16:23:c3:c6:86:01:b4:74:3c:
c5:e9:20:a5:f5:45:80:d7:dc:8f:29:b4:f1:19:ac:
27:c1:01:d6:8b:39:00:5f:5e:af:83:9d:52:91:fa:
64:88:60:98:a3:bb:80:37:5e:dd:b4:20:58:e1:38:
fe:64:6d:6d:aa:0c:cb:42:a7:2c:4f:ea:d8:1d:39:
82:9d:e4:5e:73:2b:f8:7b:51:e1:b5:4d:e6:0d:72:
4e:74:b3:57:02:eb:45:17:05:e1:55:10:d0:95:41:
e5:da:56:0b:26:8f:67:b8:2c:23:fb:fe:1d:03:97:
48:dc:8e:82:9a:96:16:f3:d4:64:7d:fd:fa:03:ea:
de:4d:de:cd:31:a1:82:e0:d3:99:4b:88:47:b0:e0:
75:da:38:da:c1:c1:17:ee:94:d5:71:ae:4d:e2:ed:
22:e6:a2:24:e4:e8:80:f3:bc:d5:63:7b:1a:db:f3:
6d:81:bf:84:98:96:b0:9e:c6:f5:4a:29:70:95:39:
e1:8a:bf:ec:d6:ac:3a:d5:3c:69:05:5b:9e:78:55:
c9:10:c1:08:a1:d6:a0:06:2a:15:77:af:af:04:c6:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EA:B8:E3:52:A4:F9:3B:22:5D:A6:D7:78:63:25:6B:36:E1:94:ED
X509v3 Authority Key Identifier:
keyid:72:CD:EB:56:64:2E:33:58:97:71:E7:FD:A7:1B:B7:1E:01:7F:9D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c0:9e:d9:b7:8c:05:81:50:d7:31:8f:d9:33:8d:14:7f:9b:
c5:54:6e:cc:5f:e0:08:9e:76:95:65:fe:5e:c0:48:12:8f:dc:
cb:da:01:00:92:fd:1f:49:e4:82:49:f6:c7:52:78:9d:d4:bb:
13:72:95:00:9e:5b:86:18:20:fd:a8:55:f9:f0:87:78:2d:af:
fe:10:d1:23:e7:85:c3:de:82:3b:03:2e:91:c8:60:04:68:ba:
b5:6d:d9:0a:1d:11:4d:bd:21:33:51:66:c9:81:e7:bf:73:c5:
de:24:43:bd:02:b4:f6:70:8a:05:5f:f5:e2:e3:7f:1c:90:8b:
fd:d9:37:42:23:1b:8d:29:87:cb:3d:80:3f:82:25:91:0f:ad:
36:96:22:a0:17:83:cb:37:57:c5:d2:bf:0a:1e:11:d0:9a:e0:
36:c6:6a:39:3c:98:a2:6d:0c:92:b1:ca:ea:d0:0a:a9:92:a1:
2a:b8:66:a3:17:8f:6b:bc:2a:6a:9f:0d:ad:c9:9c:e3:fa:1b:
73:02:c9:7f:e2:fe:e5:4a:0f:35:8b:da:23:65:e2:22:5c:83:
53:1a:ae:5f:3d:41:d4:2b:5f:09:25:f7:1e:64:d3:b1:02:ee:
c4:b4:6b:7b:e5:95:0d:2e:46:05:1e:ed:49:3b:74:47:1b:16:
c4:33:ea:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahm325khzZkrJShjkYYqRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyY2RlYjU2NjQyZTMzNTg5NzcxZTdmZGE3MWJiNzFlMDE3
ZjlkOTYwHhcNMjUwNTA1MTgwMDQ0WhcNMjUwNTA2MTgwMDQ0WjAzMTEwLwYDVQQD
EyhkY2VhYjhlMzUyYTRmOTNiMjI1ZGE2ZDc3ODYzMjU2YjM2ZTE5NGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPv2pPKjorZPprxwY5CkkXcoB59s
F4ZOp7rvf//oBeShCrMWI8PGhgG0dDzF6SCl9UWA19yPKbTxGawnwQHWizkAX16v
g51SkfpkiGCYo7uAN17dtCBY4Tj+ZG1tqgzLQqcsT+rYHTmCneRecyv4e1HhtU3m
DXJOdLNXAutFFwXhVRDQlUHl2lYLJo9nuCwj+/4dA5dI3I6CmpYW89Rkff36A+re
Td7NMaGC4NOZS4hHsOB12jjawcEX7pTVca5N4u0i5qIk5OiA87zVY3sa2/Ntgb+E
mJawnsb1SilwlTnhir/s1qw61TxpBVueeFXJEMEIodagBioVd6+vBMZeYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzquONSpPk7Il2m13hjJWs24ZTtMB8GA1UdIwQY
MBaAFHLN61ZkLjNYl3Hn/acbtx4Bf52WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3MzclZtUXVNMWlYY2VmOXB4dTNIZ0ZfblpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8zYzg0NDgtYWY0YS00YjQ4LWE3MmEt
ZTgyNzc0YTE2YTU3LzEvY3MzclZtUXVNMWlYY2VmOXB4dTNIZ0ZfblpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8zYzg0NDgtYWY0YS00YjQ4LWE3MmEtZTgyNzc0YTE2YTU3
LzEvY3MzclZtUXVNMWlYY2VmOXB4dTNIZ0ZfblpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMCe2beM
BYFQ1zGP2TONFH+bxVRuzF/gCJ52lWX+XsBIEo/cy9oBAJL9H0nkgkn2x1J4ndS7
E3KVAJ5bhhgg/ahV+fCHeC2v/hDRI+eFw96COwMukchgBGi6tW3ZCh0RTb0hM1Fm
yYHnv3PF3iRDvQK09nCKBV/14uN/HJCL/dk3QiMbjSmHyz2AP4IlkQ+tNpYioBeD
yzdXxdK/Ch4R0JrgNsZqOTyYom0MkrHK6tAKqZKhKrhmoxePa7wqap8Nrcmc4/ob
cwLJf+L+5UoPNYvaI2XiIlyDUxquXz1B1CtfCSX3HmTTsQLuxLRre+WVDS5GBR7t
STt0RxsWxDPqOA==
-----END CERTIFICATE-----
Generated at Mon May 5 21:23:32 2025 by rpki-client