Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
File: t3CHf-B99JohaBSt5wHQh7EWk7Q.mft (raw, json)
Hash identifier: u4kej0jYPmwqBMQDILeJoK1u6Z3tc/kv/IjYvO/Toqg=
Subject key identifier: E2:06:B9:28:F0:DD:D2:9B:DE:8E:3A:FB:1D:62:21:CA:BB:F7:FF:EA
Authority key identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
Certificate issuer: /CN=b770877fe07df49a216814ade701d087b11693b4
Certificate serial: 0196B85A510B691CB6BAA23B7986D9B61773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
Manifest number: 0376
Signing time: Sat 10 May 2025 04:00:48 +0000
Manifest this update: Sat 10 May 2025 04:00:48 +0000
Manifest next update: Sun 11 May 2025 04:00:48 +0000
Files and hashes: 1: t3CHf-B99JohaBSt5wHQh7EWk7Q.crl (hash: OtFBxQo2b9yo7D4z4YTU9gRlv0lsX9Kc2+1GHcbil2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:51:0b:69:1c:b6:ba:a2:3b:79:86:d9:b6:17:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b770877fe07df49a216814ade701d087b11693b4
Validity
Not Before: May 10 04:00:48 2025 GMT
Not After : May 11 04:00:48 2025 GMT
Subject: CN=e206b928f0ddd29bde8e3afb1d6221cabbf7ffea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:25:68:a2:7d:0c:89:3e:f2:2a:69:9f:bc:
4c:4d:25:b6:c4:2a:9d:0b:47:74:0d:cd:07:57:b8:
be:db:dd:8a:b9:7b:6b:cd:cf:86:2b:da:b9:a3:2d:
02:8d:42:01:5f:56:79:c9:2e:43:f7:c4:b6:b5:42:
9e:a7:14:91:be:1a:f8:f9:a0:75:30:e6:ff:21:7b:
90:fa:72:5d:02:fc:ce:b7:23:b0:69:9d:fd:3a:88:
be:be:c1:d4:c6:1a:eb:df:60:28:54:a6:09:d0:27:
88:6c:84:e7:0c:a0:53:64:67:eb:55:b4:73:4f:e2:
3d:7a:e3:16:55:36:60:05:17:c6:ff:37:2e:37:0d:
a6:0e:a1:2e:89:b7:ac:3e:79:1f:f1:c8:79:d3:80:
ee:c2:95:25:1a:f7:d8:16:d5:ac:35:de:a2:de:91:
9a:9b:fa:f9:5a:6c:c8:12:82:f5:b2:1e:9a:e5:ad:
76:f2:e2:c7:a8:88:3d:45:d8:15:26:da:26:6d:82:
4d:fc:07:fe:28:cb:e2:cc:d8:75:55:e8:6b:15:24:
bc:db:64:11:a8:61:c3:a8:61:f9:d9:89:33:81:cd:
b3:f4:c4:11:5d:a2:af:94:a8:32:7c:e7:10:bf:20:
a8:f2:ad:f9:63:eb:4a:55:64:ad:2e:89:75:f9:30:
df:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:06:B9:28:F0:DD:D2:9B:DE:8E:3A:FB:1D:62:21:CA:BB:F7:FF:EA
X509v3 Authority Key Identifier:
keyid:B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5c:66:4a:c1:74:b3:fc:b6:1e:af:16:be:45:b2:5c:9a:bf:
ea:80:00:ce:90:e1:ef:0c:93:98:f1:6c:53:9b:1b:6c:66:85:
8e:e0:43:79:9d:97:7e:b8:1d:7c:60:93:0e:d8:78:c3:77:40:
5d:6b:24:1e:b0:a2:b1:be:8e:18:da:4e:62:45:39:78:12:ae:
b7:37:35:21:70:ff:bf:c5:9e:07:a7:0d:fc:3e:fb:4f:63:49:
0a:77:84:c8:af:63:fa:1f:51:7d:36:c5:4a:7c:1e:b9:0d:f0:
4d:a1:29:72:9a:a6:0f:88:73:b0:78:90:b4:c5:21:00:eb:74:
75:f0:25:7e:84:25:cb:1f:45:4d:6a:96:4a:2c:dc:8a:83:7b:
0b:45:e1:a8:53:d8:ee:ee:e5:19:bd:06:98:f6:bc:24:da:3a:
2f:a7:41:35:b0:8a:bc:b2:9e:d5:ab:83:2f:59:03:ee:be:91:
32:6e:06:c8:47:91:c3:9e:00:b1:83:d8:e2:ff:1b:5e:3c:f7:
54:35:01:bc:22:b3:10:84:f2:de:73:c5:c1:31:ae:27:08:a3:
0e:a7:a1:f6:34:46:49:fe:93:5f:e3:a1:b2:57:59:b8:19:3f:
9d:55:49:69:e4:c7:03:be:17:a5:16:d3:3f:1e:ed:d8:18:db:
38:49:94:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4WlELaRy2uqI7eYbZthdzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NzA4NzdmZTA3ZGY0OWEyMTY4MTRhZGU3MDFkMDg3YjEx
NjkzYjQwHhcNMjUwNTEwMDQwMDQ4WhcNMjUwNTExMDQwMDQ4WjAzMTEwLwYDVQQD
EyhlMjA2YjkyOGYwZGRkMjliZGU4ZTNhZmIxZDYyMjFjYWJiZjdmZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4olaKJ9DIk+8ippn7xMTSW2xCqd
C0d0Dc0HV7i+292KuXtrzc+GK9q5oy0CjUIBX1Z5yS5D98S2tUKepxSRvhr4+aB1
MOb/IXuQ+nJdAvzOtyOwaZ39Ooi+vsHUxhrr32AoVKYJ0CeIbITnDKBTZGfrVbRz
T+I9euMWVTZgBRfG/zcuNw2mDqEuibesPnkf8ch504DuwpUlGvfYFtWsNd6i3pGa
m/r5WmzIEoL1sh6a5a128uLHqIg9RdgVJtombYJN/Af+KMvizNh1VehrFSS822QR
qGHDqGH52Ykzgc2z9MQRXaKvlKgyfOcQvyCo8q35Y+tKVWStLol1+TDfzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIGuSjw3dKb3o46+x1iIcq79//qMB8GA1UdIwQY
MBaAFLdwh3/gffSaIWgUrecB0IexFpO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNDSGYtQjk5Sm9oYUJTdDV3SFFoN0VXazdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81Y2MxMjctZTZlYy00ZGExLTg0Njkt
YzRhMGU5NzA2NTk3LzEvdDNDSGYtQjk5Sm9oYUJTdDV3SFFoN0VXazdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS81Y2MxMjctZTZlYy00ZGExLTg0NjktYzRhMGU5NzA2NTk3
LzEvdDNDSGYtQjk5Sm9oYUJTdDV3SFFoN0VXazdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVxmSsF0
s/y2Hq8WvkWyXJq/6oAAzpDh7wyTmPFsU5sbbGaFjuBDeZ2XfrgdfGCTDth4w3dA
XWskHrCisb6OGNpOYkU5eBKutzc1IXD/v8WeB6cN/D77T2NJCneEyK9j+h9RfTbF
SnweuQ3wTaEpcpqmD4hzsHiQtMUhAOt0dfAlfoQlyx9FTWqWSizcioN7C0XhqFPY
7u7lGb0GmPa8JNo6L6dBNbCKvLKe1auDL1kD7r6RMm4GyEeRw54AsYPY4v8bXjz3
VDUBvCKzEITy3nPFwTGuJwijDqeh9jRGSf6TX+OhsldZuBk/nVVJaeTHA74XpRbT
Px7t2BjbOEmUvg==
-----END CERTIFICATE-----
Generated at Sat May 10 10:41:27 2025 by rpki-client