Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft
File: r3P0pUFxjY8uAl4GGQalvyfOPJE.mft (raw, json)
Hash identifier: O6ubPjYk9/tAuGXidci50UQ2L1wJ7VQqCjeNwAuv8hA=
Subject key identifier: 58:8E:9D:F2:C3:B2:0B:AF:22:C2:93:DA:51:EC:2A:DD:87:AD:36:01
Authority key identifier: AF:73:F4:A5:41:71:8D:8F:2E:02:5E:06:19:06:A5:BF:27:CE:3C:91
Certificate issuer: /CN=af73f4a541718d8f2e025e061906a5bf27ce3c91
Certificate serial: 0196B36A72DBBD1507A2130749A7766F376C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P0pUFxjY8uAl4GGQalvyfOPJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft
Manifest number: 38
Signing time: Fri 09 May 2025 05:00:19 +0000
Manifest this update: Fri 09 May 2025 05:00:19 +0000
Manifest next update: Sat 10 May 2025 05:00:19 +0000
Files and hashes: 1: r3P0pUFxjY8uAl4GGQalvyfOPJE.crl (hash: 6yaMTmMIGSw1haeGdTIdw0OZub7ywA1O8KrQQ3TrxaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P0pUFxjY8uAl4GGQalvyfOPJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:6a:72:db:bd:15:07:a2:13:07:49:a7:76:6f:37:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73f4a541718d8f2e025e061906a5bf27ce3c91
Validity
Not Before: May 9 05:00:19 2025 GMT
Not After : May 10 05:00:19 2025 GMT
Subject: CN=588e9df2c3b20baf22c293da51ec2add87ad3601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:af:df:49:b9:30:20:1d:3d:0f:70:7f:10:
d7:01:7d:51:02:f3:a7:49:3b:dc:af:f0:7f:42:0b:
40:85:0a:6d:a5:9c:94:76:a8:ec:8e:b6:d3:d3:e6:
1c:7f:aa:b9:01:52:5f:07:13:80:8f:04:05:ac:9e:
13:e6:f1:66:c4:da:dd:aa:69:ec:6e:b0:c1:50:58:
dc:e0:05:47:71:12:90:eb:1b:15:ec:94:2a:8b:e4:
5c:1f:b9:aa:52:fd:7b:26:cf:c0:8b:ed:1e:0b:fa:
d8:45:26:87:18:6c:f3:45:c2:44:20:28:55:89:6d:
49:a0:04:2e:ff:cd:5f:cc:12:f9:08:84:44:2e:e6:
e2:ec:31:ac:05:e8:01:c1:47:bf:d3:af:54:ec:f6:
51:24:c7:8b:46:57:3b:fc:4b:25:25:6e:de:0e:6f:
1f:08:ff:88:23:0d:f4:87:43:14:f5:70:18:ad:38:
3b:64:1d:7c:93:53:80:63:b9:b1:b0:96:7b:4a:11:
41:54:3b:35:fe:c6:6c:69:7e:9c:bf:f7:e4:b6:67:
ca:db:d4:e7:05:d2:ef:f9:d7:56:14:15:ca:d8:0a:
78:da:fa:83:9f:b8:75:00:a2:5f:e4:1c:8a:55:14:
2c:5b:03:bf:42:93:bc:77:43:e4:68:26:48:74:81:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8E:9D:F2:C3:B2:0B:AF:22:C2:93:DA:51:EC:2A:DD:87:AD:36:01
X509v3 Authority Key Identifier:
keyid:AF:73:F4:A5:41:71:8D:8F:2E:02:5E:06:19:06:A5:BF:27:CE:3C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P0pUFxjY8uAl4GGQalvyfOPJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7d3c76-e8b1-4a94-a82d-a10ccab945e7/1/r3P0pUFxjY8uAl4GGQalvyfOPJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9e:66:b8:bb:87:bc:e0:03:f0:3f:8b:c0:13:ad:c8:2c:34:
f5:3c:af:95:96:49:ce:d9:64:02:40:35:d4:39:42:c0:5f:0f:
0e:0a:d0:42:ed:78:ca:38:5c:1b:ec:f7:cf:31:fb:f3:41:51:
e0:6f:c1:fa:25:88:09:a4:63:d3:f1:f3:24:b8:8a:7f:82:2c:
79:53:7c:c0:62:c7:99:ff:60:ce:3d:0b:a1:d8:64:f3:e8:d2:
fe:4c:a3:18:24:f5:1c:2d:69:65:4a:f9:75:81:58:f4:a1:b4:
52:6b:3f:3b:12:98:d6:22:4d:a4:52:77:74:ad:e0:fc:da:16:
3c:23:99:a6:07:24:df:64:52:8f:d2:bb:ef:a6:1f:a9:2d:c3:
06:2c:be:b0:c1:95:b0:27:08:e3:41:16:55:46:55:fd:87:51:
35:1b:20:36:53:1a:fa:31:8e:b5:c4:20:9a:72:b3:ef:36:7f:
98:1a:8f:0f:d6:5a:a6:63:c9:0e:c5:75:00:9f:39:6c:67:ae:
d7:b3:df:8d:6c:af:fa:1e:f8:6f:2d:b8:7d:73:20:36:4c:30:
d2:b6:1b:95:bb:6e:df:ff:d4:d1:89:af:8d:fc:6a:c5:7f:e5:
e8:b8:e7:35:0d:40:43:ed:6f:b8:c1:81:4d:66:31:26:1b:3a:
a0:55:fc:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZazanLbvRUHohMHSad2bzdsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzNmNGE1NDE3MThkOGYyZTAyNWUwNjE5MDZhNWJmMjdj
ZTNjOTEwHhcNMjUwNTA5MDUwMDE5WhcNMjUwNTEwMDUwMDE5WjAzMTEwLwYDVQQD
Eyg1ODhlOWRmMmMzYjIwYmFmMjJjMjkzZGE1MWVjMmFkZDg3YWQzNjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbSv30m5MCAdPQ9wfxDXAX1RAvOn
STvcr/B/QgtAhQptpZyUdqjsjrbT0+Ycf6q5AVJfBxOAjwQFrJ4T5vFmxNrdqmns
brDBUFjc4AVHcRKQ6xsV7JQqi+RcH7mqUv17Js/Ai+0eC/rYRSaHGGzzRcJEIChV
iW1JoAQu/81fzBL5CIRELubi7DGsBegBwUe/069U7PZRJMeLRlc7/EslJW7eDm8f
CP+IIw30h0MU9XAYrTg7ZB18k1OAY7mxsJZ7ShFBVDs1/sZsaX6cv/fktmfK29Tn
BdLv+ddWFBXK2Ap42vqDn7h1AKJf5ByKVRQsWwO/QpO8d0PkaCZIdIETZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiOnfLDsguvIsKT2lHsKt2HrTYBMB8GA1UdIwQY
MBaAFK9z9KVBcY2PLgJeBhkGpb8nzjyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNQMHBVRnhqWTh1QWw0R0dRYWx2eWZPUEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83ZDNjNzYtZThiMS00YTk0LWE4MmQt
YTEwY2NhYjk0NWU3LzEvcjNQMHBVRnhqWTh1QWw0R0dRYWx2eWZPUEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83ZDNjNzYtZThiMS00YTk0LWE4MmQtYTEwY2NhYjk0NWU3
LzEvcjNQMHBVRnhqWTh1QWw0R0dRYWx2eWZPUEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZ5muLuH
vOAD8D+LwBOtyCw09TyvlZZJztlkAkA11DlCwF8PDgrQQu14yjhcG+z3zzH780FR
4G/B+iWICaRj0/HzJLiKf4IseVN8wGLHmf9gzj0Lodhk8+jS/kyjGCT1HC1pZUr5
dYFY9KG0Ums/OxKY1iJNpFJ3dK3g/NoWPCOZpgck32RSj9K776YfqS3DBiy+sMGV
sCcI40EWVUZV/YdRNRsgNlMa+jGOtcQgmnKz7zZ/mBqPD9ZapmPJDsV1AJ85bGeu
17PfjWyv+h74by24fXMgNkww0rYblbtu3//U0YmvjfxqxX/l6LjnNQ1AQ+1vuMGB
TWYxJhs6oFX8uQ==
-----END CERTIFICATE-----
Generated at Fri May 9 06:13:38 2025 by rpki-client