Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
File: 3gr32Dxe6w1DStdTxqX0dUlpizc.mft (raw, json)
Hash identifier: SZnJXWr7Gg3S3JV3TQDtgQWtTNbRzGUGwTKAFo6nvGw=
Subject key identifier: 00:BF:1D:EB:B3:68:1C:6E:22:6E:B4:F7:12:42:DA:2F:B9:7D:87:91
Authority key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
Certificate issuer: /CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Certificate serial: 0196A49C82416C3E97CB7A76A2995D298DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
Manifest number: 14B9
Signing time: Tue 06 May 2025 08:00:42 +0000
Manifest this update: Tue 06 May 2025 08:00:42 +0000
Manifest next update: Wed 07 May 2025 08:00:42 +0000
Files and hashes: 1: 3gr32Dxe6w1DStdTxqX0dUlpizc.crl (hash: Npm311j+mKXPM46QJ1e75YSX6SE42ocfk9X7E+77vXM=)
2: Aqgmt-0kmHhTxI4TNwO6CqQUAvI.roa (hash: OT3qKlUhR0guc2qzeYETLZJZRi9SFdXOekAamRFDQh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:9c:82:41:6c:3e:97:cb:7a:76:a2:99:5d:29:8d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Validity
Not Before: May 6 08:00:42 2025 GMT
Not After : May 7 08:00:42 2025 GMT
Subject: CN=00bf1debb3681c6e226eb4f71242da2fb97d8791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:86:43:0e:51:03:16:08:91:b4:a7:08:b5:1f:
b7:0a:aa:47:dd:37:c3:a3:db:da:dd:4e:37:1c:9d:
ac:e6:73:a0:31:37:fb:ba:66:4e:d2:11:15:a2:16:
74:36:c4:7c:45:a2:69:57:00:fe:c8:b0:dc:1b:27:
41:a6:c7:ad:35:15:3a:f2:91:01:e6:48:4d:15:db:
ac:06:1b:04:c4:6f:eb:5f:ba:fb:08:dc:56:ef:90:
34:46:30:d2:50:90:8c:7f:ca:8f:7b:ca:f3:b6:2a:
06:a9:56:16:8b:f9:52:49:ac:34:43:fe:19:28:5d:
a0:ba:41:ee:41:6c:c5:16:97:a3:05:fb:f8:27:5d:
8e:0e:4f:3b:88:45:54:ed:91:56:31:85:6b:f5:f3:
9d:57:6f:70:67:c7:24:4c:65:49:2e:81:57:8e:ed:
58:0a:b0:62:0c:ec:3f:45:8e:a9:b6:41:df:d8:97:
44:8e:fb:03:cb:ea:21:0a:e3:93:8c:85:85:2c:b3:
87:b6:11:e8:36:b4:36:45:ef:13:13:be:2f:f0:a2:
eb:9b:12:a0:76:6e:60:a7:74:3e:1b:fe:bc:12:f1:
59:7b:69:73:cb:15:d2:18:3b:59:01:cc:73:4b:bd:
10:02:b8:12:bb:49:fb:97:91:ba:f7:b9:e3:c9:44:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BF:1D:EB:B3:68:1C:6E:22:6E:B4:F7:12:42:DA:2F:B9:7D:87:91
X509v3 Authority Key Identifier:
keyid:DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:97:d3:96:6a:6a:0e:e7:32:c7:7e:62:59:af:d2:65:c2:db:
45:62:98:34:c8:a6:64:18:83:c9:8e:58:25:2f:53:ea:91:ef:
b3:7d:e3:e5:d9:94:76:45:e7:f3:eb:81:a4:30:ae:87:ea:b0:
20:68:40:a2:61:6d:df:1e:c8:ea:97:14:4d:45:e8:98:87:a8:
96:98:ee:a0:28:7b:f3:56:9e:9e:9f:99:b5:99:17:27:d1:55:
5c:1e:70:c5:16:73:bd:b7:1f:7a:ce:0c:cf:66:1e:9f:58:c2:
14:94:f1:e5:72:08:c3:d3:fb:e5:84:6f:da:1e:c0:28:07:0b:
a3:9b:97:60:a0:35:ad:04:3c:a4:52:04:64:5a:21:aa:a4:ca:
3a:fb:dc:e9:77:c2:b6:89:d1:9f:ed:2e:85:65:6e:3d:93:0c:
9b:6f:41:00:34:1f:02:90:84:40:6c:ba:fc:e5:6f:6f:35:88:
56:71:7b:fa:50:49:89:cf:47:f0:e6:df:fe:c3:8e:5c:64:39:
ed:ef:01:87:9f:49:85:54:9b:3c:4b:6e:00:41:3c:43:04:65:
05:73:b8:fa:7d:2a:35:6c:4a:21:4a:3c:0d:6e:e6:86:ec:64:
24:9c:58:b9:51:cf:d2:54:88:52:c2:d4:b1:17:f4:70:9b:b3:
4e:40:c6:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaknIJBbD6Xy3p2opldKY38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMGFmN2Q4M2M1ZWViMGQ0MzRhZDc1M2M2YTVmNDc1NDk2
OThiMzcwHhcNMjUwNTA2MDgwMDQyWhcNMjUwNTA3MDgwMDQyWjAzMTEwLwYDVQQD
EygwMGJmMWRlYmIzNjgxYzZlMjI2ZWI0ZjcxMjQyZGEyZmI5N2Q4NzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oZDDlEDFgiRtKcItR+3CqpH3TfD
o9va3U43HJ2s5nOgMTf7umZO0hEVohZ0NsR8RaJpVwD+yLDcGydBpsetNRU68pEB
5khNFdusBhsExG/rX7r7CNxW75A0RjDSUJCMf8qPe8rztioGqVYWi/lSSaw0Q/4Z
KF2gukHuQWzFFpejBfv4J12ODk87iEVU7ZFWMYVr9fOdV29wZ8ckTGVJLoFXju1Y
CrBiDOw/RY6ptkHf2JdEjvsDy+ohCuOTjIWFLLOHthHoNrQ2Re8TE74v8KLrmxKg
dm5gp3Q+G/68EvFZe2lzyxXSGDtZAcxzS70QArgSu0n7l5G697njyUQn+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAC/HeuzaBxuIm609xJC2i+5fYeRMB8GA1UdIwQY
MBaAFN4K99g8XusNQ0rXU8al9HVJaYs3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lN2E3NzItOGIzOS00MzBkLWIxOTIt
YTFiOGJjNWIyY2Q3LzEvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lN2E3NzItOGIzOS00MzBkLWIxOTItYTFiOGJjNWIyY2Q3
LzEvM2dyMzJEeGU2dzFEU3RkVHhxWDBkVWxwaXpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5fTlmpq
Ducyx35iWa/SZcLbRWKYNMimZBiDyY5YJS9T6pHvs33j5dmUdkXn8+uBpDCuh+qw
IGhAomFt3x7I6pcUTUXomIeolpjuoCh781aenp+ZtZkXJ9FVXB5wxRZzvbcfes4M
z2Yen1jCFJTx5XIIw9P75YRv2h7AKAcLo5uXYKA1rQQ8pFIEZFohqqTKOvvc6XfC
tonRn+0uhWVuPZMMm29BADQfApCEQGy6/OVvbzWIVnF7+lBJic9H8Obf/sOOXGQ5
7e8Bh59JhVSbPEtuAEE8QwRlBXO4+n0qNWxKIUo8DW7mhuxkJJxYuVHP0lSIUsLU
sRf0cJuzTkDGHg==
-----END CERTIFICATE-----
Generated at Tue May 6 17:25:48 2025 by rpki-client