Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: oKLqd2IVi8qIrSU+UoeE/eFZvxwcxvbqHkt7YRPK23U=
Subject key identifier: 3F:A1:E8:A6:0A:9B:EE:D4:1A:D2:A3:C8:87:2A:A6:9D:69:79:53:E4
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 0196C01413F3CE9E48B73B0E9112AC38A285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 103C
Signing time: Sun 11 May 2025 16:01:03 +0000
Manifest this update: Sun 11 May 2025 16:01:03 +0000
Manifest next update: Mon 12 May 2025 16:01:03 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: fu1jlZKI6bPq3AejIjnbt5ueVRZVm6Nmo4/6efwno/U=)
2: _eQTxfZZbwefhXlLKHO7CEbeNzo.roa (hash: XwbhtEsqMzoTs493oAMc1WoC+bVurXPqsNp3fAtN59M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:13:f3:ce:9e:48:b7:3b:0e:91:12:ac:38:a2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: May 11 16:01:03 2025 GMT
Not After : May 12 16:01:03 2025 GMT
Subject: CN=3fa1e8a60a9beed41ad2a3c8872aa69d697953e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:3a:31:d9:58:9a:35:a5:4e:34:52:45:54:
0b:9c:f2:59:d0:9e:67:69:13:c2:9b:eb:5b:18:65:
20:61:88:10:f3:1d:d0:77:18:d4:5a:4b:94:bb:65:
cb:5a:9d:f7:92:26:83:05:be:a5:c8:6d:dd:10:a3:
7c:7f:16:b7:2a:bd:cd:50:88:4a:0c:33:b1:21:3e:
1c:f0:16:a4:b1:b6:da:1a:87:cc:7c:20:9a:06:77:
f5:f5:80:11:3f:3b:03:dd:fd:71:bf:3d:5e:c4:f3:
f4:15:05:60:37:ed:b8:e0:ce:58:8c:f1:08:73:bf:
65:d1:44:34:99:f4:aa:03:1e:b2:92:fc:e4:d8:59:
a4:84:2c:ab:41:fb:2a:d9:f6:7e:b8:ec:42:9a:74:
0e:c7:a6:88:07:04:e5:32:db:79:97:00:d1:f8:71:
67:6b:c0:93:c6:69:12:1a:99:fa:27:3d:54:0d:02:
51:2b:41:49:7b:15:29:27:82:63:7b:7a:2d:cd:66:
97:d7:62:5a:a7:13:9b:34:6c:3f:e7:9d:54:eb:80:
8a:5e:da:ca:24:7f:32:da:3a:c5:62:28:97:c7:1a:
a8:a4:05:b5:f9:a2:59:95:f0:15:8d:37:ca:a6:4f:
3c:c1:ec:85:72:7f:6d:3f:fd:3f:76:64:71:af:68:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A1:E8:A6:0A:9B:EE:D4:1A:D2:A3:C8:87:2A:A6:9D:69:79:53:E4
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b9:05:b4:ba:e8:f9:a6:c0:f9:d6:4f:92:78:1b:56:49:ce:
90:81:d3:e1:ef:ac:f2:f0:ad:ed:74:6a:75:e2:3a:2c:33:da:
5d:93:9d:34:06:99:a2:3f:86:84:3f:e5:2c:85:6c:0c:af:5d:
71:7f:30:0e:5c:21:87:cd:7a:b2:f8:43:62:a9:0f:93:83:19:
a2:b4:e0:02:c4:47:cf:d3:37:26:9b:8f:85:b7:b0:23:89:c9:
15:49:83:84:67:1f:ea:35:37:7b:48:f6:a2:93:7b:0f:c6:81:
61:28:f5:c3:4b:24:68:f9:c9:72:79:b3:5e:c3:8d:37:a2:62:
6a:35:54:ef:b3:9d:04:bf:f9:b7:02:f0:da:5b:a7:b6:26:35:
9f:32:5d:6b:20:ff:76:ff:bc:23:e7:80:06:10:d6:7a:70:7f:
e6:9a:b5:ff:a4:9b:fe:aa:3c:aa:68:c2:67:f6:3d:0c:5b:f5:
72:1f:1d:4e:36:8a:58:98:36:c2:0d:aa:78:9b:97:3a:f4:c4:
ad:17:36:ab:a0:d6:cd:b8:33:1f:bb:2d:8e:be:9a:40:83:e6:
f9:99:03:32:dc:b2:b3:3b:cf:79:83:8f:02:06:7c:1c:f8:9d:
19:38:90:9f:16:c3:9e:fb:e3:0b:10:8a:d8:e5:66:6d:45:fe:
ea:10:6f:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAFBPzzp5ItzsOkRKsOKKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMjk2Y2Y3MDQzODM2ZWJlMTc0OWM1YzE0NTQ3Yzc5ODQx
ZTFiODkwHhcNMjUwNTExMTYwMTAzWhcNMjUwNTEyMTYwMTAzWjAzMTEwLwYDVQQD
EygzZmExZThhNjBhOWJlZWQ0MWFkMmEzYzg4NzJhYTY5ZDY5Nzk1M2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGc6MdlYmjWlTjRSRVQLnPJZ0J5n
aRPCm+tbGGUgYYgQ8x3QdxjUWkuUu2XLWp33kiaDBb6lyG3dEKN8fxa3Kr3NUIhK
DDOxIT4c8BaksbbaGofMfCCaBnf19YARPzsD3f1xvz1exPP0FQVgN+244M5YjPEI
c79l0UQ0mfSqAx6ykvzk2FmkhCyrQfsq2fZ+uOxCmnQOx6aIBwTlMtt5lwDR+HFn
a8CTxmkSGpn6Jz1UDQJRK0FJexUpJ4Jje3otzWaX12JapxObNGw/551U64CKXtrK
JH8y2jrFYiiXxxqopAW1+aJZlfAVjTfKpk88weyFcn9tP/0/dmRxr2gWMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+h6KYKm+7UGtKjyIcqpp1peVPkMB8GA1UdIwQY
MBaAFNwpbPcEODbr4XScXBRUfHmEHhuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODY3MjAtNmE4Yy00NTQ5LWI0MDMt
NjhhYmU1MmQzMDM0LzEvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ODY3MjAtNmE4Yy00NTQ5LWI0MDMtNjhhYmU1MmQzMDM0
LzEvM0Nsczl3UTROdXZoZEp4Y0ZGUjhlWVFlRzRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLkFtLro
+abA+dZPkngbVknOkIHT4e+s8vCt7XRqdeI6LDPaXZOdNAaZoj+GhD/lLIVsDK9d
cX8wDlwhh816svhDYqkPk4MZorTgAsRHz9M3JpuPhbewI4nJFUmDhGcf6jU3e0j2
opN7D8aBYSj1w0skaPnJcnmzXsONN6JiajVU77OdBL/5twLw2luntiY1nzJdayD/
dv+8I+eABhDWenB/5pq1/6Sb/qo8qmjCZ/Y9DFv1ch8dTjaKWJg2wg2qeJuXOvTE
rRc2q6DWzbgzH7stjr6aQIPm+ZkDMtyyszvPeYOPAgZ8HPidGTiQnxbDnvvjCxCK
2OVmbUX+6hBvTA==
-----END CERTIFICATE-----
Generated at Mon May 12 01:38:26 2025 by rpki-client