Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: GTSnQJ4kvipMa2B4lsPmcGlVfgYyxmH/YFQG7Oft9Es=
Subject key identifier: A9:1D:E4:27:30:BC:87:ED:00:3B:1C:B9:73:6F:C8:1B:CC:D3:CA:DC
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 01969ED17B67AEE35300605EA9DDE4CBBD77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: C7
Signing time: Mon 05 May 2025 05:00:50 +0000
Manifest this update: Mon 05 May 2025 05:00:50 +0000
Manifest next update: Tue 06 May 2025 05:00:50 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: GNTpAHHjsizYsusoc8vTpPifPnKJGTn0lCgeRSHW4vk=)
2: YxHERBDqRVzINYaZYx24sGQ5DjU.roa (hash: z9vAtTxka6hlJ3v+MIB3sxbWlZ+xxPgWCTfz3Y+M29Q=)
3: f9n1-MsvFF9hgPCEtznTrREmBS4.roa (hash: nLwX0ooKqTqap8AB7jQ/dh56XcE7TbuyoiwolR5U2oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:7b:67:ae:e3:53:00:60:5e:a9:dd:e4:cb:bd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: May 5 05:00:50 2025 GMT
Not After : May 6 05:00:50 2025 GMT
Subject: CN=a91de42730bc87ed003b1cb9736fc81bccd3cadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e5:ba:cc:a3:3f:11:9e:a3:a1:62:2a:fd:75:
5b:63:67:43:b0:53:5a:60:ea:05:ce:1e:d9:ce:93:
af:a5:db:a1:4c:ad:1d:f3:1e:b5:51:e6:eb:37:4f:
c9:d2:c6:56:d6:12:81:8d:eb:dc:e1:24:dd:59:50:
ba:b3:1d:81:ed:88:b6:66:65:b9:c5:ee:27:92:73:
ee:b6:62:85:11:3b:78:60:3c:1a:b2:82:ed:e0:5d:
69:de:cd:d4:c8:d2:ab:88:bb:4a:4e:39:75:42:cb:
84:9a:02:c4:4e:74:42:88:93:47:69:c4:a6:91:02:
de:2b:01:ae:56:2a:7a:01:59:8f:08:ae:88:ab:9a:
86:61:da:0c:cf:fd:e6:cf:0c:85:ee:82:57:47:04:
c2:90:5c:b2:d8:7d:b0:57:cb:26:b1:17:e4:56:8f:
d5:f7:95:7a:58:d7:c1:69:a0:ee:18:0e:35:6a:38:
59:07:4a:9f:21:76:2d:98:50:11:ee:b5:3a:95:24:
c1:75:47:1b:14:38:02:68:1d:e8:ee:a6:c9:f6:32:
fb:cc:cb:52:c5:87:14:ec:8f:17:fc:3f:70:08:02:
97:46:77:88:ca:1e:05:c2:c0:19:a1:87:38:5c:70:
70:06:17:25:e4:e2:e0:c8:f0:7d:a0:6d:bc:11:c4:
82:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1D:E4:27:30:BC:87:ED:00:3B:1C:B9:73:6F:C8:1B:CC:D3:CA:DC
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c5:bb:ad:a9:00:8a:91:3b:46:51:80:08:97:40:87:28:af:
0b:5e:21:bb:db:b9:52:e6:1c:14:ff:2d:78:cb:a8:d1:b3:13:
a8:f7:60:01:6f:da:60:be:25:ae:79:b3:03:37:87:73:00:81:
07:b0:53:7d:0d:38:64:b1:78:41:1d:fe:ab:0b:19:58:ef:2e:
fb:de:b0:f5:26:b8:43:e8:16:d5:11:1a:9a:7a:16:95:0e:5c:
5c:18:bd:33:34:a1:51:de:5d:c0:da:d7:75:8e:e1:66:83:68:
dd:d0:32:87:46:57:35:ed:db:93:83:d9:c6:64:c0:a1:5f:68:
c9:47:bb:8d:fc:86:e1:85:b5:05:f4:fb:c3:9d:c3:2f:8f:5c:
4f:0a:6b:ae:d1:0e:11:80:3d:52:69:c1:5d:c8:92:a6:6d:7f:
d3:ec:22:dd:8b:78:28:89:22:12:8d:b0:b9:b7:e6:3e:6a:85:
db:55:71:cf:f1:78:5c:3d:c5:39:d5:a7:be:b7:71:af:83:c6:
44:cf:44:15:07:8e:30:1e:07:e7:fc:b7:b2:56:6d:61:e5:af:
94:fb:d3:ae:4b:cc:a8:06:94:99:a8:81:87:f4:40:37:ad:35:
5f:92:f1:6c:87:68:06:db:c5:f4:7a:ab:f6:ec:2b:96:ab:f0:
98:6f:af:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZae0XtnruNTAGBeqd3ky713MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWIzOTRhYWUwODM2ZDM0MzQxZjdhZDMxOTQ5NDc2NWFi
NTZiMDcwHhcNMjUwNTA1MDUwMDUwWhcNMjUwNTA2MDUwMDUwWjAzMTEwLwYDVQQD
EyhhOTFkZTQyNzMwYmM4N2VkMDAzYjFjYjk3MzZmYzgxYmNjZDNjYWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OW6zKM/EZ6joWIq/XVbY2dDsFNa
YOoFzh7ZzpOvpduhTK0d8x61UebrN0/J0sZW1hKBjevc4STdWVC6sx2B7Yi2ZmW5
xe4nknPutmKFETt4YDwasoLt4F1p3s3UyNKriLtKTjl1QsuEmgLETnRCiJNHacSm
kQLeKwGuVip6AVmPCK6Iq5qGYdoMz/3mzwyF7oJXRwTCkFyy2H2wV8smsRfkVo/V
95V6WNfBaaDuGA41ajhZB0qfIXYtmFAR7rU6lSTBdUcbFDgCaB3o7qbJ9jL7zMtS
xYcU7I8X/D9wCAKXRneIyh4FwsAZoYc4XHBwBhcl5OLgyPB9oG28EcSCnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkd5CcwvIftADscuXNvyBvM08rcMB8GA1UdIwQY
MBaAFNzrOUquCDbTQ0H3rTGUlHZatWsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEt
NDBjODZiMzJlYjIyLzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEtNDBjODZiMzJlYjIy
LzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8W7rakA
ipE7RlGACJdAhyivC14hu9u5UuYcFP8teMuo0bMTqPdgAW/aYL4lrnmzAzeHcwCB
B7BTfQ04ZLF4QR3+qwsZWO8u+96w9Sa4Q+gW1REamnoWlQ5cXBi9MzShUd5dwNrX
dY7hZoNo3dAyh0ZXNe3bk4PZxmTAoV9oyUe7jfyG4YW1BfT7w53DL49cTwprrtEO
EYA9UmnBXciSpm1/0+wi3Yt4KIkiEo2wubfmPmqF21Vxz/F4XD3FOdWnvrdxr4PG
RM9EFQeOMB4H5/y3slZtYeWvlPvTrkvMqAaUmaiBh/RAN601X5LxbIdoBtvF9Hqr
9uwrlqvwmG+vcA==
-----END CERTIFICATE-----
Generated at Mon May 5 12:41:07 2025 by rpki-client