
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier: lj+hEtWmV0NllemZpmkAILdaMtBFojZ+iIZK+Hve5W8=
Subject key identifier: 0F:E9:8D:3A:E3:A8:7C:3D:1B:67:FA:B6:AF:9E:C8:CD:1F:B8:A8:E8
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial: 0196C0B8BE609EADB15E13D48CD8A281F9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number: 1178
Signing time: Sun 11 May 2025 19:00:54 +0000
Manifest this update: Sun 11 May 2025 19:00:54 +0000
Manifest next update: Mon 12 May 2025 19:00:54 +0000
Files and hashes: 1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: ZljMMj9nJPMwoN+pnCmCyXMqsP3PoL3evEl9MSNHvYM=)
2: yvHmtz-vd__QGyK6PoEkr_n-Dok.roa (hash: K4rgADfkHdT22x5s6vfWG3HXGINmJUAubhmd+BDk2vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:be:60:9e:ad:b1:5e:13:d4:8c:d8:a2:81:f9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
Validity
Not Before: May 11 19:00:54 2025 GMT
Not After : May 12 19:00:54 2025 GMT
Subject: CN=0fe98d3ae3a87c3d1b67fab6af9ec8cd1fb8a8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:26:8e:d7:fc:64:61:55:7f:d1:93:ec:78:
52:a0:65:c2:57:d3:3d:ee:c0:ca:b0:a0:36:0e:de:
35:6f:60:0b:03:1c:85:27:12:80:10:5a:57:be:e0:
10:26:62:d3:67:df:72:cc:6c:48:57:63:b4:62:89:
e8:30:4d:1d:0c:2f:7f:64:bf:ab:53:4d:c2:5c:02:
4a:33:fc:55:b4:da:ea:80:e1:24:e1:1e:84:bd:d9:
ce:0b:b5:44:34:88:b0:3c:76:79:b4:cd:0c:66:ff:
f3:d0:58:e2:46:75:8c:0f:b7:c1:43:1b:8a:13:6e:
9e:1b:ce:cf:78:67:81:17:d5:68:a9:f3:16:2f:1f:
42:b8:7a:7f:4d:83:95:10:71:22:82:23:8d:4a:65:
6c:2c:8e:6a:3a:45:99:4e:42:a6:bc:ca:e7:9a:89:
b5:ff:b8:e6:db:33:e1:e7:b5:8f:13:7e:3f:df:f5:
08:1d:b6:42:43:aa:50:26:ac:25:ac:2a:20:16:48:
30:57:bf:f0:f2:ec:24:3e:b6:5d:45:0d:f3:3e:74:
5a:46:af:d6:74:35:4e:d8:d4:af:89:c1:bf:34:68:
9d:e6:8a:9b:6e:ed:e5:46:79:19:e5:5e:04:8e:ba:
86:b1:19:fb:3f:99:e7:fc:fc:33:77:0f:a2:c6:08:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E9:8D:3A:E3:A8:7C:3D:1B:67:FA:B6:AF:9E:C8:CD:1F:B8:A8:E8
X509v3 Authority Key Identifier:
keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e7:f3:68:16:7f:2b:73:6e:6a:2f:f6:f6:c7:45:4b:63:71:
95:4b:37:01:39:55:6f:78:dd:fe:cc:49:b2:10:b3:f3:b1:18:
6e:7a:1c:e1:94:b1:04:78:7f:14:ba:16:52:7e:43:11:95:ba:
8a:83:99:d1:8c:bf:40:d8:a2:4a:59:ab:87:a7:6c:c0:b6:20:
23:f5:dc:c6:19:51:87:2a:94:f7:66:bb:44:4e:d9:16:54:1d:
07:f3:10:b4:d1:12:e3:10:47:ea:77:1b:77:9b:c6:45:cc:b7:
cd:28:61:93:fa:a4:a4:cd:79:1e:a6:65:d3:62:67:ef:98:e3:
d2:72:9b:33:73:38:08:06:fb:64:91:bd:0c:23:80:7a:94:76:
e7:bf:0e:c1:61:f1:ee:d4:01:b9:a3:1c:9c:07:36:6a:75:bb:
28:0f:17:7e:7f:39:5e:14:b5:04:69:3e:61:8e:8e:e5:e6:1f:
28:4b:a5:46:6c:61:79:e8:d9:cd:e2:03:ae:b9:bb:d2:be:32:
da:0b:62:24:55:11:99:ce:cd:68:82:d9:fb:c5:f4:30:f7:22:
e4:50:5d:85:3c:ac:34:27:b2:d3:21:c9:d4:22:e5:94:a4:0a:
01:70:b2:1f:37:d0:96:11:aa:24:a9:12:7e:fe:07:e2:25:ec:
9d:31:35:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAuL5gnq2xXhPUjNiigfnYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWI1NDg3NjJjN2Q0Y2FjY2I2MTZkODE5Y2U5NWNmNjI3
YjIwMjEwHhcNMjUwNTExMTkwMDU0WhcNMjUwNTEyMTkwMDU0WjAzMTEwLwYDVQQD
EygwZmU5OGQzYWUzYTg3YzNkMWI2N2ZhYjZhZjllYzhjZDFmYjhhOGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8wmjtf8ZGFVf9GT7HhSoGXCV9M9
7sDKsKA2Dt41b2ALAxyFJxKAEFpXvuAQJmLTZ99yzGxIV2O0YonoME0dDC9/ZL+r
U03CXAJKM/xVtNrqgOEk4R6EvdnOC7VENIiwPHZ5tM0MZv/z0FjiRnWMD7fBQxuK
E26eG87PeGeBF9VoqfMWLx9CuHp/TYOVEHEigiONSmVsLI5qOkWZTkKmvMrnmom1
/7jm2zPh57WPE34/3/UIHbZCQ6pQJqwlrCogFkgwV7/w8uwkPrZdRQ3zPnRaRq/W
dDVO2NSvicG/NGid5oqbbu3lRnkZ5V4EjrqGsRn7P5nn/Pwzdw+ixggx2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/pjTrjqHw9G2f6tq+eyM0fuKjoMB8GA1UdIwQY
MBaAFNzrVIdix9TKzLYW2BnOlc9ieyAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM090VWgyTEgxTXJNdGhiWUdjNlZ6Mko3SUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iZTIyMzYtYzJiYS00NzhhLWFiYzMt
YjRjZWE1MTQ1NmI0LzEvM090VWgyTEgxTXJNdGhiWUdjNlZ6Mko3SUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iZTIyMzYtYzJiYS00NzhhLWFiYzMtYjRjZWE1MTQ1NmI0
LzEvM090VWgyTEgxTXJNdGhiWUdjNlZ6Mko3SUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXefzaBZ/
K3Nuai/29sdFS2NxlUs3ATlVb3jd/sxJshCz87EYbnoc4ZSxBHh/FLoWUn5DEZW6
ioOZ0Yy/QNiiSlmrh6dswLYgI/XcxhlRhyqU92a7RE7ZFlQdB/MQtNES4xBH6ncb
d5vGRcy3zShhk/qkpM15HqZl02Jn75jj0nKbM3M4CAb7ZJG9DCOAepR2578OwWHx
7tQBuaMcnAc2anW7KA8Xfn85XhS1BGk+YY6O5eYfKEulRmxheejZzeIDrrm70r4y
2gtiJFURmc7NaILZ+8X0MPci5FBdhTysNCey0yHJ1CLllKQKAXCyHzfQlhGqJKkS
fv4H4iXsnTE1Dg==
-----END CERTIFICATE-----
Generated at Sun May 11 22:58:49 2025 by rpki-client