Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: msjlMbVy9Ew1VgMUX5ltIOqmiNo6LdTS49cqhEMfaGg=
Subject key identifier: D2:A3:BC:DD:52:EF:03:48:23:D0:EA:CC:20:A8:AB:F0:B4:37:C1:6B
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 0196C04B2B168F6A5A6DC07AC849BBA71520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 148F
Signing time: Sun 11 May 2025 17:01:13 +0000
Manifest this update: Sun 11 May 2025 17:01:13 +0000
Manifest next update: Mon 12 May 2025 17:01:13 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: EUok1Y4/2cOna0gJJcet4o0ekoLgpIkvkN9ZXovfQyg=)
2: bPbl9DKxYJUxR3ZUVzukhGWYurM.roa (hash: FAnYMWhXeH8TjI8m2ivn5nzVc0hLKvZ4QbjQQh/aekU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4b:2b:16:8f:6a:5a:6d:c0:7a:c8:49:bb:a7:15:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: May 11 17:01:13 2025 GMT
Not After : May 12 17:01:13 2025 GMT
Subject: CN=d2a3bcdd52ef034823d0eacc20a8abf0b437c16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:16:92:17:4e:28:6c:34:5a:92:23:b2:e2:
b2:68:53:0f:3c:20:14:85:3c:3c:1a:11:f4:ce:93:
f2:ac:57:eb:35:e4:2a:07:c4:b9:ae:d5:7a:06:c4:
ac:36:69:7d:ac:b8:b8:fd:d9:c2:95:77:9f:c2:4f:
02:e8:83:4e:82:75:2d:89:6a:e6:96:57:c0:e3:fa:
98:7e:24:0c:34:ac:c2:ea:2e:a4:7f:bd:a7:6b:f3:
98:16:24:ba:ca:a7:fc:b0:3c:65:48:ce:bf:5e:14:
6d:db:a0:a4:3e:51:e3:4d:a7:42:a1:87:fa:55:7a:
9b:f4:cb:0d:ca:05:35:ac:03:c1:be:3c:15:1e:bb:
05:c3:93:11:d2:30:d4:01:b7:33:33:d4:f2:60:2c:
c6:06:11:b5:3d:04:7f:61:aa:d2:74:2b:e2:54:d9:
b5:92:b9:eb:f6:13:7f:9d:19:59:a4:43:f2:bb:ce:
f5:91:a2:85:07:6b:e8:5c:72:c6:3b:04:66:4c:82:
ab:77:b3:3d:39:6f:08:c7:b2:41:44:d3:ba:72:3b:
0e:81:e2:34:76:ab:59:bb:68:3e:ee:55:1f:af:de:
83:3b:d7:39:e0:5c:81:4a:64:d7:b5:60:97:4a:4b:
10:cf:74:20:00:55:4b:0f:ad:b8:bb:9a:48:57:76:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A3:BC:DD:52:EF:03:48:23:D0:EA:CC:20:A8:AB:F0:B4:37:C1:6B
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b1:56:96:ef:f1:6b:40:24:87:cf:0d:98:21:8d:2a:90:9e:
e5:d8:2a:d3:9f:66:46:99:39:e7:bd:27:ba:4b:a2:09:93:bc:
cc:56:15:2c:bf:38:94:7c:2b:dd:f4:9f:06:e3:b0:4a:e6:db:
53:7e:06:6f:9b:ad:74:bf:db:86:11:0e:a3:fb:9c:d3:d0:68:
ad:b9:67:0f:df:dd:52:f4:1a:e7:89:66:52:b1:ad:21:19:c7:
d6:40:c6:49:82:5b:de:33:2f:7d:d8:dd:1e:f3:95:d3:89:75:
0d:73:d8:3d:c7:d0:9f:08:28:8a:7a:46:07:be:89:5f:fc:8b:
7b:9a:e5:3b:ef:6a:70:29:d5:e3:9c:60:41:2c:66:e8:d4:2f:
82:ce:30:5b:c2:88:66:79:b1:d3:60:41:cf:0e:b7:a7:9a:fa:
1c:39:5a:73:bc:81:89:99:3f:96:70:90:2f:3c:da:62:06:ab:
c8:64:89:1c:6a:0c:32:fa:41:a1:b8:86:06:72:b9:07:ca:b4:
24:b5:ab:3e:79:79:aa:fa:25:61:21:eb:5b:ae:e6:17:ae:4d:
c1:a9:31:af:85:ab:a8:40:f6:d5:67:62:06:b7:cc:99:0c:71:
8c:eb:61:77:b7:2b:a4:51:0e:4e:34:d3:94:1d:b4:a5:d9:ee:
9d:27:0e:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbASysWj2pabcB6yEm7pxUgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDIyYzI0MTQ3ZWM3OWZhOTA2NDY0YWIxNDNmZDQ3ZTNi
ZWIzYTEwHhcNMjUwNTExMTcwMTEzWhcNMjUwNTEyMTcwMTEzWjAzMTEwLwYDVQQD
EyhkMmEzYmNkZDUyZWYwMzQ4MjNkMGVhY2MyMGE4YWJmMGI0MzdjMTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqoWkhdOKGw0WpIjsuKyaFMPPCAU
hTw8GhH0zpPyrFfrNeQqB8S5rtV6BsSsNml9rLi4/dnClXefwk8C6INOgnUtiWrm
llfA4/qYfiQMNKzC6i6kf72na/OYFiS6yqf8sDxlSM6/XhRt26CkPlHjTadCoYf6
VXqb9MsNygU1rAPBvjwVHrsFw5MR0jDUAbczM9TyYCzGBhG1PQR/YarSdCviVNm1
krnr9hN/nRlZpEPyu871kaKFB2voXHLGOwRmTIKrd7M9OW8Ix7JBRNO6cjsOgeI0
dqtZu2g+7lUfr96DO9c54FyBSmTXtWCXSksQz3QgAFVLD624u5pIV3ZAvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKjvN1S7wNII9DqzCCoq/C0N8FrMB8GA1UdIwQY
MBaAFNxCLCQUfsefqQZGSrFD/UfjvrOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMt
MjE2NTEzNmM5ZDlhLzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMtMjE2NTEzNmM5ZDlh
LzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7FWlu/x
a0Akh88NmCGNKpCe5dgq059mRpk5570nukuiCZO8zFYVLL84lHwr3fSfBuOwSubb
U34Gb5utdL/bhhEOo/uc09BorblnD9/dUvQa54lmUrGtIRnH1kDGSYJb3jMvfdjd
HvOV04l1DXPYPcfQnwgoinpGB76JX/yLe5rlO+9qcCnV45xgQSxm6NQvgs4wW8KI
Znmx02BBzw63p5r6HDlac7yBiZk/lnCQLzzaYgaryGSJHGoMMvpBobiGBnK5B8q0
JLWrPnl5qvolYSHrW67mF65Nwakxr4WrqED21WdiBrfMmQxxjOthd7crpFEOTjTT
lB20pdnunScOMg==
-----END CERTIFICATE-----
Generated at Sun May 11 22:14:50 2025 by rpki-client