Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
File: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft (raw, json)
Hash identifier: R/qDFse38QEHfIBErvrQHAPLWkv9/fwHVlGNjAYpw1M=
Subject key identifier: 71:46:CC:E1:EC:5D:15:31:6F:BF:E8:B7:74:47:14:65:90:54:AB:45
Authority key identifier: DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
Certificate issuer: /CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Certificate serial: 0196C42788B391BDEF7FADBED7F2CAB991B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
Manifest number: 0E39
Signing time: Mon 12 May 2025 11:00:47 +0000
Manifest this update: Mon 12 May 2025 11:00:47 +0000
Manifest next update: Tue 13 May 2025 11:00:47 +0000
Files and hashes: 1: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl (hash: /v+3PBCzqZ18XfoL23OPb1DDfSTeYL4U4/t+1NV3NBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:88:b3:91:bd:ef:7f:ad:be:d7:f2:ca:b9:91:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Validity
Not Before: May 12 11:00:47 2025 GMT
Not After : May 13 11:00:47 2025 GMT
Subject: CN=7146cce1ec5d15316fbfe8b7744714659054ab45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:81:79:2a:61:50:e5:1e:d9:96:a3:c8:75:a3:
8f:47:97:20:ca:71:ca:e0:93:35:da:14:a6:ea:71:
eb:13:c5:98:4d:76:d8:30:4e:2a:9c:07:8b:ad:f7:
5b:68:03:4c:ca:fb:fc:3b:fb:03:f9:39:f0:6b:ec:
4d:6c:8d:4a:d1:a0:f8:43:66:e4:76:f4:b3:c7:5e:
fb:4b:a2:16:1a:5c:7f:b3:da:a4:00:1f:5c:b6:68:
ff:12:8f:71:b8:e2:14:e2:da:df:68:d0:10:1c:9d:
02:63:a9:f3:0b:ed:ac:84:e5:d7:e2:13:f0:d4:c8:
cc:97:fd:6a:84:42:16:4b:54:25:ed:d9:d4:11:f5:
25:ea:b5:69:ce:84:f7:87:59:0d:7a:48:a0:bc:dd:
8e:2a:ee:66:c3:e9:71:19:72:9b:4f:47:d9:79:7a:
60:5a:b8:72:c2:3d:72:18:74:af:b4:00:d2:aa:cb:
e7:a1:7c:89:a8:21:ed:b5:01:df:e2:b0:d5:23:fd:
91:82:ee:4a:69:d9:71:5f:e0:4c:0e:90:6d:fa:c6:
9b:19:15:d1:fc:90:1c:b2:36:77:46:51:6a:8e:15:
55:d5:69:ed:5f:5d:30:ff:d3:11:98:4e:fa:75:ef:
5d:a5:a0:d0:2a:e9:1e:35:77:e9:37:49:e0:d6:43:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:46:CC:E1:EC:5D:15:31:6F:BF:E8:B7:74:47:14:65:90:54:AB:45
X509v3 Authority Key Identifier:
keyid:DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:39:ff:bc:95:45:44:4f:52:d6:77:be:f1:a6:2f:95:30:2f:
7e:ea:06:05:22:5d:81:0c:99:90:bb:0c:a0:c6:3c:43:a7:cc:
4b:e6:64:25:62:1c:61:fa:66:4d:39:51:cd:ef:8d:97:dd:ec:
1a:38:5b:25:e4:cf:91:dc:e0:c1:a4:2e:37:e8:1b:73:1e:4f:
0f:85:ef:5d:a0:e1:7b:68:ed:7a:5e:95:ba:44:1d:70:a8:b5:
40:38:0e:5a:b2:c4:00:21:67:5c:31:6b:dd:00:73:78:57:5d:
42:c7:ca:25:85:c7:dc:d0:ab:b8:87:ef:e7:b6:ec:16:cc:19:
e4:7d:4b:52:3f:58:92:4b:f0:2b:51:c5:04:1f:74:41:2b:0a:
ad:fa:0a:6a:3d:da:b4:de:fc:f1:ca:33:5f:bc:0d:93:55:b0:
ad:9c:1d:93:fc:b4:5c:43:7f:50:b6:5c:69:e7:a8:a7:5c:3a:
08:87:9a:85:6d:c9:60:48:d6:8b:0a:ce:b2:4b:42:71:bd:b4:
41:71:58:2c:4b:cb:fc:35:a2:00:34:49:a6:32:62:69:e6:51:
f5:3d:7c:22:01:6d:65:3f:e8:af:b2:54:29:8e:b6:a0:80:93:
6e:bf:b1:fe:46:ec:20:bd:40:e0:2a:f7:98:47:6f:3b:47:e6:
1c:ed:22:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEJ4izkb3vf62+1/LKuZG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzNiZTM4N2FmNTUyOTcwY2Y2MmY2OTUxN2UzZjNjOWMx
MmQyZjYwHhcNMjUwNTEyMTEwMDQ3WhcNMjUwNTEzMTEwMDQ3WjAzMTEwLwYDVQQD
Eyg3MTQ2Y2NlMWVjNWQxNTMxNmZiZmU4Yjc3NDQ3MTQ2NTkwNTRhYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4F5KmFQ5R7ZlqPIdaOPR5cgynHK
4JM12hSm6nHrE8WYTXbYME4qnAeLrfdbaANMyvv8O/sD+Tnwa+xNbI1K0aD4Q2bk
dvSzx177S6IWGlx/s9qkAB9ctmj/Eo9xuOIU4trfaNAQHJ0CY6nzC+2shOXX4hPw
1MjMl/1qhEIWS1Ql7dnUEfUl6rVpzoT3h1kNekigvN2OKu5mw+lxGXKbT0fZeXpg
Wrhywj1yGHSvtADSqsvnoXyJqCHttQHf4rDVI/2Rgu5KadlxX+BMDpBt+sabGRXR
/JAcsjZ3RlFqjhVV1WntX10w/9MRmE76de9dpaDQKukeNXfpN0ng1kOFuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFGzOHsXRUxb7/ot3RHFGWQVKtFMB8GA1UdIwQY
MBaAFNxzvjh69VKXDPYvaVF+PzycEtL2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hPLU9IcjFVcGNNOWk5cFVYNF9QSndTMHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81YmJkMzItYTU0MC00NzA4LTk5MjUt
YzcxZjE3YWZjNzQ5LzEvM0hPLU9IcjFVcGNNOWk5cFVYNF9QSndTMHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81YmJkMzItYTU0MC00NzA4LTk5MjUtYzcxZjE3YWZjNzQ5
LzEvM0hPLU9IcjFVcGNNOWk5cFVYNF9QSndTMHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDn/vJVF
RE9S1ne+8aYvlTAvfuoGBSJdgQyZkLsMoMY8Q6fMS+ZkJWIcYfpmTTlRze+Nl93s
GjhbJeTPkdzgwaQuN+gbcx5PD4XvXaDhe2jtel6VukQdcKi1QDgOWrLEACFnXDFr
3QBzeFddQsfKJYXH3NCruIfv57bsFswZ5H1LUj9YkkvwK1HFBB90QSsKrfoKaj3a
tN788cozX7wNk1WwrZwdk/y0XEN/ULZcaeeop1w6CIeahW3JYEjWiwrOsktCcb20
QXFYLEvL/DWiADRJpjJiaeZR9T18IgFtZT/or7JUKY62oICTbr+x/kbsIL1A4Cr3
mEdvO0fmHO0iag==
-----END CERTIFICATE-----
Generated at Mon May 12 22:00:38 2025 by rpki-client