Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: uANKayk8eFgZ1F1JUlLgOD8HcSKZubMeoY8swAOP82g=
Subject key identifier: 79:90:6B:3C:6A:EA:47:5A:B6:46:3F:AD:76:37:1A:82:6A:3E:6B:BF
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 0196A8E7270DE1CD499CB4A8C24F94DA8819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 14CA
Signing time: Wed 07 May 2025 04:00:43 +0000
Manifest this update: Wed 07 May 2025 04:00:43 +0000
Manifest next update: Thu 08 May 2025 04:00:43 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: OhT5UIw3aN/5GJ9/wbLTN3eZRp6i9aP44Gnj511gsfo=)
2: MSp6uSJniwR1tjfPjmXw8Wg_0YU.roa (hash: 0fQ4kAnNMwAWjVPJbNDfudzXYDSGRSTHXnaddIlGIe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:e7:27:0d:e1:cd:49:9c:b4:a8:c2:4f:94:da:88:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: May 7 04:00:43 2025 GMT
Not After : May 8 04:00:43 2025 GMT
Subject: CN=79906b3c6aea475ab6463fad76371a826a3e6bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:70:19:74:ba:2c:cf:8d:a9:38:da:88:81:
96:65:62:f2:2b:8b:23:1d:49:97:59:25:10:88:f2:
b9:f4:9f:61:bb:b8:a0:04:f4:86:88:17:f7:57:cd:
a5:3d:88:c2:98:0a:4d:cb:f7:09:6c:0a:6f:bd:71:
57:18:24:1a:ce:4d:72:9d:20:05:67:a7:0d:23:6d:
79:cf:4f:56:f9:7b:bd:62:c6:5f:38:60:d9:1a:8b:
8f:e9:9b:24:06:2f:a7:15:ba:05:cd:a4:99:5b:f6:
3b:af:ac:46:8e:9a:ac:b5:96:1d:c3:1f:c6:91:d2:
8d:aa:5e:4d:99:04:4a:14:c5:a5:0f:0c:3a:61:5b:
d0:09:f5:0c:d0:a2:ff:d4:f7:36:f6:ee:4d:88:0f:
67:bf:41:a1:42:ea:ba:70:3e:a0:11:c1:6c:c1:b1:
33:38:38:15:fa:58:06:7e:e9:41:81:9b:1b:26:83:
9c:17:85:c6:3f:f8:e7:47:95:3f:35:27:a7:b8:a9:
2b:5e:e4:7f:6f:eb:4a:07:47:99:5f:a7:20:3e:b5:
cd:1c:32:4f:74:3d:22:da:36:93:72:6e:05:16:59:
7b:5b:d1:9e:d4:ae:03:73:7a:92:05:85:ea:dc:aa:
5f:29:85:35:70:dd:af:2f:a6:d4:41:4c:c5:46:56:
b1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:90:6B:3C:6A:EA:47:5A:B6:46:3F:AD:76:37:1A:82:6A:3E:6B:BF
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:74:43:0b:41:19:36:af:cc:3d:34:1d:fe:ad:48:aa:ca:a0:
72:80:95:d0:96:f5:bc:91:fa:85:b7:a6:a9:66:a3:6d:e9:2c:
5e:bf:7a:81:46:2a:97:63:a3:03:ea:ac:c2:82:b3:71:53:dd:
6b:80:98:df:44:05:c3:ac:6e:b5:e1:07:45:13:15:3a:81:19:
53:af:a4:29:a5:db:03:e7:62:08:5b:06:cb:a1:81:2f:a9:66:
40:27:7e:16:06:02:f5:fc:f4:d1:db:34:59:dd:94:c7:30:88:
b0:c4:d4:dc:03:4b:3d:94:73:1a:54:31:d0:91:11:db:10:99:
2d:5e:fb:db:6e:85:b7:36:91:ea:a1:32:89:29:52:6d:41:5f:
c1:41:f0:c7:54:ff:94:df:dc:d0:22:10:e8:5e:55:b6:ba:13:
b0:63:82:1b:0f:87:75:66:74:90:09:02:5e:ba:31:a2:e8:10:
0a:92:de:3e:7f:0f:17:37:25:a8:98:e4:18:8f:7e:63:6f:58:
e1:11:41:99:ae:17:bd:5c:a7:42:68:55:3b:d2:9e:db:bf:3e:
4b:6c:96:4e:1c:4e:80:1e:39:df:4f:85:c5:88:9a:69:e3:f4:
af:48:e0:69:d7:54:3a:cd:69:a8:db:3a:7f:bc:e2:d5:78:1f:
b8:15:c1:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZao5ycN4c1JnLSowk+U2ogZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmM2I3NmQzYzBjNjBkNjYzNTA2YTI1MjY3MWM1MjhlMzQz
OWZmNzUwHhcNMjUwNTA3MDQwMDQzWhcNMjUwNTA4MDQwMDQzWjAzMTEwLwYDVQQD
Eyg3OTkwNmIzYzZhZWE0NzVhYjY0NjNmYWQ3NjM3MWE4MjZhM2U2YmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsBwGXS6LM+NqTjaiIGWZWLyK4sj
HUmXWSUQiPK59J9hu7igBPSGiBf3V82lPYjCmApNy/cJbApvvXFXGCQazk1ynSAF
Z6cNI215z09W+Xu9YsZfOGDZGouP6ZskBi+nFboFzaSZW/Y7r6xGjpqstZYdwx/G
kdKNql5NmQRKFMWlDww6YVvQCfUM0KL/1Pc29u5NiA9nv0GhQuq6cD6gEcFswbEz
ODgV+lgGfulBgZsbJoOcF4XGP/jnR5U/NSenuKkrXuR/b+tKB0eZX6cgPrXNHDJP
dD0i2jaTcm4FFll7W9Ge1K4Dc3qSBYXq3KpfKYU1cN2vL6bUQUzFRlaxZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmQazxq6kdatkY/rXY3GoJqPmu/MB8GA1UdIwQY
MBaAFN87dtPAxg1mNQaiUmccUo40Of91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYt
ZDllMTEzN2YwMmI1LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hMmM5YWMtZjNjYS00YWRjLTk1ODYtZDllMTEzN2YwMmI1
LzEvM3p0MjA4REdEV1kxQnFKU1p4eFNqalE1XzNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXRDC0EZ
Nq/MPTQd/q1IqsqgcoCV0Jb1vJH6hbemqWajbeksXr96gUYql2OjA+qswoKzcVPd
a4CY30QFw6xuteEHRRMVOoEZU6+kKaXbA+diCFsGy6GBL6lmQCd+FgYC9fz00ds0
Wd2UxzCIsMTU3ANLPZRzGlQx0JER2xCZLV77226FtzaR6qEyiSlSbUFfwUHwx1T/
lN/c0CIQ6F5VtroTsGOCGw+HdWZ0kAkCXroxougQCpLePn8PFzclqJjkGI9+Y29Y
4RFBma4XvVynQmhVO9Ke278+S2yWThxOgB4530+FxYiaaeP0r0jgaddUOs1pqNs6
f7zi1XgfuBXBdg==
-----END CERTIFICATE-----
Generated at Wed May 7 08:38:24 2025 by rpki-client