
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
File: dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json)
Hash identifier: LUEGZqKOKafZ2NqP/LUf0jFyZ2AzNyKHe5prq8WEUbY=
Subject key identifier: BD:6B:7D:BB:2B:67:C9:0D:8A:3E:86:56:BB:B0:4D:69:E0:94:CE:DD
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Certificate issuer: /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial: 01968134C100C832B15565042BEB695C38F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 11:00:40 +0000
Manifest this update: Tue 29 Apr 2025 11:00:40 +0000
Manifest next update: Wed 30 Apr 2025 11:00:40 +0000
Files and hashes: 1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: Va4B/TLLoXPCOZam0QatCAzTkRJsuPwMt4B/REgONSI=)
2: fOC0mLVVaWFlMUvT0z_PddjsHw8.roa (hash: BmfmQSKAMKow/2vkZFChgOrrtOQvA5Kh+ohq4iFZyJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:c1:00:c8:32:b1:55:65:04:2b:eb:69:5c:38:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Validity
Not Before: Apr 29 11:00:40 2025 GMT
Not After : Apr 30 11:00:40 2025 GMT
Subject: CN=bd6b7dbb2b67c90d8a3e8656bbb04d69e094cedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:51:7c:96:26:d1:51:52:10:ed:81:1a:6a:b6:
89:58:fe:4e:b8:f3:73:4e:7e:50:5f:ea:d0:13:d0:
2a:e3:4c:5f:d6:32:4d:e2:ac:df:e9:c1:78:1f:5e:
b1:4e:5e:f4:9f:48:e3:4e:1b:c2:33:3b:6e:14:0f:
d0:a8:c9:6a:01:ea:75:13:73:da:91:03:a4:df:0c:
8c:77:22:6f:89:b6:e3:97:29:3e:a9:18:61:ad:71:
59:6e:1d:0b:5e:3e:41:f4:4d:b9:99:a8:1b:01:da:
a7:80:ce:2d:95:ea:33:59:6f:d2:0c:64:4e:59:05:
3b:3f:81:72:f8:81:68:8c:09:6e:cd:05:73:74:bc:
63:6a:5a:01:b0:1d:ef:43:45:dd:60:74:1d:18:b8:
9c:2f:8e:26:af:85:63:a7:94:44:7a:33:b2:10:5b:
0c:9c:91:dc:34:fe:3f:09:8b:e4:5c:6b:2a:6c:a1:
b3:ee:46:64:f3:7a:27:9b:f7:6e:2b:5f:e6:da:c3:
f0:57:48:70:24:02:98:13:7a:4c:c3:cb:cc:34:58:
20:a5:ce:69:d8:1d:0d:f4:73:36:43:86:2c:c7:11:
57:73:9b:f4:df:92:c6:86:38:3a:5a:cb:d6:f6:9d:
c2:3b:b1:b0:fd:80:4d:70:e6:02:57:b7:1e:58:bc:
d2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6B:7D:BB:2B:67:C9:0D:8A:3E:86:56:BB:B0:4D:69:E0:94:CE:DD
X509v3 Authority Key Identifier:
keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e5:83:81:d0:42:b0:d7:e1:17:1e:51:a5:a9:d2:a3:07:a3:
0c:16:45:83:98:e5:35:70:99:fa:26:09:08:2c:be:5c:1d:19:
70:2c:31:99:81:ff:2d:96:98:9f:b4:4c:9d:e6:3e:09:8a:28:
39:18:44:03:0f:9d:67:64:26:c0:56:87:10:47:2d:04:4c:4c:
76:ff:8e:28:63:e6:50:0b:ad:a6:cc:e4:86:d9:31:2e:b6:1f:
b0:e3:15:b3:7c:00:50:92:8d:87:3e:30:c9:51:1e:50:13:bf:
e3:34:55:a0:d1:ec:06:9c:5a:21:35:a1:90:a5:c2:8d:ad:17:
f0:c3:81:58:63:ef:6f:ee:e1:cd:75:9d:15:a5:9c:cc:6b:4a:
e7:72:07:58:27:ca:f4:ca:a4:f4:92:bb:03:7d:27:7d:48:c9:
e6:4f:e1:5c:e2:84:c1:b0:1e:2b:12:aa:62:01:dc:30:7b:f4:
7f:6a:41:17:89:cf:19:ba:15:03:6f:98:8f:aa:18:39:d2:f9:
7f:c8:c2:70:d4:90:b6:5a:80:c3:cd:83:82:5b:4c:97:51:da:
10:b5:dc:de:91:56:90:4b:fc:41:1c:83:25:48:aa:82:ef:75:
31:6a:ca:99:69:d0:3e:c9:8f:c5:dd:05:05:d7:a3:70:47:fe:
49:13:0b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:54:36 2025 by rpki-client