Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: vrAgeIElSULfY4xR6WFa/PNIFV2W232xmUstF6k3bdk=
Subject key identifier: 89:94:62:2F:FC:30:50:4A:48:A2:FA:86:B3:A5:3B:56:4E:87:BF:F9
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 019686C88A020C0BFEF0F688590EAA02C939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 1521
Signing time: Wed 30 Apr 2025 13:00:11 +0000
Manifest this update: Wed 30 Apr 2025 13:00:11 +0000
Manifest next update: Thu 01 May 2025 13:00:11 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: bi0xc2yIHCjGghAvhCo+ZbvN+kh7CD3keWLE3wZO5wc=)
2: 4iSMhBF2xZj26lycKx2j1fhAtX8.roa (hash: 5NzSosDSsdztn+kQLtfES98hJSpuF/nYSnJEW3vMqlE=)
3: MCaozM05EgQpOj9KWtfk_EMYWf0.roa (hash: I6Y0DISsiTz+oGPxMCPt4OQoH1zQxzx22/aiFTgMNtU=)
4: qMfArzwkX8G0WDNHJN4uX2h7ong.roa (hash: J4HIUTvl0CZ/07KSIMq+Jwo8Hxn+rCK5OIiJhW9OzqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:8a:02:0c:0b:fe:f0:f6:88:59:0e:aa:02:c9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Apr 30 13:00:11 2025 GMT
Not After : May 1 13:00:11 2025 GMT
Subject: CN=8994622ffc30504a48a2fa86b3a53b564e87bff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:5c:f7:27:2e:b3:d5:0f:82:d9:b1:31:2d:
21:03:16:68:a4:ca:23:72:97:97:4d:a9:c6:be:83:
ab:9f:c5:ed:8f:33:87:07:80:b3:fb:a2:e1:d8:bf:
65:9b:60:1b:ce:dd:5b:eb:5c:c5:71:63:b7:22:f9:
34:bf:67:5c:48:16:75:91:37:ac:2f:be:83:cd:a2:
2a:50:a7:63:2a:7a:9a:dc:81:b4:9d:02:76:80:a9:
58:28:4c:6a:b6:00:f1:76:d1:0a:65:0c:11:a2:00:
38:08:00:0c:f9:56:51:64:bd:86:b2:27:88:df:9e:
16:05:4b:97:e6:f1:bc:0c:1a:bf:e0:06:0e:be:6a:
71:ca:56:ac:bd:4e:91:92:fe:75:c8:b3:c7:57:df:
64:ae:f2:12:e8:34:72:75:b1:df:ba:c8:22:90:fc:
b6:f2:e1:11:9c:5d:71:a5:36:14:2f:eb:8f:99:43:
14:fe:c2:ac:c0:4a:ff:38:16:6c:13:fd:f6:b7:a2:
e8:97:0a:a0:bf:dc:c9:83:9d:64:31:11:83:03:40:
16:4f:d8:8d:c0:d0:12:8b:15:f1:c8:54:07:cd:2c:
db:6a:71:51:d2:df:59:60:37:dd:ef:32:8e:26:f3:
0f:57:49:29:a9:2b:30:96:45:4a:67:9e:b3:a8:9e:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:94:62:2F:FC:30:50:4A:48:A2:FA:86:B3:A5:3B:56:4E:87:BF:F9
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b4:e5:4c:41:7b:23:14:45:b2:7e:5a:16:61:70:6d:fc:29:
82:3c:d8:a9:6c:df:ab:ec:c1:a2:21:92:dc:fe:7f:c9:06:2f:
a2:a3:6c:d5:cc:28:23:56:3a:19:ec:3b:92:9e:e0:41:2c:11:
d4:14:0c:86:74:50:8a:7e:68:2d:1e:37:57:2f:aa:a3:04:d1:
c6:14:50:69:b1:65:5f:e8:3b:a3:00:b9:80:82:8c:da:5f:30:
15:53:c3:a2:71:3c:40:90:ac:77:54:a7:cf:9e:df:0d:3d:f3:
4d:d0:0b:d8:e4:bc:eb:f9:25:f7:10:90:0e:cd:d8:8e:dc:86:
04:7f:b1:1d:15:7e:80:cf:26:e5:3d:ca:5c:33:3e:d1:d5:35:
96:65:bd:e2:c4:72:11:cb:7c:f4:77:9a:48:b3:0d:fc:df:0c:
64:d1:60:0f:85:2c:46:3c:29:4b:0f:a6:1c:da:2a:5e:f4:63:
e3:d7:02:4a:4e:de:a5:7f:6c:ad:b1:0c:3b:a8:52:db:7e:7a:
f2:ee:8a:eb:65:92:c4:f0:89:ba:2f:69:74:ab:79:2f:f8:9d:
6d:6c:4d:04:55:2b:09:fb:db:85:88:bf:2d:b7:8d:ae:9f:c4:
b8:a8:26:13:2c:a2:bb:4e:de:c8:1d:9c:ed:ab:a2:b1:f8:9d:
d5:0e:85:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:41:36 2025 by rpki-client