Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: EF9iSm5vkPrTonnZhSORjYOV0FSkU9G77CPg2qb2Rbo=
Subject key identifier: 39:3F:45:AE:EE:AE:9A:FB:74:2A:D1:66:49:AE:4C:D9:5C:72:2D:46
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 019679B1BF665D9939A92C7EB16478795C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 00:00:13 +0000
Manifest this update: Mon 28 Apr 2025 00:00:13 +0000
Manifest next update: Tue 29 Apr 2025 00:00:13 +0000
Files and hashes: 1: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: 6vCS9PUTQOU9UctewC76QsT9X0InPMb/Zzqci/1oZVU=)
2: zwiEAg55TtHyIaM_PRVFnX4DSAo.roa (hash: ylKaMThBpY1ZvZheIftHUUCXqnEHukLo3wFRWG0DpZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:bf:66:5d:99:39:a9:2c:7e:b1:64:78:79:5c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Apr 28 00:00:13 2025 GMT
Not After : Apr 29 00:00:13 2025 GMT
Subject: CN=393f45aeeeae9afb742ad16649ae4cd95c722d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:63:ce:82:15:29:75:95:cb:44:f4:6a:9f:
8c:24:3c:35:dd:4a:2c:1f:d9:2c:25:ee:da:25:21:
73:a4:5b:bb:bb:ca:bb:4e:6e:1d:3b:b9:53:3a:ca:
8a:f8:61:14:1f:a4:96:e8:cf:35:42:0f:53:0a:67:
32:c4:93:c7:84:db:0c:12:33:c3:4d:76:c8:53:c3:
d4:30:7a:51:1d:7e:3f:fb:58:46:53:eb:db:ad:be:
18:bf:7c:05:fa:76:46:46:1f:23:9e:60:eb:aa:b2:
61:5b:41:19:07:e7:83:1a:6a:35:38:81:bf:ac:c5:
65:0e:dd:5a:f1:14:e5:ef:eb:f7:db:11:65:5c:34:
be:d3:2c:cb:01:c1:c3:c6:c1:1a:a4:05:ec:33:de:
b2:9b:3e:9c:83:c8:3b:6a:d7:b3:7c:e6:08:12:6f:
b9:8c:c3:71:b5:fa:b1:4f:0b:f8:9a:36:e6:99:4a:
9c:b7:c2:e6:d2:4c:83:9f:0f:98:ec:4d:51:9d:d8:
2f:0c:69:c8:ae:ee:6b:ee:cf:18:71:9f:40:44:99:
7d:e0:20:17:00:dd:58:56:a9:29:ea:06:f1:e6:18:
78:a8:05:bc:cc:6c:ff:6f:9e:a2:86:d4:59:c7:da:
cb:cc:ca:50:32:d3:c8:ea:95:43:ca:5b:c0:39:70:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3F:45:AE:EE:AE:9A:FB:74:2A:D1:66:49:AE:4C:D9:5C:72:2D:46
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:69:f3:10:08:01:79:9f:a3:93:1e:b5:4a:f4:46:1b:92:99:
02:3c:0c:d4:43:fa:e1:49:89:15:ef:41:18:15:d7:7f:16:b5:
d1:8f:b8:e7:5f:d5:21:f4:c7:f5:16:cf:23:c1:db:a9:1f:3e:
b5:df:a8:39:57:6a:4d:5c:e7:38:17:ef:e3:a0:a8:12:40:a1:
79:8c:0c:ce:44:61:11:70:1c:98:6e:a5:8b:f0:8a:dd:bd:7d:
ca:18:e9:67:72:d6:db:5f:9e:c7:cd:fd:82:5f:b8:ee:8e:8e:
ce:d7:d8:cb:e5:6e:1c:37:ef:9d:dc:c0:c4:15:2d:66:8e:7f:
e5:e3:cb:06:8b:35:cb:2c:85:ac:b6:50:8b:df:e2:19:8e:9d:
0b:4b:59:d2:07:0c:c3:f1:fc:7d:77:48:74:38:e8:e4:86:e0:
1f:b4:56:aa:6d:7b:9d:51:72:a5:79:be:49:4f:6f:53:30:04:
c6:3b:8f:1b:b2:59:78:d3:49:76:96:3b:83:fe:79:08:38:9f:
99:bd:24:a8:d5:49:f6:00:9e:22:2f:ca:b4:b5:8e:5d:7a:7c:
d2:ce:f9:6c:60:a1:2b:57:5d:5e:58:35:8a:60:6b:9c:5a:1c:
e8:f6:c6:26:6f:b5:45:11:72:68:7c:10:c2:26:f4:07:07:74:
ed:20:54:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:39:47 2025 by rpki-client