Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier: CCmfQSky4S9FLCiMrWQYkjmol0iRjju607NxqUvngaM=
Subject key identifier: 4A:91:C6:76:B0:92:4A:91:55:4F:0E:89:1C:1C:B0:A1:DE:80:77:91
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial: 019680C6FC1011877E7D6CD7D054241A7E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 09:00:46 +0000
Manifest this update: Tue 29 Apr 2025 09:00:46 +0000
Manifest next update: Wed 30 Apr 2025 09:00:46 +0000
Files and hashes: 1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: fVPON5O9hyedd2lXp3MfcRv+RZyV7b6kYEnRr0pv3xY=)
2: h-YJMMunIS0_gIZ5p26lgKRQyKc.roa (hash: bR5opkzZodiPK85GQ+pJiSPCVteQ0JuW261tZcQfTgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:fc:10:11:87:7e:7d:6c:d7:d0:54:24:1a:7e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
Validity
Not Before: Apr 29 09:00:46 2025 GMT
Not After : Apr 30 09:00:46 2025 GMT
Subject: CN=4a91c676b0924a91554f0e891c1cb0a1de807791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:8d:49:65:af:46:60:ec:bb:8a:cc:cd:a6:
5c:3e:7b:81:76:d3:75:30:28:5e:f6:1c:ea:fe:23:
22:55:63:f4:4c:5e:fb:1e:41:84:4a:c7:10:dd:43:
7e:9a:4e:47:c6:96:82:7b:dd:a6:36:f6:46:e3:f0:
a5:72:75:45:24:be:18:49:9f:df:3c:64:5e:12:0e:
f7:bd:42:5d:7e:19:72:d0:62:db:29:65:ae:55:ca:
ea:f7:87:c0:0a:e3:d8:fe:b0:21:ac:34:87:be:28:
8c:aa:af:5a:1d:60:6b:16:9a:02:01:4f:1e:58:5d:
62:46:22:a9:2b:47:13:92:68:e0:93:53:72:d0:dd:
64:e5:ee:46:21:74:ca:ea:50:60:38:3d:54:6d:55:
d2:6d:30:20:32:8a:d8:56:69:78:92:b2:db:2f:7d:
b9:d6:86:0f:f9:c9:13:4b:37:79:e7:36:ed:c9:ec:
34:f2:fd:99:9c:d3:c6:fe:0b:64:9a:33:66:af:7f:
7a:5a:0a:de:4e:30:1a:68:d9:a6:7e:88:d8:e2:1b:
e2:94:85:9f:81:46:05:52:0f:7d:78:ec:21:b1:48:
f4:a4:57:d0:d4:19:1a:d8:e1:c6:16:dd:5a:2e:7c:
d9:59:98:c9:1c:5a:4a:b3:e8:66:d9:cd:d4:b6:8b:
64:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:91:C6:76:B0:92:4A:91:55:4F:0E:89:1C:1C:B0:A1:DE:80:77:91
X509v3 Authority Key Identifier:
keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:83:57:5b:0a:43:3c:d0:ee:66:72:ed:da:0d:de:8a:17:1f:
51:71:e0:9c:a6:be:38:ce:12:6e:59:f2:98:22:b4:2d:cc:14:
bf:01:42:ec:05:a0:04:37:9d:80:8c:46:d7:02:b4:e5:ed:14:
1a:5d:00:22:81:d3:5c:27:46:f2:4b:3c:d5:5e:32:b3:e1:c2:
47:59:b8:7e:da:37:78:84:25:28:0d:aa:f0:e7:f8:5f:64:0c:
5f:a1:05:fc:92:b8:10:b4:41:6f:75:0d:ff:04:40:d5:25:aa:
87:b7:9f:47:1e:35:f7:da:a7:79:67:7d:23:aa:07:9b:79:fd:
e2:e9:04:ca:b7:6e:99:03:da:c7:95:0f:6b:6a:54:53:91:a1:
e4:53:a3:8f:17:4a:f9:65:bc:b1:68:e4:d4:a1:08:0b:ee:53:
ac:7e:96:88:c6:8e:da:bf:fa:ab:2f:c7:4c:26:43:8c:88:cb:
6c:c1:f4:f2:e3:47:13:66:0f:1f:6e:d0:f8:51:fd:f0:86:58:
3b:09:05:18:7b:4c:d3:31:98:95:c6:ed:36:64:52:0f:f2:44:
c6:84:24:a2:3e:6c:cc:a2:be:eb:54:5d:7f:e8:af:c5:3d:db:
72:d1:d4:23:3f:d2:85:a3:a8:2e:06:f9:6e:1e:dc:a4:37:e2:
88:ff:e5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:43:54 2025 by rpki-client