Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
File: 3itcv5Z6A0nYiXBLtNYfpSajHW8.mft (raw, json)
Hash identifier: bwRuKWj14dE3hxmJZOZkmKZ/sOJnm6q2Su2bDontwXM=
Subject key identifier: FF:F1:1D:63:A1:78:D9:09:6E:2E:65:9D:D7:AD:FE:E2:3A:64:6E:48
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial: 01967530387883BA014B10B8BBCDA147209A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
Manifest number: 144E
Signing time: Sun 27 Apr 2025 03:00:16 +0000
Manifest this update: Sun 27 Apr 2025 03:00:16 +0000
Manifest next update: Mon 28 Apr 2025 03:00:16 +0000
Files and hashes: 1: 3itcv5Z6A0nYiXBLtNYfpSajHW8.crl (hash: RXJMfOa4sKKQPqqPxYL1GBWBCRMzp3rbBrGYD8CXIMk=)
2: RmRTHkNLraqOOzazgFQdU_YCKkM.roa (hash: 5SoXabo2aLivwm4lm+kA69S7S7+v67Nc52d80muCgcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:38:78:83:ba:01:4b:10:b8:bb:cd:a1:47:20:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Validity
Not Before: Apr 27 03:00:16 2025 GMT
Not After : Apr 28 03:00:16 2025 GMT
Subject: CN=fff11d63a178d9096e2e659dd7adfee23a646e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:03:64:e6:95:73:ea:54:ad:00:b5:75:b8:18:
f4:fb:d1:5d:08:dd:49:79:53:54:c4:8e:50:9c:83:
51:25:eb:7f:27:ac:f2:20:e7:41:d1:eb:70:f1:79:
5e:32:7a:cf:47:e3:8b:2f:f8:5e:66:91:72:13:e4:
c3:de:d6:76:94:cc:3e:75:11:c2:05:02:5b:6f:93:
18:41:61:b2:7f:28:ae:41:e9:e3:7e:85:42:a5:68:
f3:60:e5:88:00:18:37:02:65:90:bc:ac:8c:23:02:
f8:5d:99:2c:f5:cc:71:e0:8b:bd:c2:e8:a2:db:2a:
16:8f:58:13:2a:38:ed:0f:c3:ba:ac:aa:df:d4:ba:
6d:5f:f1:f6:c4:ab:a5:11:84:cc:ea:89:34:bc:00:
a0:0e:45:a8:c1:c8:60:c3:fa:61:c9:d3:32:bb:81:
1c:5d:49:42:e8:a4:f9:73:ce:45:a0:65:85:36:27:
42:c2:f2:e6:c3:95:86:51:44:59:c2:d5:5d:9b:bb:
5a:21:f1:99:61:b5:1c:28:2d:c0:bc:8c:2f:7b:5e:
39:a5:9e:18:5a:4b:8c:ee:05:63:e3:ee:06:62:35:
2f:b6:25:27:10:fe:12:3e:2a:d6:7e:17:3f:9c:3d:
1f:fc:b5:86:d1:2a:a7:b8:c4:cc:58:26:56:cf:c1:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F1:1D:63:A1:78:D9:09:6E:2E:65:9D:D7:AD:FE:E2:3A:64:6E:48
X509v3 Authority Key Identifier:
keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8a:07:6f:25:b9:48:9d:b1:50:e5:e9:e6:67:84:5b:7d:e9:
93:f8:9d:f8:c2:0a:c3:f0:e7:2b:de:0a:44:f2:a3:c5:71:9f:
9c:9a:08:ef:d5:75:1a:61:73:59:98:a5:13:d0:95:ef:df:1f:
21:ab:b6:93:47:55:d8:fa:c2:15:31:18:54:04:d2:0e:cb:a3:
c2:97:0d:cd:ac:5c:67:9d:e8:03:da:f5:3a:10:45:bb:08:9b:
12:8a:aa:42:2b:f3:27:c1:25:6b:82:af:3d:18:a7:0c:f2:fb:
44:8e:71:ce:64:be:7a:88:11:41:3d:47:08:90:3d:ab:bb:22:
52:11:29:fd:80:c8:83:59:ac:d2:ab:1b:06:5a:97:55:18:4f:
dc:e8:13:6c:59:a0:2b:88:61:1e:20:70:ba:07:c1:a8:58:af:
9c:e9:41:29:b6:85:00:93:1f:45:a8:65:4f:12:8a:a1:e5:7b:
4b:89:cb:67:8d:e0:ca:75:cc:8c:d4:a9:5d:12:43:92:fb:4c:
87:92:c4:0b:7e:bb:c3:d9:9d:05:46:7f:f5:43:75:2d:e6:a6:
14:bb:94:69:9b:43:54:58:e2:f6:3d:2c:8e:a7:57:06:4a:a2:
42:9f:0f:f8:af:e4:26:9a:45:98:c8:e7:f0:f1:27:af:29:ad:
c6:ab:7f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:19:19 2025 by rpki-client