Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier: oX3WQZlUvcbkh29VSYJh4WzVvjD6PmZaj84URtFcFsY=
Subject key identifier: A3:0A:33:68:FD:B0:11:59:23:88:27:92:3F:9B:B9:28:74:15:BD:B8
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 0196821014431F9BE447D6A89857BEBA4FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number: 0B15
Signing time: Tue 29 Apr 2025 15:00:13 +0000
Manifest this update: Tue 29 Apr 2025 15:00:13 +0000
Manifest next update: Wed 30 Apr 2025 15:00:13 +0000
Files and hashes: 1: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: VIOminXUlkYVDqTQTBlFVegYNTwqj93mWW2zHvI1otU=)
2: hfSj4Acr0ZdBdVZF-bmfhSWxDR0.roa (hash: qMvzKdtsac1CrAS5/GB10mnE0HZEb+d2b/OglfbpJc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:14:43:1f:9b:e4:47:d6:a8:98:57:be:ba:4f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: Apr 29 15:00:13 2025 GMT
Not After : Apr 30 15:00:13 2025 GMT
Subject: CN=a30a3368fdb01159238827923f9bb9287415bdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:72:81:49:df:77:d4:94:79:f6:09:85:4c:
24:e6:5f:39:75:22:e2:a7:da:e5:9d:e2:cd:fc:cf:
6e:6d:cd:97:d0:9b:2b:76:51:19:93:0d:3b:07:22:
7f:f7:51:af:4c:68:de:ad:81:d9:49:6f:69:42:75:
b0:8b:1b:91:49:9c:fa:01:aa:bd:65:25:71:30:d1:
c9:bf:75:20:3c:3d:07:16:9d:40:3f:8c:e7:67:16:
a1:e8:27:a3:e2:2b:9d:96:31:19:1c:eb:31:01:df:
b9:d1:3b:cf:8c:df:f4:94:84:ce:9f:4c:9d:7f:e9:
00:2d:6f:10:c3:9b:c8:5d:4b:9c:84:c4:6c:c5:bd:
b3:73:6f:58:4b:ac:99:f2:d9:42:35:3b:87:24:2b:
4b:d2:d6:1b:65:32:fa:65:b7:e2:c3:3b:35:d8:cb:
b7:07:e8:4e:c8:67:76:fa:60:3e:a5:c5:cc:b1:14:
19:5a:ad:5c:4b:37:f4:cc:d8:06:e5:15:38:07:d8:
87:c6:f3:3d:02:8d:52:68:5c:cf:3a:f7:db:11:59:
ee:67:60:53:34:f4:6d:0d:ec:c7:eb:6d:97:89:38:
f6:97:3f:b0:06:c8:15:1c:49:43:33:8b:d6:53:b5:
e7:cc:f0:68:1f:ef:1f:5f:c8:9c:96:3d:73:17:55:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0A:33:68:FD:B0:11:59:23:88:27:92:3F:9B:B9:28:74:15:BD:B8
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e0:58:85:c9:d0:a1:19:63:f4:c2:dd:3c:11:11:62:b7:5f:
68:e8:f0:6d:f3:2a:ff:51:e5:27:91:7a:01:05:ae:7e:e7:36:
3e:38:19:e1:4d:22:07:c5:d5:31:3f:6f:96:9d:00:43:e5:f7:
c6:62:64:da:2c:32:67:10:22:2b:81:3d:36:b2:79:a3:fd:a9:
b2:4b:f6:2f:98:9f:17:d6:b5:a3:52:b9:3f:d0:7a:12:3d:b6:
e1:a3:b5:97:45:63:da:51:7e:23:44:37:9f:98:21:46:d7:d8:
e2:b3:ce:17:46:6b:79:c3:d7:4b:67:9d:d2:c8:7f:86:31:53:
3b:eb:bc:02:e6:67:08:8b:f3:bd:55:7f:d0:98:f7:f8:85:d0:
72:0f:5a:ee:91:50:43:f1:c9:1a:a7:93:e0:ba:34:d2:27:48:
4f:8b:4c:b0:18:83:a3:1e:56:88:2e:7f:65:08:ae:60:4a:e9:
c9:c4:75:b6:b4:9e:1e:44:71:d1:05:c0:9d:36:fa:0b:38:8b:
d0:91:50:b2:d0:05:64:b6:8c:1d:76:22:0c:33:52:14:a9:89:
31:31:77:8a:be:79:c5:e1:6d:11:57:e7:64:ed:77:99:86:f1:
a5:f4:41:24:ff:7f:e0:7b:6f:b0:bd:d7:47:fd:d0:15:1f:44:
ff:73:e7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:54:53 2025 by rpki-client