Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
File: 3NywK2HjoV6sNzuZLg4aZUX2HlI.mft (raw, json)
Hash identifier: JONXWP0sCYcXjfAOB7CxrtnZxOA3HEhMM4QUUti27mk=
Subject key identifier: 16:3A:3D:60:0D:CA:29:D7:D8:35:79:3F:4E:B9:4E:52:55:5C:03:E8
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 01968B4A7D6DE6E5BFE4BB67F46F52DEF013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 10:00:36 +0000
Manifest this update: Thu 01 May 2025 10:00:36 +0000
Manifest next update: Fri 02 May 2025 10:00:36 +0000
Files and hashes: 1: 3NywK2HjoV6sNzuZLg4aZUX2HlI.crl (hash: wTlzOv1CZ3d6wjJIjIplfrVzkACBMLooznRICUnEZJg=)
2: O3I8fzz4GA8viyeptOfjUJ2mnRw.roa (hash: MhSpfjBUjJxXqy4aU0rHbneKVULz0h6JWSZvHTRBN24=)
3: ovS3rx1XoRtGLlvdJ72CyzvNZcw.roa (hash: lov3tLPiy71ecc5+P9JXxH2Fu9PCJbxZNtxQg4EVWM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:7d:6d:e6:e5:bf:e4:bb:67:f4:6f:52:de:f0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: May 1 10:00:36 2025 GMT
Not After : May 2 10:00:36 2025 GMT
Subject: CN=163a3d600dca29d7d835793f4eb94e52555c03e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:20:a5:59:21:9e:a9:f8:3d:56:da:3d:2d:
24:b0:39:8e:25:68:61:1b:51:8b:61:76:4f:71:21:
0c:f1:8d:a0:ce:c9:14:5e:8d:3a:39:6b:63:6f:26:
40:01:6f:0b:a7:cc:3d:f2:9c:a9:2d:d0:51:4e:e5:
08:76:7c:97:23:68:4f:bd:4a:3b:24:ab:bb:39:ef:
d4:c9:cd:63:37:6e:93:15:ef:14:2c:38:61:6f:1d:
3c:6f:b2:4f:b0:84:2c:52:a9:72:93:68:44:c1:e8:
46:26:c9:31:37:11:5e:af:b0:5a:f4:c9:bb:45:ec:
5b:db:91:41:80:9c:bf:dc:dd:13:73:a5:ee:35:e0:
34:75:02:29:68:35:4f:06:d4:5e:92:58:6f:6c:6e:
2a:04:a7:91:8f:00:b8:83:25:8a:e0:dc:1a:b9:a1:
c2:4c:87:87:44:34:5b:db:56:9c:08:36:b1:0c:9e:
8a:fd:45:41:86:e1:3c:cb:f3:29:05:3b:b2:19:63:
84:e2:1b:bc:39:05:e2:c8:c3:71:e1:e6:5c:02:ef:
cd:0c:88:e1:5d:8c:23:ef:c4:53:e8:16:74:9e:77:
59:e8:00:7d:1f:56:8f:14:3b:f9:34:38:64:44:f0:
10:fa:ec:11:2e:00:81:ed:bd:51:ab:99:a4:bd:19:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3A:3D:60:0D:CA:29:D7:D8:35:79:3F:4E:B9:4E:52:55:5C:03:E8
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e9:0b:c3:ad:2d:92:e3:aa:2d:73:c2:f1:ca:23:66:9b:11:
79:54:43:96:7c:46:37:d1:4c:e1:53:fb:e5:c5:12:2a:29:0c:
23:24:c1:61:8c:ea:f5:aa:d3:35:7b:85:b2:f7:19:a3:4a:98:
50:de:54:98:cd:e7:bf:3d:c7:46:5b:91:6b:18:e2:2a:d5:7a:
6b:15:1a:16:c7:f4:f6:b0:50:a0:7f:e2:df:cd:22:15:f6:03:
2c:1b:e0:62:ce:4d:3b:9b:e0:29:ea:25:40:30:59:c9:8c:fc:
f8:f5:1d:ea:da:4d:4e:ba:a4:d1:98:2a:75:f4:81:e7:a1:88:
63:a9:4a:cb:23:f0:25:4b:bb:37:3e:49:a6:f0:83:66:ee:0a:
a2:94:5d:2a:61:00:72:da:e3:6b:6b:48:9d:f1:8c:6d:60:6a:
07:b1:b0:b6:43:7c:be:fe:a2:7b:6a:4c:ab:63:34:10:58:8b:
b2:a1:bd:39:43:29:52:d6:87:b9:a9:46:a4:23:ce:97:a0:9e:
dc:23:83:21:6b:9f:76:11:53:d9:bb:6a:a6:86:38:b1:eb:60:
08:21:5f:92:36:1d:c5:b8:e0:70:9c:a9:80:92:7c:8c:eb:d6:
86:75:2a:d1:7b:e6:85:36:c8:1b:d7:30:4b:b7:56:48:2e:13:
3f:57:10:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:00:54 2025 by rpki-client