Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
File: 3SSW_v-ZEna9G4Uza3aXqYAPhME.mft (raw, json)
Hash identifier: Ix/MQHkTO5skSGfYJIHxd3rIPFGVhLbU85qT/64LCA0=
Subject key identifier: 20:43:3A:50:E1:79:08:F0:89:55:B0:E1:2F:97:F9:51:9B:B3:09:B1
Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
Certificate issuer: /CN=dd2496feff991276bd1b85336b7697a9800f84c1
Certificate serial: 019673AFEE64FDCC20A3F6795B83BFA5D720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
Manifest number: 12E7
Signing time: Sat 26 Apr 2025 20:00:31 +0000
Manifest this update: Sat 26 Apr 2025 20:00:31 +0000
Manifest next update: Sun 27 Apr 2025 20:00:31 +0000
Files and hashes: 1: 3SSW_v-ZEna9G4Uza3aXqYAPhME.crl (hash: DrmxNw0JrGldh07cd5Tzvm6RGyhZoDzyiytLxYS0cFA=)
2: _TZfk1Rmeyf1zvc7aTw1N_o9jl4.roa (hash: YhjRwkXWYnkbx6aMihX7dtN/B/p9Fk3n2XWBk8oSMZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:af:ee:64:fd:cc:20:a3:f6:79:5b:83:bf:a5:d7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1
Validity
Not Before: Apr 26 20:00:31 2025 GMT
Not After : Apr 27 20:00:31 2025 GMT
Subject: CN=20433a50e17908f08955b0e12f97f9519bb309b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:de:39:b4:d5:11:da:a6:e7:cb:28:bc:91:
3b:bf:55:d1:c0:4f:6f:47:5d:59:7f:56:e5:e9:31:
71:2a:32:4f:1a:85:ef:18:e1:c5:2a:f6:3c:93:95:
fd:71:2e:3a:6b:06:64:d3:38:0d:73:f6:03:96:9d:
12:0a:08:18:2f:87:70:3c:93:0b:e8:d3:85:66:48:
7d:e9:bb:11:ad:62:fa:a9:ec:90:f5:76:44:e1:0d:
26:8c:66:b0:05:d3:af:8c:34:52:d0:34:48:7f:d8:
8a:ed:b2:bb:02:e2:35:b1:3e:03:82:99:68:2b:8f:
1e:61:97:84:bd:3e:7f:78:28:6c:b1:f7:b8:3a:6e:
fa:11:ed:ee:8a:b6:81:b1:40:0a:b6:a1:d2:77:ad:
fe:10:e0:fc:89:a8:58:e0:f8:9c:f5:c6:3a:d5:90:
4d:8d:f2:30:6f:9c:59:d2:a4:fc:b6:15:16:1d:df:
74:a9:c4:a8:01:30:97:97:94:c9:58:ff:90:48:14:
9a:1c:d7:95:d8:ff:d9:58:50:c0:68:6f:7b:0d:dc:
53:b6:40:c7:11:b5:2c:c4:ce:be:22:58:91:ed:a7:
16:1b:d5:8f:3a:e9:47:a6:e3:29:93:f4:aa:24:b3:
06:db:0d:30:06:e0:e2:aa:6e:d1:27:74:cc:fc:64:
19:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:43:3A:50:E1:79:08:F0:89:55:B0:E1:2F:97:F9:51:9B:B3:09:B1
X509v3 Authority Key Identifier:
keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:50:79:fa:52:8c:28:eb:fb:8f:4a:c6:6f:49:55:c4:37:f3:
8b:e9:bb:7f:f5:56:f2:81:60:ab:1a:c1:f6:11:2c:59:07:4d:
da:39:75:9d:9b:97:fc:9c:03:f8:b4:aa:1e:ce:95:02:de:74:
59:31:01:14:6b:6d:40:7f:30:6c:ce:63:3d:a5:af:7e:c3:37:
b0:3d:29:27:0d:d1:b4:37:49:fb:e3:3c:09:b4:a9:fb:12:84:
b5:ba:c8:70:56:9a:95:c1:06:4c:22:6e:43:6a:d8:a4:ce:b0:
c4:da:23:01:ba:0c:71:c7:80:5e:22:b9:98:34:36:13:9c:ac:
fc:10:62:01:6b:fa:6d:47:15:3e:b9:69:36:2c:7e:ba:58:a1:
28:44:bf:aa:be:13:c8:3d:95:04:cd:78:f6:40:f2:ab:80:05:
98:30:bb:ee:0a:36:cb:6b:46:fa:50:11:f9:e7:2d:3e:7a:ed:
b7:8c:73:78:5f:83:2f:f7:8e:c9:92:c3:18:61:7b:6a:e3:d5:
f7:3e:8a:04:77:12:1a:77:de:b6:ba:59:cf:20:5a:dd:c6:41:
38:3c:88:90:af:cd:15:3c:2e:98:31:e5:10:27:8e:db:e9:60:
a4:04:40:14:d7:64:64:af:69:17:5f:65:a0:c2:7a:d6:a9:94:
1d:ca:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:48 2025 by rpki-client