Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.mft (raw, json)
Hash identifier: 5qX3D8BHGOnfAYQk+m7yZ35/Us1cqwHkydb+PEddM3k=
Subject key identifier: 82:ED:B4:E7:57:11:85:EF:D4:54:27:F2:CB:47:A9:38:64:F7:2B:6D
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 019682EC7184ED9638BB765CC7BC34979714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 19:00:55 +0000
Manifest this update: Tue 29 Apr 2025 19:00:55 +0000
Manifest next update: Wed 30 Apr 2025 19:00:55 +0000
Files and hashes: 1: 3qRuqueu8vRP5mAWK7nccNZSWvE.crl (hash: GirwRakmp7GcAu9DJZMCo3pgddHcFqf1G9qW+wWUQWg=)
2: 9euEZiQBZa0KQy87mhddaAGMyJs.roa (hash: SlkEYhw31htGhY3rwyORB+KNW056wx1mf03bV0slrXo=)
3: PbQAq4tBfBzJf67NNR29Pj0FkmA.roa (hash: 68zQoRFiAUVZyRagTzVHGcIdd/jEkcY9EEgWfXz5qFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:71:84:ed:96:38:bb:76:5c:c7:bc:34:97:97:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Apr 29 19:00:55 2025 GMT
Not After : Apr 30 19:00:55 2025 GMT
Subject: CN=82edb4e7571185efd45427f2cb47a93864f72b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:6e:83:8b:7b:c8:b6:93:1b:a3:b1:9f:40:
f2:a9:01:f1:6a:78:8e:ef:bc:0a:64:f8:ff:11:f1:
c9:b0:a2:86:ca:75:d4:7b:c4:9d:05:c7:c4:ad:f9:
83:4c:bc:b5:04:df:4b:96:37:19:95:f8:67:5f:6d:
6f:29:89:40:a1:9e:21:57:58:0c:09:d6:9b:d5:91:
ad:da:e4:95:8a:d7:0a:70:ae:3f:d5:d7:71:00:d5:
f6:7c:e1:c5:cc:32:af:45:e7:82:4c:24:95:8c:e7:
7a:dc:e2:a2:11:15:45:7d:8e:2f:af:55:c4:7b:8a:
bd:3a:3f:b4:9a:01:a3:35:ba:e4:19:6d:e4:8e:17:
02:b2:ef:83:ac:4a:44:e1:40:39:d8:99:a0:0e:73:
ef:cd:45:b0:5a:0d:4c:15:f3:e5:b0:e3:e6:a0:11:
9a:74:e7:3e:5e:7d:54:f0:3b:73:55:43:1b:73:c2:
95:d9:ea:50:95:45:c9:e5:67:83:28:bd:74:48:c6:
ba:ef:bc:26:fc:84:cd:97:56:db:46:c1:3b:6c:43:
cf:3a:4a:0c:39:16:0a:ed:ea:cf:29:85:4d:34:72:
99:7b:00:cc:e3:93:6d:1e:7e:16:fa:2d:83:58:88:
6b:9f:1a:27:5e:48:67:3f:c2:4f:44:2a:5d:36:36:
54:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:ED:B4:E7:57:11:85:EF:D4:54:27:F2:CB:47:A9:38:64:F7:2B:6D
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:25:b6:04:f9:97:eb:ab:bf:31:24:28:50:3f:b6:88:3d:af:
6d:2e:a1:49:84:63:24:7e:e9:0e:34:24:f7:83:f6:a3:13:2f:
a0:a0:b0:cf:1e:1e:e9:e1:dc:0d:0d:3d:61:8a:c2:30:00:87:
1d:1a:bd:76:5c:d8:7e:cf:5b:8c:97:0d:e8:ea:3d:e5:05:b4:
bd:fc:db:19:fc:76:5b:e4:dc:da:90:b4:bc:74:72:d1:a4:8a:
4b:6a:41:41:2a:c6:8f:f6:22:df:42:19:54:dc:f0:d8:a4:ba:
6e:19:e7:e4:2d:3d:c8:8d:0d:3b:d6:e1:d0:ee:4d:b3:59:96:
0b:a4:91:6e:46:eb:ea:78:53:5e:88:2d:4c:82:fe:77:74:7a:
a4:05:61:6f:28:55:1f:93:fe:e7:85:ae:d2:20:75:4c:85:fb:
23:b2:e1:bc:bf:3b:f1:5e:22:b3:1b:45:47:23:09:70:da:07:
02:5c:b1:ab:87:93:13:fb:fe:9a:ab:b6:7d:14:3c:e6:69:8a:
6c:43:46:46:a4:ce:53:b8:66:37:9f:01:20:1d:1f:b3:2c:a8:
56:e2:66:a2:b0:ed:8f:64:5f:43:f2:f4:d8:12:cb:ba:7e:f8:
f5:de:55:35:99:a2:62:51:61:89:18:14:bf:fa:e3:1a:d9:5e:
85:00:2f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:53:14 2025 by rpki-client