Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
File: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft (raw, json)
Hash identifier: GgywbnvCv37YGv6QH1uSgMwVS/0V9v/vd8p9vYSwKuc=
Subject key identifier: EC:D1:72:E3:AB:66:B9:1D:05:27:D2:52:19:FC:3A:08:BB:7C:2E:A3
Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
Certificate issuer: /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Certificate serial: 0196756759B75921189C62A9E3305FFCA682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
Manifest number: 0C42
Signing time: Sun 27 Apr 2025 04:00:29 +0000
Manifest this update: Sun 27 Apr 2025 04:00:29 +0000
Manifest next update: Mon 28 Apr 2025 04:00:29 +0000
Files and hashes: 1: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl (hash: vh6Y6tkh7jPFfmb77SFSRcesXFnJQNZL9GM1RTNO0qU=)
2: 9o3lcP-4u3MnLvx0kAlBujW4rP8.roa (hash: dshKKlZMjXCloMnE9oVR3HuOAnY6dIKys+Z7e0GPVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:59:b7:59:21:18:9c:62:a9:e3:30:5f:fc:a6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Validity
Not Before: Apr 27 04:00:29 2025 GMT
Not After : Apr 28 04:00:29 2025 GMT
Subject: CN=ecd172e3ab66b91d0527d25219fc3a08bb7c2ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:88:49:06:9f:cf:a9:16:37:f7:92:e1:f0:ad:
28:c3:41:da:54:58:fc:fd:b2:b8:0b:1f:7b:65:d9:
d1:f2:f4:3e:9a:40:4f:da:e5:e1:ba:70:a1:09:af:
73:9d:c3:40:ac:6b:d9:6f:a4:6b:75:0f:55:4e:fb:
7d:d0:3a:70:80:1e:31:08:2e:e5:f0:e8:e7:dd:c4:
1b:dd:0c:1c:f9:0d:06:57:d3:f0:57:5b:42:c9:a8:
21:2f:66:3b:01:d8:3d:8d:d1:51:7f:60:52:80:f4:
ad:65:d4:e3:16:fb:a7:b5:6f:a6:56:f8:46:b0:b9:
2c:22:36:ae:84:3a:39:94:36:49:de:d6:e8:ba:a5:
b3:7d:77:ff:4a:cb:b8:13:45:b1:72:21:d2:57:4f:
ca:57:de:45:f6:f6:b6:84:b2:3c:a8:ef:b1:3f:82:
df:f8:53:a1:57:65:95:2c:bf:9c:6c:ad:f3:47:55:
b7:52:5a:6a:7b:6e:29:e1:61:39:e0:89:3e:10:eb:
e5:0a:4b:28:bf:03:6b:59:1a:07:da:61:27:24:71:
23:b7:46:13:f7:c1:5f:4a:e6:89:0b:c0:9d:fc:7a:
b6:38:4b:cb:53:82:5b:62:98:51:bd:6b:0b:2c:c6:
d6:19:81:15:69:5d:8d:bd:dc:3d:18:87:79:8e:01:
e7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D1:72:E3:AB:66:B9:1D:05:27:D2:52:19:FC:3A:08:BB:7C:2E:A3
X509v3 Authority Key Identifier:
keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a7:3c:b3:bf:ec:b6:58:c5:56:5a:80:1c:1a:e6:d8:04:7a:
b0:d8:5b:03:bb:6d:ee:7e:93:92:c5:14:a2:65:87:50:fa:85:
d5:c9:00:e3:5d:e3:c1:49:86:55:4e:5c:e4:fc:7c:65:bc:d3:
a4:c9:e8:92:25:d8:3c:0a:af:42:ad:c6:a0:16:eb:dc:3c:fa:
64:d3:0c:11:a0:e1:70:89:45:3e:a6:3e:95:3b:e1:31:d5:dc:
f2:e4:12:76:fe:ae:d5:f9:88:91:78:ab:05:7a:b2:7e:b7:c3:
6a:cd:46:7c:a0:9c:2a:f9:57:e7:2c:58:96:72:c0:df:2a:01:
fe:25:98:aa:63:31:c8:69:a2:ed:82:8f:cb:d8:95:12:7c:4c:
39:7a:07:bf:10:7c:4b:bf:be:19:97:74:1e:78:9d:12:55:47:
dd:3f:a4:3f:c3:1c:58:cd:ab:12:c7:44:25:8d:22:09:09:c3:
3a:3e:a4:8c:5f:eb:c3:8e:58:17:5a:26:da:5c:57:32:50:ba:
fb:15:5a:4c:9e:b6:d0:c0:bd:cc:24:51:6e:07:81:82:d3:64:
35:0c:e2:c6:79:81:22:3b:b0:8a:eb:d3:f5:61:6d:8c:d6:d4:
72:0b:86:ec:54:85:db:e3:67:2e:12:fc:b2:45:a9:26:9d:0d:
47:a9:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:44 2025 by rpki-client