Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: VfbMMJu3oK1l1CKwWE1cbxJNBjq+6d2avBEc1jx+Dfw=
Subject key identifier: 12:DC:FB:9D:99:74:82:68:FD:7E:D0:F2:0D:98:B1:BE:CF:35:99:99
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 019673E712BA7D7ED2676EB837744E47B1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 1510
Signing time: Sat 26 Apr 2025 21:00:45 +0000
Manifest this update: Sat 26 Apr 2025 21:00:45 +0000
Manifest next update: Sun 27 Apr 2025 21:00:45 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: UdOWZVf+RrRr/JmcweqpiFCg9Dam8891YWhnmibXa8U=)
2: lGIx-o92jKFHwjzv3WLOo2W-Z-M.roa (hash: Q5Tqe0EHcZZYvwuXt1YX2uqSKiJ+UhyPnyv5Ni+/PxY=)
3: wV8zvnBET2OmPNrrtE4SsK5y3DM.roa (hash: WHZUiMThERHZ0hfVjMipF4WGFlL19sh6184Ce9U7WFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e7:12:ba:7d:7e:d2:67:6e:b8:37:74:4e:47:b1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Apr 26 21:00:45 2025 GMT
Not After : Apr 27 21:00:45 2025 GMT
Subject: CN=12dcfb9d99748268fd7ed0f20d98b1becf359999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:0b:f2:15:d1:5b:2f:29:c3:c9:75:92:f0:
42:16:1f:81:a0:db:3c:21:e7:f9:51:c2:cc:ae:03:
42:93:b9:ab:c1:88:5a:a0:50:fa:fa:66:a9:f9:44:
52:ea:3d:7e:b9:58:19:39:7e:0d:92:13:95:a5:a8:
6c:16:b5:56:1c:21:4b:41:80:a4:d5:26:79:c3:bf:
43:b9:68:51:28:44:8c:c8:eb:3d:58:89:b2:bc:4b:
f2:b2:33:6f:72:23:99:e7:33:9b:85:8a:d5:e7:be:
18:04:d5:01:ff:63:4b:01:78:39:93:17:f1:49:75:
f8:64:88:69:2d:73:d9:87:b8:a0:53:38:ab:ad:8d:
be:b2:74:f3:d8:c8:65:59:df:61:dd:52:e4:7f:b1:
18:9a:d6:49:ff:57:de:e5:fb:17:6d:6b:3d:f2:75:
52:23:0e:f6:64:d1:94:ac:99:48:78:4d:ba:3b:c2:
64:39:5e:98:7a:8e:96:ab:3a:3f:f1:de:8e:82:21:
62:a8:47:7b:fd:66:3b:83:a8:fa:21:39:f9:47:20:
58:cb:a5:23:f8:1f:ac:aa:74:89:63:4a:1b:83:d1:
e5:22:ab:62:5b:fc:d2:2a:7f:94:dd:29:e9:8a:e3:
b5:f5:3d:5c:60:fc:bd:82:70:9c:c0:35:d0:f5:58:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DC:FB:9D:99:74:82:68:FD:7E:D0:F2:0D:98:B1:BE:CF:35:99:99
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:94:aa:6a:ec:39:2b:c5:71:be:0f:36:65:d3:b3:e1:8d:b1:
3c:76:fb:c6:8a:3b:0f:d3:94:d5:73:c8:3c:8c:67:65:c9:6a:
a7:57:6e:e6:6a:5b:35:19:4a:93:da:bb:c9:0a:af:53:08:52:
87:9a:c4:27:52:e0:4d:12:76:ce:34:67:fd:38:75:c0:b6:9f:
f4:74:ae:1e:f6:52:f2:f6:2d:54:03:19:fd:4d:3a:63:61:78:
30:c0:24:ad:a9:49:5a:a2:6c:05:6b:e3:a7:81:eb:8e:9d:7b:
b1:61:e7:3c:12:2e:ce:a7:5c:f0:51:97:43:27:67:ed:41:b4:
ce:cf:80:7c:f1:5a:0b:73:f9:87:71:09:87:b4:ad:a7:02:ae:
2c:d7:52:59:ba:07:3c:05:fb:fc:b4:d7:f3:0a:19:16:ad:12:
d0:6d:f2:0b:d7:84:a2:25:47:93:7a:31:0e:a9:d0:ca:ce:04:
3e:73:aa:d0:b6:18:e1:52:c3:1c:30:84:a1:eb:80:ce:a3:8e:
74:be:7d:53:ff:a2:92:ea:f8:82:a0:ed:51:b7:da:4b:35:f0:
9f:60:44:04:c4:38:57:18:63:a9:c4:8c:a6:29:c3:53:bd:2f:
de:b2:71:ef:41:84:3e:a2:ec:f4:ba:de:6a:72:31:70:f9:c5:
8f:e3:f9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:10 2025 by rpki-client