Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
File: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft (raw, json)
Hash identifier: k2EXHkEZDXLiP95e2p/AXm8/mHFACldvUUrdbNyYRh8=
Subject key identifier: 93:F4:1D:AF:0D:87:7A:A4:06:31:FE:E0:96:B3:FD:A8:CA:62:DF:65
Authority key identifier: DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
Certificate issuer: /CN=dd189621d2fa872166e6a05ee47a7d756243e919
Certificate serial: 01967DC6B0581A9F3C05F8A557B9BA4AEFDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 19:01:35 +0000
Manifest this update: Mon 28 Apr 2025 19:01:35 +0000
Manifest next update: Tue 29 Apr 2025 19:01:35 +0000
Files and hashes: 1: 3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl (hash: OFCUEc3xjWnQfRApXoZexfGHP5A5zRzy6XLzCT2IKt4=)
2: QrmnbjgSygFDWHsO09VpW_iZC0c.roa (hash: VHw1+Cgx8Es+YaWERxb3+M1gB2Ndwqk8aRAjsalZIcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:b0:58:1a:9f:3c:05:f8:a5:57:b9:ba:4a:ef:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd189621d2fa872166e6a05ee47a7d756243e919
Validity
Not Before: Apr 28 19:01:35 2025 GMT
Not After : Apr 29 19:01:35 2025 GMT
Subject: CN=93f41daf0d877aa40631fee096b3fda8ca62df65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d2:0c:a2:af:50:74:89:82:19:07:61:f2:50:
f5:85:59:bf:a3:2d:af:84:76:75:2f:b9:c0:31:1e:
ec:4f:52:a3:97:b7:e8:87:46:54:1b:c4:bf:ba:9d:
24:5a:ab:19:c5:19:67:cf:6c:f9:73:a2:c0:a4:66:
b5:8d:95:7a:13:c9:8b:65:52:ac:f8:c5:ca:c8:4e:
e8:d4:28:f2:9b:8a:37:cd:7e:ef:3b:20:be:a2:e4:
56:23:0f:6b:d5:5a:1b:cd:08:69:74:26:c0:f7:1c:
86:75:39:03:28:8d:a9:77:35:f2:4b:d6:55:6d:a3:
ab:83:13:f2:c7:a6:5c:f6:71:18:ed:61:75:69:ae:
f5:40:95:f3:d0:c8:5d:ef:d8:51:30:20:78:3e:e5:
90:26:c5:85:c0:0a:c4:ae:6a:13:6e:80:d5:cb:0d:
2f:1b:ab:d9:39:47:39:a3:f5:8b:2d:20:c7:7d:ee:
fa:a3:e7:00:dd:da:41:b5:38:91:36:62:74:f7:a7:
79:6b:52:74:7f:0c:96:84:94:07:d4:da:9f:f7:d7:
06:18:7e:89:e9:51:68:1c:87:2d:5c:93:e8:5e:31:
92:ae:2d:0b:88:89:dd:ab:64:61:77:1f:71:4c:d4:
f3:43:cd:1d:9f:9d:09:c5:b2:2e:32:f7:05:0f:8c:
bb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F4:1D:AF:0D:87:7A:A4:06:31:FE:E0:96:B3:FD:A8:CA:62:DF:65
X509v3 Authority Key Identifier:
keyid:DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:65:fe:2d:cd:c7:1f:45:bf:e4:e5:fa:f5:26:15:b1:a9:29:
48:1e:4f:17:43:90:40:b9:de:44:5c:38:db:57:bf:c6:ee:0d:
cf:9d:90:5a:b6:7c:a5:05:0a:5e:5e:88:81:e3:c3:e8:fb:1d:
98:5d:ee:21:20:ce:b9:8f:dd:c5:6b:b9:72:c6:71:cd:05:a2:
04:d8:9e:f1:ae:ee:54:50:53:f4:2e:49:e2:40:01:45:52:2b:
b4:1a:f5:fd:b1:5a:4e:aa:26:a7:05:97:4d:fd:66:e0:8f:87:
2a:6f:17:e5:8f:2b:81:94:06:1f:0f:df:de:95:1c:f0:8c:86:
7b:c9:25:54:51:e3:a4:32:5c:0d:c4:f7:5b:ac:e2:9c:44:d5:
27:0e:09:86:dd:c8:0c:3e:a6:72:05:78:6e:5d:8c:c3:c3:ea:
fa:69:ad:cb:35:ad:0f:fd:26:e2:47:00:1f:e9:84:b6:b1:1a:
95:7b:3d:68:7e:3c:97:38:95:6c:93:31:d0:47:c8:76:5d:0a:
9e:6d:1a:00:4e:28:ad:a0:c0:91:18:52:c5:fc:e2:10:a5:71:
7f:d3:dc:dd:ab:ab:2f:75:37:d3:75:6d:d4:91:36:ff:a9:e7:
a8:24:59:7a:94:d1:f8:94:74:47:cc:75:63:89:22:3c:0d:e5:
9e:3f:5d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:04:13 2025 by rpki-client