Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File: 3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier: EdQ+wJ/x0QGc0Mn/N7eDAnsl0h4UdAa3guPxMkH0DA0=
Subject key identifier: C1:0B:A3:34:D0:5B:A3:56:6F:3D:96:37:81:15:02:33:5C:1B:F5:FA
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer: /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial: 01969FACFFF1E33DB49D89FA3FAF011AD94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number: 0413
Signing time: Mon 05 May 2025 09:00:37 +0000
Manifest this update: Mon 05 May 2025 09:00:37 +0000
Manifest next update: Tue 06 May 2025 09:00:37 +0000
Files and hashes: 1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: QtcQmMWHAYv9NdGU9+OHodBLJO/7DGZxD/WcHQUxh0w=)
2: wLvB8cGiUEUZNSS38jCt0kGtb0w.roa (hash: m3dcBbH2bIeKi8Ap8eHL2CuPz3vf7Stl96ekMV6tjIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:ff:f1:e3:3d:b4:9d:89:fa:3f:af:01:1a:d9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Validity
Not Before: May 5 09:00:37 2025 GMT
Not After : May 6 09:00:37 2025 GMT
Subject: CN=c10ba334d05ba3566f3d9637811502335c1bf5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:88:da:40:1c:ca:f6:d8:c5:1c:c0:57:af:
21:b5:4f:81:07:8d:9b:81:c1:c6:6a:02:80:55:23:
59:b4:9b:4f:73:72:1a:5c:e2:61:5d:d5:15:e4:32:
60:e2:6f:a5:a1:57:6a:35:de:27:5a:05:a9:c1:18:
cc:04:8a:02:00:ac:f6:00:bf:bd:29:3f:d1:1c:32:
09:43:24:27:7b:4a:b1:f7:21:1f:bd:e5:fa:cf:e7:
69:47:14:42:90:23:b5:ca:50:a2:21:a5:f5:bc:d2:
6c:2f:16:91:1c:fa:c6:fa:03:30:73:98:ee:80:25:
7d:5f:6c:8b:ef:0e:8a:8e:2b:9d:c5:40:9a:fa:e7:
24:6b:a4:c4:7d:aa:d1:7e:67:27:db:58:5d:22:d6:
2c:0d:7c:10:64:3e:3f:75:39:da:81:f7:24:dc:d4:
53:a9:b1:be:7f:f5:e3:f2:83:90:b4:b3:23:3f:8c:
de:09:d9:e0:9a:7b:94:20:6c:53:a4:f3:7f:8d:c0:
80:49:1c:62:04:82:15:0d:b3:53:3f:33:69:59:fd:
f1:72:cf:98:e5:29:b9:5e:4e:db:6c:0b:bf:e5:d4:
f5:62:1e:38:41:5a:11:22:c8:6b:d1:d7:23:9b:f2:
a5:1c:ab:4e:82:a9:50:77:8e:df:c6:b6:fc:3f:94:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0B:A3:34:D0:5B:A3:56:6F:3D:96:37:81:15:02:33:5C:1B:F5:FA
X509v3 Authority Key Identifier:
keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1e:38:db:02:a2:0d:9b:25:29:12:e6:3a:65:3b:3f:cc:00:
b4:de:02:98:5d:18:3c:ce:5a:4d:32:59:04:fd:65:86:95:b5:
ab:dc:f7:c4:c9:21:82:d3:62:2e:71:d0:1d:34:3c:26:95:0c:
a0:d7:54:04:ae:ea:65:08:e4:7e:b9:ea:2c:b8:90:5b:1d:de:
84:f0:49:b4:26:35:21:e3:a3:87:6f:5e:38:5f:be:80:ee:e8:
3f:7c:50:01:3f:f3:66:2e:f0:4a:b6:d4:5c:0f:29:89:5d:51:
1a:4b:1e:80:80:ca:a2:f1:b6:6a:a5:2c:e2:33:b8:3b:97:d3:
04:02:6e:a5:7a:3f:46:2d:6f:5b:9d:46:b1:6c:af:b7:82:e8:
11:c7:8b:07:af:ff:7d:9b:76:99:a8:c6:52:f4:04:ba:57:76:
37:47:01:e1:8e:d7:df:63:82:7b:53:24:8c:86:d2:ad:1c:9d:
7b:f7:9a:c9:da:77:ba:ff:32:d2:98:27:8d:a1:b8:ee:8e:c6:
57:49:d7:82:30:ec:af:13:03:e4:e9:53:7a:f1:9f:d5:3a:a9:
b0:80:87:f0:fc:de:c7:59:bb:65:27:6c:18:98:88:5f:5d:6b:
af:67:07:fe:03:86:25:16:0b:47:a0:31:79:24:2d:88:68:37:
8f:ec:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:43:03 2025 by rpki-client