Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json)
Hash identifier: 7Mz+1hqRi91Ksr8kGhCIl/KHyYRLfwl+NV4w1cCPPzo=
Subject key identifier: 61:BC:37:F1:0F:AA:FF:8B:78:2A:DD:C9:9E:E9:EE:3B:83:DC:45:C5
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 0196865AED42E2677FD5D460DCC0D89E749B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
Manifest number: 0AC3
Signing time: Wed 30 Apr 2025 11:00:27 +0000
Manifest this update: Wed 30 Apr 2025 11:00:27 +0000
Manifest next update: Thu 01 May 2025 11:00:27 +0000
Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: 8dfWp2LMWkyiSMYOwdQdPntb+wDW/ZucY1cT0gfKlPU=)
2: qHsLN52OLV40PkdsNg1LTDhrI1k.roa (hash: o2jlcmcZCFuQ0+N7Kss7ufNJs+2izJmB43Pkb+WDd2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5a:ed:42:e2:67:7f:d5:d4:60:dc:c0:d8:9e:74:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: Apr 30 11:00:27 2025 GMT
Not After : May 1 11:00:27 2025 GMT
Subject: CN=61bc37f10faaff8b782addc99ee9ee3b83dc45c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:84:ac:f4:36:5a:95:1d:03:88:d8:a2:49:
aa:ad:7f:19:d8:c8:f3:ec:8c:95:6c:2c:ea:c8:e6:
0f:c4:da:d6:94:a3:5e:92:44:90:4a:6e:84:71:c3:
dc:d3:4c:9d:b5:ec:d6:f6:ed:16:6b:52:f8:20:c1:
29:86:37:3f:10:f8:89:97:c4:68:b0:81:c8:6d:b0:
ee:f4:8f:3a:34:f8:be:60:8e:eb:c4:6a:f5:03:44:
52:d4:61:11:6a:e2:1e:41:ac:55:4c:77:10:69:91:
4a:9f:46:c0:e3:52:52:f3:cc:c7:f1:00:3e:b2:35:
8c:fe:98:d0:a7:97:57:59:d2:74:b8:3b:bd:ba:9f:
a3:7e:4f:49:38:73:72:57:5d:9b:df:dc:9c:47:9e:
ce:88:6b:2b:6a:c6:e8:e5:c4:79:42:56:45:51:33:
f1:55:4f:ea:20:65:7a:42:5f:54:5e:57:e6:3b:78:
1c:0d:1e:95:9d:4c:f4:1e:10:4b:47:f5:d2:19:2b:
44:d9:2e:29:b6:c5:fe:0c:a9:eb:27:f0:3d:82:a1:
2c:4d:4f:d4:18:68:ab:92:22:a4:e9:98:fb:2a:00:
bf:15:b3:7d:97:64:58:f0:29:42:e5:57:38:e1:cb:
a6:f1:d0:f1:72:dd:bb:c7:9d:37:3e:c1:2b:79:15:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BC:37:F1:0F:AA:FF:8B:78:2A:DD:C9:9E:E9:EE:3B:83:DC:45:C5
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bf:3f:38:0d:da:52:03:34:05:03:8d:a9:03:dd:74:e6:c9:
78:9a:97:0a:48:da:a6:bf:f6:18:bf:ce:39:20:ab:2f:13:6d:
3e:f2:64:e7:82:53:45:15:d7:1e:76:b2:45:94:2c:ff:18:95:
e3:f8:7c:c1:f1:0b:27:22:d1:7d:15:32:a0:d7:91:1f:c8:7e:
98:80:1a:97:45:28:ea:b7:5d:15:74:87:f9:89:40:e2:77:73:
e9:13:c3:f1:bb:b5:99:91:8f:d3:0a:9f:7c:9e:b4:4e:b0:45:
cb:bf:1b:eb:35:1f:89:82:17:c2:c0:73:e0:8a:94:9f:b8:8f:
33:0c:a2:47:3f:2e:fe:ee:87:4e:09:53:16:3b:ad:e2:e8:4b:
67:0f:18:ed:64:e5:03:78:0c:bb:35:3c:10:96:60:ba:0e:9c:
eb:ec:cf:84:b7:b1:17:d0:d8:e5:8d:61:8d:93:c5:e5:fe:36:
92:79:08:d2:51:76:5a:1c:70:ae:62:b7:9c:a8:e5:57:a9:23:
fd:5e:2d:a5:ae:3e:e6:c8:b9:65:57:7c:a1:d0:8f:4c:fc:b1:
48:80:2b:eb:f3:fd:09:eb:df:2a:b5:6b:d1:90:e8:36:16:43:
1e:b3:49:4b:4e:52:9f:fd:1e:b2:db:d7:86:9b:38:9b:5e:90:
c8:dc:34:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:14 2025 by rpki-client