Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: IXGwSN08XL0HTV9SNQ6woTkTbJf6ZL/EMEQ3BUMD+Us=
Subject key identifier: 67:4E:50:BF:E0:19:02:AF:BF:87:3D:FA:CD:91:D9:96:21:1A:56:6F
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 01967ED8BB6C046B2DBFB009C07AFEFA4149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 0E54
Signing time: Tue 29 Apr 2025 00:00:55 +0000
Manifest this update: Tue 29 Apr 2025 00:00:55 +0000
Manifest next update: Wed 30 Apr 2025 00:00:55 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: EMlWrpxxxZvNQsft1jnLU1L5oZtjDab3FwRPMj3GNNY=)
2: M0CEGpqdnFyhH05u6ywrw5xpjxw.roa (hash: Da8bL20Ezk/7GnIViJo/xS7eFj2lqLDIbA2oioZuSt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:bb:6c:04:6b:2d:bf:b0:09:c0:7a:fe:fa:41:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Apr 29 00:00:55 2025 GMT
Not After : Apr 30 00:00:55 2025 GMT
Subject: CN=674e50bfe01902afbf873dfacd91d996211a566f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:1d:4f:63:65:ec:a2:bc:8a:fa:2e:12:35:
81:f7:ef:56:85:20:23:67:8a:8b:5b:17:4f:a6:3c:
d5:28:c5:c8:df:80:b9:fb:dd:12:6f:cd:cb:68:a3:
18:ec:d4:51:37:65:f9:7d:f8:7b:52:09:49:be:a4:
25:e9:dd:69:37:ba:7d:71:fb:3f:6c:ff:54:d1:6a:
c9:e2:f1:92:5a:ce:f6:0d:8c:bb:34:4e:85:cd:28:
7b:04:ae:ea:a8:3c:f5:dc:66:44:70:b0:83:1a:26:
91:13:0b:d1:7d:06:80:60:fc:41:bd:af:42:3f:e5:
eb:5a:6c:62:56:95:3d:c2:58:f6:8d:4d:ec:a2:ca:
91:03:57:57:86:0c:64:7c:03:79:ee:6d:50:c1:53:
5a:ec:a1:ea:38:8c:64:62:1a:53:0c:b9:d9:37:15:
79:85:f1:6a:51:f8:65:bc:85:48:d8:1b:91:0f:0c:
cd:06:09:8c:b9:8d:3d:4f:00:b3:f3:96:2f:eb:25:
d0:2e:90:be:39:66:21:8f:64:3d:17:e7:d5:0c:d2:
d9:72:0a:8b:02:da:1a:ea:45:3b:6b:19:73:6d:29:
80:84:c5:18:11:53:ae:f0:84:d5:88:63:24:2e:a3:
3b:d7:a4:7c:36:81:a5:2d:7e:29:71:32:e6:05:87:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4E:50:BF:E0:19:02:AF:BF:87:3D:FA:CD:91:D9:96:21:1A:56:6F
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1e:b0:4f:a5:d5:da:fc:f7:73:e4:c2:89:b3:b7:06:7f:f9:
97:88:7c:ed:e0:df:60:9c:1c:f6:74:d2:cd:66:1a:ed:04:a6:
90:49:7d:20:1b:9b:5d:82:7e:d0:cb:19:06:c7:07:3f:85:6c:
45:be:6f:30:5f:c4:b6:52:47:51:ca:9a:3f:19:5b:84:d4:88:
ee:f9:8c:9e:54:f4:7a:7e:f7:0e:98:fa:2d:a8:65:86:c9:f4:
3b:a7:48:b7:5a:8d:00:a1:44:40:20:a7:26:f4:83:e0:bb:3d:
3c:fc:ca:f7:94:2f:da:d7:c8:53:92:3e:2d:7c:d3:d9:07:24:
1b:a0:d7:d0:9d:1b:98:ac:dd:bd:a1:a0:37:38:0f:c0:05:60:
2d:85:94:e3:07:f3:35:71:91:e7:66:db:ed:81:3d:86:66:a1:
62:c5:da:11:e7:a2:14:e6:49:ca:50:ed:21:58:20:84:92:ee:
fe:cc:97:1c:8c:bc:d2:64:b1:ef:d3:22:87:69:99:12:25:84:
05:ec:24:e3:fc:6e:dd:94:9b:13:90:e5:48:33:b2:e1:64:bf:
02:9e:56:ba:0f:da:6e:27:36:d7:71:42:75:1a:0c:d1:42:94:
2c:2f:20:41:bf:11:2b:c7:72:f7:8b:e1:f6:60:ab:23:c6:39:
02:5b:cc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:13:20 2025 by rpki-client