Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File: 3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier: cbAcmWEzCDzOWVNazNJLh3RHZHF2RbnHjzI3GQ7ci7s=
Subject key identifier: 50:C7:09:C2:A3:85:B6:22:33:B2:E1:B5:D8:6B:F2:21:E2:2B:36:D1
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial: 019679B1C1450CC5D707F3EB224B5A0EBE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number: 1159
Signing time: Mon 28 Apr 2025 00:00:14 +0000
Manifest this update: Mon 28 Apr 2025 00:00:14 +0000
Manifest next update: Tue 29 Apr 2025 00:00:14 +0000
Files and hashes: 1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: CzP479zEcg7HYRL50oKyGP+LhuuhnjHkd0SOqT6sGdc=)
2: qlMHdAg_ZeG5jpZEikZxyiq5rOM.roa (hash: r9NbCVDLWns0v6U+hfflkmDI70L6VCrJW0Q5+div1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:c1:45:0c:c5:d7:07:f3:eb:22:4b:5a:0e:be:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Validity
Not Before: Apr 28 00:00:14 2025 GMT
Not After : Apr 29 00:00:14 2025 GMT
Subject: CN=50c709c2a385b62233b2e1b5d86bf221e22b36d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:67:99:90:ef:37:9e:28:e8:27:83:a2:53:
84:29:6b:e9:6e:05:24:bc:22:1d:c3:7c:53:17:61:
2a:39:97:3e:9b:c5:4c:85:18:45:32:d1:57:61:99:
2c:db:c1:90:e4:12:2d:8c:29:f8:48:99:4e:2a:a2:
e7:f4:bf:ba:d9:44:74:79:c3:19:a0:e9:4e:8b:3e:
dc:4f:69:f1:a6:c9:6a:8c:3f:bb:48:51:00:7d:03:
79:27:c3:88:71:d7:81:47:5f:02:7a:80:48:da:d0:
86:08:69:43:c5:c9:6f:52:dd:07:14:09:01:f2:2b:
88:f1:84:72:98:99:ab:fc:7d:c6:37:0e:10:54:b4:
11:71:1c:25:d6:c0:bc:f6:ef:b9:a1:60:79:a4:48:
fb:dc:51:f8:83:1b:ff:88:88:b6:69:7a:74:d0:cd:
a1:24:e3:09:aa:f1:d2:bb:ee:94:1b:9c:a5:25:de:
f7:e3:57:f5:30:fe:c2:b5:4f:71:eb:f8:ff:c1:2d:
39:3a:43:08:dd:36:85:1a:ac:9e:4f:20:27:35:58:
ba:f2:ad:ae:70:69:6e:06:98:28:67:cf:2b:ca:82:
d4:a2:7f:4d:5f:60:b9:52:6f:6b:8e:e4:fa:a9:f8:
02:ee:c8:22:99:89:c3:b9:53:5f:0a:8e:cf:36:71:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C7:09:C2:A3:85:B6:22:33:B2:E1:B5:D8:6B:F2:21:E2:2B:36:D1
X509v3 Authority Key Identifier:
keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:1c:db:c8:93:d3:9c:83:46:d7:90:a0:eb:73:b3:22:7e:6a:
45:e7:19:b6:01:16:95:95:95:0a:8a:29:c7:b3:4c:71:f6:d5:
55:da:64:e5:92:cb:53:f6:a3:5f:34:1b:dd:94:6d:23:ea:2b:
e4:cf:b4:c4:11:2b:c2:c9:06:cf:5f:96:0b:57:f6:86:70:d7:
ef:a2:64:59:15:c2:d9:75:54:62:13:23:72:f2:d0:3d:d1:2b:
93:39:9e:a1:21:14:d5:2a:e4:ca:74:fc:26:61:b4:45:c3:46:
b3:de:a1:4f:01:08:9f:5e:bf:37:10:d1:73:bc:0c:6b:1f:33:
07:ac:09:9d:1c:83:fc:7f:16:8d:b5:d3:d0:97:72:40:18:41:
32:84:65:54:c5:6d:8d:96:de:eb:21:a5:62:7c:e6:45:e7:1c:
6c:63:02:5b:cb:35:4c:2e:4b:c8:72:24:31:cc:8b:df:fd:82:
cd:a3:6b:73:90:8f:12:04:10:85:a7:e2:c9:4f:56:08:54:c7:
e8:13:b0:10:3b:17:22:41:61:56:4d:a1:08:06:c4:0c:45:99:
39:5f:10:77:58:a6:ec:81:13:4e:77:6e:8f:64:90:1f:91:b8:
22:ee:f0:e3:60:39:3b:93:db:fd:91:81:9c:d9:42:65:8a:11:
c6:68:54:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:59:04 2025 by rpki-client