Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier: c6hU/90ddV47r6lInuJO5dnfZfcCZKhrfKqnjdpgl8I=
Subject key identifier: 85:4F:BC:8A:4C:AA:DF:55:FF:E3:87:D0:F0:6C:7C:F0:70:C3:B3:03
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 01968A381D990C726204AEC16539B3C818D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number: 1519
Signing time: Thu 01 May 2025 05:00:55 +0000
Manifest this update: Thu 01 May 2025 05:00:55 +0000
Manifest next update: Fri 02 May 2025 05:00:55 +0000
Files and hashes: 1: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: pbYWCYbzU3L2Pi8W4B6HGFwzpjE7useQaiX4ZnN4f7w=)
2: I9GqI9GxRbg5gyNw2oYeQXtgJJg.roa (hash: IdZbo1C2DnUJiJSpOjjTPKnvp3frNBJygc4FMjTeWHU=)
3: OJHrSjDn0A0xOyeisC7fOP_zy4g.roa (hash: 4mrlovUy+cBI29r4SEJkRQxz3HoEwjM6nDvfGvlxWBU=)
4: ie70DJhDrGYxNNPSAG6BpAZrtxY.roa (hash: HiOIeBO8KrrORXl70BQK8AAzSZ8zCob2hQpjThQB7t8=)
5: tr4Wz-5rQhPo47mTFs_LgvHDl8s.roa (hash: PZGVkTuh77FvBlVCnDa38AVdteMzJ1COvOQXzBoIS0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:38:1d:99:0c:72:62:04:ae:c1:65:39:b3:c8:18:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: May 1 05:00:55 2025 GMT
Not After : May 2 05:00:55 2025 GMT
Subject: CN=854fbc8a4caadf55ffe387d0f06c7cf070c3b303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:e4:b4:8e:ca:0a:5a:f1:18:43:77:8c:70:
24:4b:28:55:d5:92:00:20:aa:72:e6:ec:b2:72:9e:
73:f3:e6:c1:9e:08:c1:44:75:8d:23:4f:5b:51:d5:
24:b2:bc:5b:1c:87:cb:1d:93:99:d8:92:9d:50:2e:
c9:6e:70:f0:d9:d6:2b:54:20:7c:13:82:92:0b:22:
c0:43:7c:b0:2d:cc:2c:ff:88:3a:5d:a9:66:04:84:
86:ae:a9:6d:01:3f:89:b1:6b:5b:7d:fe:58:49:1b:
26:a4:e6:69:98:23:97:34:fa:f7:d7:68:7d:ce:9c:
fa:37:bd:8b:4d:03:e1:4b:42:8a:43:ad:df:76:35:
e6:77:51:b2:a6:00:cc:60:07:b1:ed:17:a0:81:29:
86:7b:3d:8d:7a:5d:d5:b4:66:4a:a0:71:62:3b:03:
11:1c:75:55:67:02:69:7f:e6:02:09:fd:29:8f:7b:
7b:90:c5:2b:fd:c0:a5:fa:d3:41:f1:5a:2c:de:22:
91:22:8c:e8:4a:4a:c8:f0:15:28:20:b0:22:88:99:
98:e6:2c:5b:19:e5:d8:ab:0f:0d:b5:1e:1f:22:f2:
6e:35:94:b7:11:0d:a6:45:45:0a:8c:77:d7:f4:fa:
e9:1d:3b:13:75:fe:05:01:05:bc:ab:93:a4:83:4b:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4F:BC:8A:4C:AA:DF:55:FF:E3:87:D0:F0:6C:7C:F0:70:C3:B3:03
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:85:e5:72:a1:57:71:75:3b:f4:cb:8e:ab:c9:87:a4:89:df:
94:91:31:be:be:7e:33:14:0d:e4:cc:7f:f8:73:03:7f:2d:2c:
43:6a:9b:b2:43:ba:bb:a8:2e:b1:cf:b6:5d:ed:9f:37:b0:a3:
84:7a:22:56:ac:45:87:c8:f7:80:a4:8d:8f:99:10:71:ae:23:
5b:21:f8:a9:f2:12:cc:72:c6:5e:6d:92:44:ec:11:31:f6:ee:
a5:e4:25:b2:55:83:c1:4c:2c:56:e5:c0:29:35:80:30:24:02:
d9:28:fe:63:8b:10:07:1c:e9:ee:ed:83:ee:16:73:22:87:33:
56:e4:f0:22:cb:f1:41:7f:b2:6d:0a:b5:ac:a4:83:79:c6:32:
8e:40:cd:57:be:03:26:d3:f0:ab:c1:c6:5e:f0:3b:62:8e:39:
62:91:e5:61:49:52:43:c3:8c:52:ac:09:84:8f:c6:67:c0:f0:
63:c0:b3:b3:ca:90:20:f4:67:2a:d6:d5:ef:e5:30:f5:47:c1:
2a:da:ff:53:28:b2:2c:56:25:60:7d:e2:7d:14:cf:13:6b:8d:
b8:5e:41:52:33:29:81:f5:1c:25:99:ea:bd:b9:52:92:41:40:
5a:82:00:e0:59:f8:9e:f4:33:29:d7:f6:1d:49:f9:27:56:cd:
19:e9:dd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:17:09 2025 by rpki-client