Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: /80bswBWVQTfFZcPEwRDbkzW34WiMv0viiCKJa0qjdo=
Subject key identifier: 07:BA:28:28:43:A6:EF:D1:7F:B1:CD:D1:5D:0B:58:D8:87:47:A5:7E
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 0196764356EF92F4A10B694614CBA449AA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0A35
Signing time: Sun 27 Apr 2025 08:00:46 +0000
Manifest this update: Sun 27 Apr 2025 08:00:46 +0000
Manifest next update: Mon 28 Apr 2025 08:00:46 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: RmU48KFVMcBk489moRifAheQ1e3pnm1NJFLdx2LP7ps=)
2: GTryjErQ-QvKOHELwraRwqDQoQ4.roa (hash: GN3kBbzA5jk8ZVZGy0p/hEuJ6JzyB6iMj6OE8Sf6qCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:56:ef:92:f4:a1:0b:69:46:14:cb:a4:49:aa:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Apr 27 08:00:46 2025 GMT
Not After : Apr 28 08:00:46 2025 GMT
Subject: CN=07ba282843a6efd17fb1cdd15d0b58d88747a57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:8c:09:d6:9d:ad:68:30:52:de:0c:58:14:
c4:29:07:d5:16:a9:25:0e:03:f6:b7:f3:a9:bc:32:
1e:3e:27:f7:cc:df:1a:28:3d:71:70:64:16:ba:5a:
be:c8:f8:3e:d4:74:f2:6e:cb:d2:a5:49:cc:02:98:
6d:98:4d:29:82:08:39:e4:c4:84:39:cd:a4:10:f5:
e5:97:2c:8b:2c:7d:6e:5b:c6:c7:c8:eb:eb:d6:36:
6a:c4:3c:88:69:2e:a1:dc:db:71:6c:33:f4:97:d9:
09:b6:cf:19:0c:f7:ba:08:e8:7d:37:27:ec:86:dc:
c4:3e:cd:31:64:49:64:85:93:9c:74:ab:7b:e2:b1:
92:e3:f5:d5:bb:ee:44:b1:ca:c7:94:2d:9c:4c:fb:
d2:e0:ac:6b:78:11:5b:18:15:64:17:b1:0d:3b:0a:
d6:22:3a:8f:44:94:8a:76:4a:39:17:ff:85:b1:98:
8b:f8:83:4a:7f:13:15:0d:cf:9a:ae:ac:f7:ba:86:
40:c7:6b:25:48:2a:22:92:ce:f4:98:c7:67:02:40:
c0:03:a2:bc:14:ea:fb:c6:a5:18:03:01:a2:f6:57:
1c:08:b2:64:f6:0c:36:da:0e:00:3f:8d:cc:b1:9c:
50:e6:a2:ee:69:aa:2e:21:f8:43:8a:c7:bc:59:c3:
af:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BA:28:28:43:A6:EF:D1:7F:B1:CD:D1:5D:0B:58:D8:87:47:A5:7E
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a1:1c:e7:d2:49:8b:1c:7b:0e:c6:fc:6a:94:05:49:f8:19:
41:3e:ec:7c:02:28:17:d5:98:51:29:74:62:cc:5d:59:18:d1:
99:a7:3a:59:a5:7b:f2:5d:03:a4:1a:62:42:71:45:c6:d2:b1:
cd:6b:c2:6d:ac:ef:d8:b3:27:d4:ec:2f:be:3c:50:50:c1:ea:
18:64:a3:a7:23:c6:90:7f:90:e5:35:b8:72:b1:31:d7:a0:47:
e1:96:69:ce:59:86:3b:ec:b9:da:01:75:ee:5f:ae:45:6b:32:
4c:77:80:74:f7:40:dd:ac:f8:8d:27:aa:1f:2f:01:49:c2:00:
de:e3:5c:c5:4a:5b:77:21:e9:ed:78:9c:05:a9:e1:b3:75:e0:
42:5f:7f:69:aa:d3:96:f7:56:51:89:12:4c:2d:3f:92:9f:df:
5d:70:08:1c:33:cd:44:74:d8:8b:c3:e7:7c:29:18:e3:16:d7:
fe:a9:eb:f2:83:2f:bc:59:e4:1a:6d:7e:c7:75:b3:83:f6:94:
9f:07:68:09:12:7b:dd:4d:10:84:23:0b:6f:72:08:91:41:90:
c0:db:c1:5d:23:ac:bb:29:f3:77:5c:59:19:f9:af:56:99:24:
83:0d:47:52:0a:eb:87:87:85:8c:60:d1:b9:c9:2e:c6:61:df:
f0:63:d7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:13:12 2025 by rpki-client