Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
File: 3zuCAF_b6WECD3QKtDxVTlo4RR8.mft (raw, json)
Hash identifier: ziHE/stBeSjPYuXEAQLb2G7QESBp4wyyzzu5VFpEFJo=
Subject key identifier: CA:65:7C:17:E0:74:94:68:F6:D0:66:07:9E:82:1B:A9:F1:A2:0D:8D
Authority key identifier: DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
Certificate issuer: /CN=df3b82005fdbe961020f740ab43c554e5a38451f
Certificate serial: 01967F4640890A24F0B836372C54E972A572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 02:00:32 +0000
Manifest this update: Tue 29 Apr 2025 02:00:32 +0000
Manifest next update: Wed 30 Apr 2025 02:00:32 +0000
Files and hashes: 1: 3zuCAF_b6WECD3QKtDxVTlo4RR8.crl (hash: plcWvhU3G2pRD5/tOU4kOxfbfT18xDap7Ve9SuRWqPY=)
2: FoF8ZUBZ5kCu4oa83zINkMjWAYM.roa (hash: RhcSxCtgICb2ZYm3ZoQOXVJ7hwELiIb6QSru+4BTc5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:40:89:0a:24:f0:b8:36:37:2c:54:e9:72:a5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b82005fdbe961020f740ab43c554e5a38451f
Validity
Not Before: Apr 29 02:00:32 2025 GMT
Not After : Apr 30 02:00:32 2025 GMT
Subject: CN=ca657c17e0749468f6d066079e821ba9f1a20d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:8c:48:ae:00:cc:31:84:1b:de:81:f3:e8:
d0:87:ae:e1:85:94:44:ad:3a:cc:0d:4f:e1:fa:b5:
ef:27:09:f4:08:46:fe:54:74:8e:9c:b5:e2:7d:43:
24:4b:26:40:51:1d:a8:67:2c:89:5a:11:8d:38:f7:
b3:52:89:da:96:68:82:0e:32:7b:d8:36:3f:b5:92:
2d:17:aa:09:88:d6:30:97:3a:a2:04:19:da:7e:75:
9b:f1:fd:9e:97:9b:27:ee:18:e0:c5:92:6d:84:52:
0e:ef:21:ca:ec:de:f6:9f:5a:e4:99:43:38:88:d2:
ea:df:2b:36:a6:c5:fc:23:d9:7c:ba:17:fb:49:f5:
64:32:24:94:8f:3c:a7:0b:a3:65:6d:d0:e6:f2:25:
8d:71:4c:f4:6f:32:f7:6d:aa:ce:36:97:5f:66:c7:
29:d9:dd:3a:14:c2:20:49:fd:24:44:be:b5:79:28:
36:d4:bf:b8:50:e9:b3:76:cb:46:c4:fd:24:9b:2e:
d3:5a:1b:16:42:d9:50:ad:39:e4:f4:2a:37:6a:3d:
77:36:35:f0:4c:bf:c2:78:c4:dd:b7:05:e1:17:1c:
07:9a:d4:5f:dd:ac:27:54:52:50:10:4f:74:7c:6c:
1d:2a:1a:34:b4:00:5a:4e:4b:92:c3:65:13:f7:af:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:65:7C:17:E0:74:94:68:F6:D0:66:07:9E:82:1B:A9:F1:A2:0D:8D
X509v3 Authority Key Identifier:
keyid:DF:3B:82:00:5F:DB:E9:61:02:0F:74:0A:B4:3C:55:4E:5A:38:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zuCAF_b6WECD3QKtDxVTlo4RR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/38ff36-7d73-485c-8910-37c14092eb27/1/3zuCAF_b6WECD3QKtDxVTlo4RR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:05:4f:2b:d1:2f:a7:a7:7b:fa:26:3a:1d:45:e1:2f:7e:50:
40:09:87:8f:50:c0:e9:4a:c9:e4:11:72:25:c1:f7:a8:43:33:
f9:7f:36:42:e6:5e:64:ba:ae:da:e8:a7:ce:6f:76:d4:1b:17:
1e:67:55:19:67:aa:25:44:ac:8c:a1:88:48:59:fd:d1:0b:d6:
ef:bd:0c:0c:14:71:b0:85:c9:c1:b7:a7:3b:6d:be:15:73:27:
b5:44:8b:81:d1:50:0d:d4:3b:ca:ba:ae:e1:7c:9f:23:42:4e:
b2:d0:08:ee:f4:e1:fe:d9:d8:ab:b7:25:61:88:58:14:49:bd:
60:ee:91:1e:49:1b:c6:a0:32:68:70:0a:79:6f:65:7a:f1:cb:
60:30:6c:b0:d1:73:10:57:a5:58:3c:51:c5:30:2e:e6:4b:fe:
de:70:e9:78:2a:cb:45:50:e7:50:8a:a0:bc:ec:c5:dc:f5:b8:
dd:6a:0e:62:94:2a:6c:37:ea:c0:60:0c:be:27:d7:41:02:05:
2b:5c:cb:82:06:65:d2:da:70:6c:7b:46:31:9d:31:36:ee:b2:
81:8e:9a:0d:6a:6c:33:bf:65:89:73:bd:ce:9e:b9:24:02:ed:
61:19:2a:e9:8e:a4:96:e6:de:b5:17:c5:7e:84:68:ba:4c:e1:
7c:5b:5e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:42:18 2025 by rpki-client