Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
File: 3j02h_599Iw76DmKrXvSAQZUU4I.mft (raw, json)
Hash identifier: Iq6DLcPbn7ysAr5oY3ok8XG5fglrElw8Mbptmv0cqgU=
Subject key identifier: 8E:EE:AE:22:18:57:D3:56:CA:26:6F:89:87:42:B9:1A:B8:91:3E:6A
Authority key identifier: DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
Certificate issuer: /CN=de3d3687fe7df48c3be8398aad7bd20106545382
Certificate serial: 01967868C710F0CB14AAC3D41E163DF66187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 18:00:54 +0000
Manifest this update: Sun 27 Apr 2025 18:00:54 +0000
Manifest next update: Mon 28 Apr 2025 18:00:54 +0000
Files and hashes: 1: 3j02h_599Iw76DmKrXvSAQZUU4I.crl (hash: nCR5er/h0SEx1wov7xoRTlWl1St+yltCaURnaSViDVQ=)
2: Pzz9-39B29Zan_AKRyiM2W7cTbI.roa (hash: 2gaPpnMFBn7PDm+0BqVVwSzuzPaAOOzR64kAX25LHLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:c7:10:f0:cb:14:aa:c3:d4:1e:16:3d:f6:61:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3d3687fe7df48c3be8398aad7bd20106545382
Validity
Not Before: Apr 27 18:00:54 2025 GMT
Not After : Apr 28 18:00:54 2025 GMT
Subject: CN=8eeeae221857d356ca266f898742b91ab8913e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:88:d2:de:e4:29:e6:b4:76:1d:2a:ca:20:
a1:ca:2a:da:7b:ae:22:b7:99:89:2a:9e:24:41:4d:
55:7d:a9:12:f3:c7:d4:ce:f4:88:17:fe:76:6b:e2:
13:55:3b:0d:5f:d8:ac:51:42:90:ca:14:9b:4c:12:
9c:2c:93:e9:94:15:35:00:67:81:d8:64:67:3b:fa:
15:62:3b:53:b0:bf:44:6a:ec:c3:94:f8:f5:28:7e:
00:a6:e5:8f:ec:a4:5a:ae:9a:5f:de:d2:8b:ef:47:
82:00:22:45:86:0a:39:6d:02:4a:e7:0c:65:54:11:
bc:01:7a:fb:ce:4c:4a:82:8d:a3:98:f4:fb:c3:71:
af:97:c1:0b:0b:c7:ec:bc:0a:d2:3a:8f:35:bb:88:
b4:64:9c:83:0d:f0:a4:d8:f8:45:51:3c:06:2b:bd:
f0:45:ee:08:78:69:8d:2c:1a:d0:d4:44:06:98:06:
d8:c5:ad:06:e5:89:10:d6:20:e1:89:41:93:88:77:
c8:75:d5:e1:28:44:57:aa:50:50:d5:5f:d3:65:8c:
94:b4:b7:d1:92:52:43:27:62:e2:c6:be:89:48:08:
18:2f:73:c4:bb:15:17:5f:62:ba:34:9b:29:08:f7:
d6:59:c2:7c:d4:66:a5:f2:4c:50:97:fd:40:0f:9d:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EE:AE:22:18:57:D3:56:CA:26:6F:89:87:42:B9:1A:B8:91:3E:6A
X509v3 Authority Key Identifier:
keyid:DE:3D:36:87:FE:7D:F4:8C:3B:E8:39:8A:AD:7B:D2:01:06:54:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j02h_599Iw76DmKrXvSAQZUU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/400b4f-3688-497c-9785-234cbafac86a/1/3j02h_599Iw76DmKrXvSAQZUU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:47:d3:c0:26:33:34:4e:ff:0f:1b:32:cc:ce:6e:76:89:12:
10:80:d5:fc:73:71:0f:3c:8e:be:f9:ce:7c:ca:0a:01:d9:39:
a8:8b:e8:18:15:6c:b6:11:2e:e1:13:fd:38:50:4d:2b:62:40:
07:bf:8b:20:98:d2:b1:37:71:f5:13:65:05:3a:6f:5a:93:8e:
9e:b4:68:a7:11:b2:55:4b:82:50:9c:83:ef:60:21:0f:52:ec:
d3:22:89:0a:2c:c0:08:0c:4f:0c:0f:49:dc:cc:5d:d9:4d:3b:
fa:83:82:1c:cb:e6:3a:48:18:af:4e:e9:25:1b:06:3c:2a:13:
68:0d:84:1b:13:af:4d:52:0e:22:80:33:55:82:0f:81:84:62:
51:db:0e:b3:32:74:90:93:b3:60:43:3b:3d:9e:29:83:8d:25:
ef:65:69:26:40:d9:fb:92:b0:2d:a6:34:fb:01:29:b6:c4:b2:
d1:19:8d:a1:42:ed:b0:41:3f:29:1f:bc:50:6c:6e:07:a2:d3:
79:bb:c7:86:ba:f3:77:0f:3e:a6:20:0f:40:ef:2b:45:6f:5d:
b3:02:26:b0:09:e3:7a:d6:2b:c5:64:38:3e:90:6b:70:17:26:
54:69:e4:ce:ab:ad:c1:6b:fd:4e:40:2c:68:4c:c5:52:64:25:
b2:f0:8b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:35:26 2025 by rpki-client