Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
File: 3A-eoEY21-cUGLkwkczQ5XAVvkk.mft (raw, json)
Hash identifier: zdQt6b2hqWaxzLgS1UrSy4GQBkvG33TKMHU/O2LbiB4=
Subject key identifier: 15:AA:F7:54:78:8C:A3:98:EA:C8:DC:90:B7:9E:01:2B:5F:FB:82:78
Authority key identifier: DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
Certificate issuer: /CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Certificate serial: 01967A56BEA8DC738F6106217102D14831C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 03:00:27 +0000
Manifest this update: Mon 28 Apr 2025 03:00:27 +0000
Manifest next update: Tue 29 Apr 2025 03:00:27 +0000
Files and hashes: 1: 3A-eoEY21-cUGLkwkczQ5XAVvkk.crl (hash: 00FBVnV98Pjh8A5WGIvsyyHAyvYjOvxhI86wVBFoiFM=)
2: L9o7KQxJPRJhzeZqHSfbm_7F0-s.roa (hash: nN3JagCFrpyGEb5Wr7V9qHCmIBDIlF1ypYg9dy1tB3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:be:a8:dc:73:8f:61:06:21:71:02:d1:48:31:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0f9ea04636d7e71418b93091ccd0e57015be49
Validity
Not Before: Apr 28 03:00:27 2025 GMT
Not After : Apr 29 03:00:27 2025 GMT
Subject: CN=15aaf754788ca398eac8dc90b79e012b5ffb8278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ce:0f:68:c9:a6:31:41:ab:59:78:ee:9d:14:
d0:3c:ba:7d:b4:60:1f:7d:fa:2e:1c:c7:e1:81:85:
cc:0d:1e:00:a8:d5:09:54:87:cb:1b:3b:60:bb:36:
7f:19:24:e9:05:f1:e5:a2:6b:81:74:d2:60:04:f3:
a7:6b:ee:bb:43:ef:7f:38:ef:cb:8e:27:49:ef:e6:
53:a6:32:38:35:b2:83:4b:fd:ef:6b:4f:e7:31:df:
8f:b3:8b:d2:fd:55:a0:e9:02:e3:63:80:95:35:f1:
81:cb:bf:a5:25:6f:ef:82:57:22:92:eb:ab:a4:f5:
fd:7d:39:33:db:4a:b6:e2:9a:b8:f1:05:45:0e:29:
1d:4f:47:b8:c2:17:46:f3:f8:d0:ba:07:a1:08:35:
c3:03:38:6d:ef:5e:96:d8:bf:ef:eb:18:ec:3d:74:
60:f4:8d:57:dc:92:27:ec:4c:96:ba:d2:a6:a5:9a:
a9:3a:7a:98:91:5d:21:8e:de:32:48:2a:2e:99:18:
9f:b9:3c:b1:bc:28:8d:c8:69:96:d4:8a:57:c0:fc:
28:83:23:cf:4d:dd:60:10:54:9d:39:d4:96:ca:49:
26:e9:1c:34:78:96:91:9c:a2:bb:34:ce:8c:a4:c4:
63:48:5d:d4:c8:0f:b9:23:10:c3:35:34:76:53:a7:
12:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AA:F7:54:78:8C:A3:98:EA:C8:DC:90:B7:9E:01:2B:5F:FB:82:78
X509v3 Authority Key Identifier:
keyid:DC:0F:9E:A0:46:36:D7:E7:14:18:B9:30:91:CC:D0:E5:70:15:BE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A-eoEY21-cUGLkwkczQ5XAVvkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/01bf96-81b6-4e4c-ab80-e0bc41078426/1/3A-eoEY21-cUGLkwkczQ5XAVvkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f8:0a:d5:98:c5:3f:28:15:35:d6:73:ff:c3:82:1d:96:54:
68:e3:b5:30:ac:35:5e:7d:c4:2e:3f:63:1c:f6:13:57:a5:d6:
30:9b:7a:d1:d9:e0:bd:b9:8f:01:6e:3f:3e:8a:a4:ab:ed:92:
5b:d8:fe:22:4e:9a:80:0f:b0:be:03:88:df:6c:76:84:0d:f5:
8a:c9:41:17:bc:3f:5b:5c:d8:d3:0f:e3:a8:c4:b8:22:6e:88:
c9:7f:af:d4:9c:32:f2:9a:b8:6a:e0:85:72:7d:2f:12:74:0f:
d9:1d:90:c3:ca:4a:65:fb:3b:95:74:b9:d5:a2:53:82:0e:58:
d6:17:f6:fd:9f:ab:8e:e0:71:9b:82:ef:7c:0c:f3:6c:09:53:
91:98:21:37:80:ac:f1:8f:a5:67:34:c0:54:08:d7:e5:d0:22:
39:e9:d4:27:63:99:08:92:e1:68:a6:39:bd:9a:eb:d1:f7:b9:
54:fb:41:cc:8b:3c:9e:71:c4:e4:76:57:0b:83:53:e5:fe:5b:
0a:7d:d2:fa:2f:e0:c8:00:3b:29:7a:20:e6:e9:29:b8:62:49:
6f:fb:d2:63:75:bd:45:44:19:c2:45:10:9a:e0:94:c2:b0:d9:
09:89:06:85:07:3f:09:99:93:8d:62:b7:72:d9:71:8e:94:26:
ca:42:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:29 2025 by rpki-client