Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
File: 3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft (raw, json)
Hash identifier: qjCEcR/XE2AcmGhUzTrhbdQQvc2RzxtTHcpRPDKG8EI=
Subject key identifier: EA:21:BE:A5:98:83:16:92:7D:6D:DC:DF:6F:C2:77:5B:97:00:B1:66
Authority key identifier: DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
Certificate issuer: /CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Certificate serial: 019677C3C17263302861361CFC1060DE1ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
Manifest number: 0ECA
Signing time: Sun 27 Apr 2025 15:00:39 +0000
Manifest this update: Sun 27 Apr 2025 15:00:39 +0000
Manifest next update: Mon 28 Apr 2025 15:00:39 +0000
Files and hashes: 1: 3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl (hash: Puei+RBb67iPnJwctj0L0OH4GQNt6fnQB+ce9rNUz1Y=)
2: j2BsJZHL3LgBeU5YdWYJa32hdy4.roa (hash: d+oREESRuLvMYhUCDv9aLTd0uG0phphp5vORkyTT7cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:c1:72:63:30:28:61:36:1c:fc:10:60:de:1a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Validity
Not Before: Apr 27 15:00:39 2025 GMT
Not After : Apr 28 15:00:39 2025 GMT
Subject: CN=ea21bea5988316927d6ddcdf6fc2775b9700b166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:2c:6f:b6:1c:17:8b:19:2d:a5:cc:df:0e:
4c:5f:4f:91:30:7e:bb:bf:93:26:c7:f2:25:e6:e3:
4d:93:8f:2d:68:fe:9c:5b:fa:38:2b:26:c7:e2:b9:
6b:43:e2:f9:5e:2d:31:b8:7c:2e:a5:e7:ce:5c:0d:
56:e6:a8:20:e3:26:c5:26:6c:67:9f:e4:e4:9f:56:
2e:a5:a6:c3:b2:ff:96:ea:12:f3:d0:2b:ef:ca:c5:
45:10:78:92:e7:15:70:64:b1:d0:31:87:f4:99:4b:
4c:5b:7e:cd:9b:88:b4:e8:32:40:48:13:4e:86:a0:
2b:8a:90:5b:3f:dc:e2:28:42:5f:ae:13:02:61:4f:
57:36:5b:38:9b:5e:5b:98:9e:87:7f:46:85:e4:51:
04:84:70:f0:81:02:f5:78:60:95:ae:4e:7e:33:8e:
89:1a:1d:50:eb:8c:79:91:71:24:d9:a9:d9:40:09:
bc:db:94:0b:d3:69:75:75:7d:fe:92:ce:2b:f5:a5:
06:52:6c:18:ba:18:7e:78:f3:0a:70:2f:e5:77:da:
d2:a6:0d:db:81:8b:3f:9d:5a:cc:0c:21:e1:b7:9f:
2d:6d:79:e1:aa:a0:e7:3f:bb:fa:87:65:7b:58:ff:
35:e7:9c:6f:70:e2:f6:8b:bf:ea:38:08:b3:c2:46:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:21:BE:A5:98:83:16:92:7D:6D:DC:DF:6F:C2:77:5B:97:00:B1:66
X509v3 Authority Key Identifier:
keyid:DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9c:0a:7d:e4:e2:bf:f3:19:b0:71:04:6c:a3:7f:92:1a:a5:
1a:87:db:cd:bc:51:10:b6:fe:f0:ea:9e:48:1a:5d:e2:9f:65:
e2:97:b2:6a:bd:f9:47:be:a5:47:00:0b:95:b3:05:fe:c6:f4:
ef:f9:48:4e:4a:02:b6:6d:26:8a:bb:21:71:a2:ea:75:93:fd:
c5:d1:be:2c:2a:bc:3f:47:47:9d:6e:c0:42:24:43:12:2c:9a:
d5:d2:93:f6:1a:02:11:93:b1:95:77:f6:3e:76:b4:7f:56:25:
1b:c0:e7:ba:75:ba:1e:ca:84:29:87:fa:df:8d:82:fe:f5:de:
27:53:e9:23:79:98:ff:d5:67:1f:35:b7:56:db:79:f9:3b:35:
15:57:26:71:36:a4:c3:ad:65:80:18:1b:45:53:3e:12:61:29:
35:ee:d9:b9:8c:b5:aa:c2:1e:b6:bf:64:48:9f:56:20:13:bb:
1c:68:3a:c5:bf:7a:64:8b:59:f6:fd:e6:cc:74:5b:ff:a9:05:
b1:db:ff:7c:ab:23:89:80:69:70:6e:a7:59:5c:fd:23:24:13:
51:af:50:85:e5:06:00:01:76:44:bd:b4:f1:9f:6c:c1:d1:18:
cd:6a:de:f4:b0:12:c6:88:f2:bb:21:89:e5:20:55:c6:e2:84:
d0:7d:1f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:17:32 2025 by rpki-client