Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
File: 3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json)
Hash identifier: 8Fpx1A7VvodZw0GChjH+Rl1rikKrP0B9vMzg8p9VESA=
Subject key identifier: A2:C5:C3:2B:5E:B6:FA:8D:3E:29:C5:E7:DF:02:BA:B5:B1:F4:FD:67
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 01967CEA3B346F48D2422ACB594CE7886A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
Manifest number: 152D
Signing time: Mon 28 Apr 2025 15:00:47 +0000
Manifest this update: Mon 28 Apr 2025 15:00:47 +0000
Manifest next update: Tue 29 Apr 2025 15:00:47 +0000
Files and hashes: 1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: NXyX2vq7riC0PQLW4n1z6qtjJhXr1jxP+Z8W4+/q6Rg=)
2: 7Dxx4GUfZshom9FbPHAxp-Z60ho.roa (hash: LXHxUD8d853bp48Kp4bHizsdXxzmRHG+cP9w4z3LY9k=)
3: B_dytxxDPRteZVWj_5GTAT9t8BE.roa (hash: T860Q+FQFzVWcjsZOe8dk9hmlbNKGPeSX6qfmd4Fuhk=)
4: dbK-R91ZSUb0vmB9yu9XwDJ_RDw.roa (hash: YNxHBvfEGT+DFTrI9P9oVpm7y0mnqXQpEkbudzfn+nA=)
5: m3WW-meE1vfIwSrMaxHTYI5Nlk0.roa (hash: aOHIBtHSW3A5XSJ7tUzd+YLEbCI85PGx7m5TzFvcEu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:ea:3b:34:6f:48:d2:42:2a:cb:59:4c:e7:88:6a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Apr 28 15:00:47 2025 GMT
Not After : Apr 29 15:00:47 2025 GMT
Subject: CN=a2c5c32b5eb6fa8d3e29c5e7df02bab5b1f4fd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e8:fa:ef:f9:91:b2:9b:2e:2a:8b:60:19:29:
1b:e4:de:77:b5:f1:31:5b:1b:a9:76:25:8c:ff:ee:
2f:16:d6:68:2a:c8:ee:49:70:d7:07:a1:3e:eb:97:
19:02:07:2c:75:b1:02:27:1a:7a:2a:e9:db:b2:70:
d3:56:71:4d:46:44:19:92:d7:5b:21:34:ea:bf:70:
d6:54:70:f6:e4:af:ec:b6:e7:4b:ed:0a:15:31:2c:
bd:f4:5b:64:e5:cb:45:40:e0:c3:3d:31:5a:19:71:
00:58:0d:3d:43:8f:3e:37:88:df:fa:12:9e:2a:0c:
02:af:82:67:92:78:28:aa:20:ef:83:d1:d6:4e:36:
0b:12:5b:91:64:a9:10:23:ef:ca:db:88:c4:77:bf:
9d:3a:16:cf:fd:95:52:e0:5e:f5:56:76:16:44:4f:
ad:fc:f5:bd:ef:12:9b:c9:e7:6e:13:99:b5:d8:c3:
92:70:63:ac:fa:48:33:bc:4a:da:cf:60:76:a3:5b:
fd:95:f0:bb:ae:79:03:eb:e2:31:81:89:3f:d3:1c:
90:93:a9:93:0c:a0:d7:94:c3:c9:23:48:d5:97:b0:
c2:7b:ec:82:39:e0:fd:d9:05:9c:d2:9e:5f:18:08:
2c:73:dc:36:92:17:11:31:79:59:fa:79:11:2e:24:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C5:C3:2B:5E:B6:FA:8D:3E:29:C5:E7:DF:02:BA:B5:B1:F4:FD:67
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:64:c8:3a:e6:a5:fd:96:9b:61:12:3e:dd:df:0c:ae:17:36:
e5:b4:63:af:8f:d5:f2:43:8d:0d:bc:f2:c0:fc:37:e8:53:9a:
8e:1a:82:5d:9e:7d:ee:dc:c0:20:34:7f:36:32:6b:ff:3c:21:
3a:1f:b3:fb:11:c0:5f:98:d9:05:be:b7:69:0b:f1:87:f2:8a:
00:f0:c5:04:a8:ea:c1:e9:d6:f6:4f:fb:ca:cd:33:2e:ec:3b:
a5:d7:e6:44:02:7e:33:9a:9c:42:5b:25:af:88:7c:cf:5f:49:
bd:0a:b9:d5:8b:bb:7c:9b:52:e5:88:ea:9a:06:56:c0:61:81:
25:41:ae:7c:90:23:58:08:f0:d5:a8:96:2c:12:9e:51:ba:5e:
82:9e:e0:2b:56:b9:21:b4:61:72:56:ad:09:34:a4:b6:fe:e8:
33:3c:71:0c:a6:93:47:9b:1e:d7:15:28:bc:88:ee:fe:c1:fa:
de:7b:77:0e:cd:77:e7:c8:e5:ff:d0:aa:bf:47:fb:fa:30:02:
7f:8c:78:65:81:69:1e:dc:68:82:b7:2c:80:a9:8e:f8:f0:d9:
6a:cf:c6:43:24:dc:71:c7:78:7d:bb:a5:bb:09:cc:9e:f8:0c:
e7:0a:77:52:cf:69:dd:7d:bb:2d:ea:e0:83:7c:2d:bf:2d:5c:
0b:4a:dc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:53:46 2025 by rpki-client