Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier: pcBf2UzVu3gawTLk/EZAnp/KsGZqk+jJbCf46P4dDjE=
Subject key identifier: FF:DE:00:C0:26:05:47:47:9C:33:D3:AD:BA:12:7D:07:C9:ED:29:0A
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial: 01967C7C316E4EAB66545C4721A2391C725F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 13:00:35 +0000
Manifest this update: Mon 28 Apr 2025 13:00:35 +0000
Manifest next update: Tue 29 Apr 2025 13:00:35 +0000
Files and hashes: 1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: 5GPNWX4sBDUSa2tTzj19lTWYYsFhJOyVzaKacXEXBlQ=)
2: eB3vCKwTA_4LHzl8qmjJhPE1E0I.roa (hash: 4iTyC4OoX2gbX1y0Qqu+BwBX8s/wE3y91+xS9nzRcWU=)
3: p8zRssL-qoCfvvI_dtLWUNgx7c4.roa (hash: zYGisfdidI1eM9pSCirssYszt8G/y6UD9xrE/AACroU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:31:6e:4e:ab:66:54:5c:47:21:a2:39:1c:72:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Validity
Not Before: Apr 28 13:00:35 2025 GMT
Not After : Apr 29 13:00:35 2025 GMT
Subject: CN=ffde00c0260547479c33d3adba127d07c9ed290a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:76:a6:bd:11:a2:11:67:30:48:c4:e5:58:
14:18:29:8a:48:7a:80:1c:8a:e8:ad:5c:64:0f:71:
55:94:6b:aa:f9:61:af:1b:3c:4d:9a:ee:c4:f2:39:
c7:b2:35:10:d6:4e:ef:13:8e:55:22:7b:ee:db:f5:
14:2b:ac:fa:7c:b2:7c:11:1d:eb:b2:2d:e8:14:28:
8f:1b:fb:a2:c1:ab:ab:5b:eb:69:c3:64:4f:54:a4:
73:8e:79:c9:4d:05:c9:1e:a3:b7:58:cb:fe:e8:a8:
6a:bf:4c:33:31:d7:bb:e2:2f:ea:ea:b2:b8:23:74:
8d:56:6c:a0:14:a8:72:64:e1:54:5d:85:bd:12:26:
23:0e:82:a9:1f:e5:ac:27:a5:ef:75:25:a3:c7:c8:
70:5b:84:e4:cf:20:79:dd:38:40:cb:8f:04:f8:fc:
bf:aa:53:b2:cd:8c:d2:97:4c:80:38:f0:f2:22:85:
18:78:04:f8:35:6a:d3:63:93:43:82:e1:b9:70:de:
62:9b:55:9d:9f:57:ea:14:b2:91:80:b9:1b:50:5a:
f5:42:f8:ea:c1:9b:04:ff:48:73:6c:78:de:24:cb:
bb:49:c2:32:51:6e:78:a6:7d:fd:66:84:a6:fa:15:
a1:00:61:89:6d:a2:66:49:5c:fc:0b:e7:4f:b9:49:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DE:00:C0:26:05:47:47:9C:33:D3:AD:BA:12:7D:07:C9:ED:29:0A
X509v3 Authority Key Identifier:
keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5f:7f:83:25:b0:a0:ca:48:26:b2:22:ae:bb:69:7f:51:e2:
b7:5d:cf:12:5a:09:59:4b:31:73:56:f1:b9:f1:05:1e:45:e3:
02:43:21:5d:66:c8:b4:d6:b8:c7:31:f8:96:b9:73:04:5e:b2:
cf:cf:7a:d8:fa:b1:d8:0d:bd:30:dd:4e:dc:79:0e:6c:8d:42:
40:31:06:03:eb:a4:a0:ce:19:81:42:af:36:ff:e5:b2:77:2d:
85:81:5d:30:9d:e6:b9:38:53:22:b8:fc:c2:a8:b7:0a:fb:7f:
84:69:c9:04:7a:47:30:02:87:d9:0c:1b:8b:04:65:7b:ee:3e:
8c:7b:74:a2:9a:e9:1c:6f:14:4a:38:f8:94:ec:32:2e:ae:7d:
5a:4c:3e:1f:3f:9d:cc:94:7f:5a:b3:7b:77:46:62:30:10:99:
7a:2c:4d:34:84:da:28:3e:e0:70:ad:89:12:6f:7d:eb:ba:6c:
d3:0e:1a:62:00:74:d4:26:1a:83:a8:56:81:3f:2d:18:f3:a6:
47:1f:d8:8a:d6:ba:c9:86:ec:8b:6f:4b:c3:b4:31:8e:19:1b:
be:b1:4b:d7:07:1a:29:96:f1:c6:1f:30:71:3f:be:3d:76:e0:
75:30:39:0a:c6:c0:79:cf:51:12:35:28:e1:11:23:51:9e:e4:
21:36:1d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:19:31 2025 by rpki-client