Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
File: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json)
Hash identifier: ENmVqnbfvkyP72su+ER3zerIJgxYCgpWOUAxjUQX5sA=
Subject key identifier: 48:A1:34:CA:84:E8:1B:5E:DC:08:6B:10:64:13:BF:FD:CC:FE:5B:33
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 01968BB8E0242EBBB231F2291D2C8A153C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
Manifest number: 0DA1
Signing time: Thu 01 May 2025 12:01:10 +0000
Manifest this update: Thu 01 May 2025 12:01:10 +0000
Manifest next update: Fri 02 May 2025 12:01:10 +0000
Files and hashes: 1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: VzNNKqmie6TbhGj+9zFj3BtPlvfQp+NI4AqoKabS5lg=)
2: xEogw3XOMF8942N9C953fQ9p_WQ.roa (hash: gm/zrEw7lZ+SPbWVu4mrs06eSMAYkDfSw1DjLnUzlh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:e0:24:2e:bb:b2:31:f2:29:1d:2c:8a:15:3c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: May 1 12:01:10 2025 GMT
Not After : May 2 12:01:10 2025 GMT
Subject: CN=48a134ca84e81b5edc086b106413bffdccfe5b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:21:54:26:04:cb:af:0c:a4:d2:b9:3f:86:
52:6d:ce:c6:f9:53:42:93:25:e1:57:bb:74:7a:12:
38:af:79:be:2c:74:84:38:01:86:49:f1:71:74:c4:
93:65:61:ce:d6:7d:6e:0a:4f:96:c5:3c:d7:fa:45:
1b:b8:fb:90:fe:d5:0d:d1:01:e0:13:ab:f2:57:fd:
5f:f2:8d:ca:6c:bf:ec:d1:9f:58:41:9a:44:7a:ab:
bd:74:5c:63:12:73:d8:31:61:e2:9d:fd:58:90:a6:
2a:f2:58:60:6c:ea:b6:90:61:4a:9c:c4:11:7a:80:
48:3c:bb:a3:dd:7c:49:e8:6b:4e:15:11:6f:88:28:
88:ea:2c:57:e2:b1:33:f1:14:b3:61:fe:ef:29:28:
0c:06:df:fb:e3:ea:c3:42:ee:72:02:89:2b:c5:11:
3a:f7:dc:de:8f:ee:d5:93:60:d6:a7:a8:b3:92:f3:
6d:25:c7:38:64:93:d3:ae:80:40:81:d3:6b:fa:d3:
ac:9e:41:21:30:1e:fe:a7:7b:97:95:8d:ca:5f:06:
65:22:8a:26:f6:4e:99:76:bf:ad:1f:bf:2f:b8:e8:
5e:59:0e:ed:55:b3:f4:9a:b8:8c:10:d3:8f:a9:d6:
62:51:cd:36:7f:ae:b5:20:94:55:be:53:df:fa:37:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A1:34:CA:84:E8:1B:5E:DC:08:6B:10:64:13:BF:FD:CC:FE:5B:33
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ad:f9:94:41:39:c5:5f:97:d4:14:b5:7f:d5:6a:50:54:0d:
35:81:6a:50:82:f1:49:9e:02:cd:90:97:71:bf:ac:2f:9b:70:
24:82:ca:af:5c:14:4e:75:25:da:7a:d9:f2:a3:b3:62:cc:7b:
c3:2d:02:12:d2:ea:71:f0:fe:d7:c2:55:4b:91:52:55:5a:2d:
ab:24:21:cc:57:48:08:ac:b1:7a:99:a2:96:17:f8:81:d3:ed:
e8:7a:83:1a:d7:dc:bf:ee:42:52:1a:6e:f3:12:46:24:c7:fe:
bb:dc:b4:d1:0f:f7:8e:9d:96:3a:25:cd:f6:c3:8d:36:aa:8b:
15:56:61:56:86:6e:16:3c:42:4f:13:fa:69:ef:9f:3e:8b:7d:
a7:37:62:94:5b:c1:f5:c8:56:ad:dc:e6:40:57:de:b8:67:b4:
67:93:d9:5c:12:44:8c:29:16:95:00:26:16:80:f8:eb:01:84:
0f:77:36:93:84:fd:fa:4b:1f:b8:8f:b5:19:8e:06:63:d5:97:
b8:a7:be:ef:92:2a:94:3e:1d:38:2c:4d:15:1c:ff:88:f0:74:
de:de:f1:e9:3f:af:31:0c:93:d3:b6:78:e5:0e:b7:99:14:e3:
33:fb:d0:59:ad:a1:23:57:98:64:8f:30:a0:1e:cc:11:09:27:
4f:28:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:44:08 2025 by rpki-client