Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File: x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier: zNzEoPS3kmGldfPJlMs2e26dS2jBR4pWWA6oCAebdy8=
Subject key identifier: 18:77:B6:43:D9:D4:25:0A:3B:F1:96:99:A1:35:C8:E7:D2:C0:03:67
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial: 0196797B5A1124B70537A4D76F2E675F18B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 23:00:48 +0000
Manifest this update: Sun 27 Apr 2025 23:00:48 +0000
Manifest next update: Mon 28 Apr 2025 23:00:48 +0000
Files and hashes: 1: G5zSLsnIB1Tf_3dQqRjF_q9OU44.roa (hash: 2jnkEsy8dLS8k5/gnwKVBaZUL+prmqB8W/32sROipKI=)
2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: oAV/XaL2n92Xho/aSxCAE0e/5JYRXErfphGhz24IOnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:5a:11:24:b7:05:37:a4:d7:6f:2e:67:5f:18:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Validity
Not Before: Apr 27 23:00:48 2025 GMT
Not After : Apr 28 23:00:48 2025 GMT
Subject: CN=1877b643d9d4250a3bf19699a135c8e7d2c00367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:bc:ff:09:1f:e9:31:56:67:9c:9f:ef:e4:
f6:08:b9:a3:b0:04:82:f7:e0:9a:5a:37:55:ec:3e:
55:b9:31:88:0b:01:92:54:2e:7c:de:a2:7c:56:5c:
8f:02:f3:76:6d:5a:30:89:31:5a:5f:6a:c2:8e:fd:
43:4a:90:be:2d:a4:45:23:00:8b:f1:33:15:e3:de:
24:1c:a7:5c:f0:f2:b9:d4:3a:4d:0c:c1:3f:d0:42:
ab:d3:5a:2e:01:ef:fb:13:89:2f:3f:0f:f5:9d:c0:
8a:c1:08:f4:d0:d7:11:2a:e1:f2:06:80:8e:75:1c:
54:5e:1c:f3:a6:f2:58:9e:c9:c7:9f:42:cb:29:38:
b9:51:e8:57:3c:4b:54:3e:d4:f4:84:31:db:44:09:
25:ce:5a:75:3f:16:c0:b4:6e:1d:43:1e:20:87:12:
48:66:9f:b1:92:98:63:fd:0e:08:c2:9d:75:ab:24:
d9:7a:66:23:d7:47:8b:b9:e5:04:bc:4a:c3:96:18:
67:9e:97:7a:a1:5f:8f:c3:e2:b4:cd:72:8c:f0:b8:
2b:e2:22:68:19:60:76:b4:7b:57:2c:f8:9b:08:e0:
eb:78:75:52:f8:9f:7b:04:e8:9e:00:8f:27:e7:a7:
55:59:c2:4d:fa:45:ed:fa:f9:3f:6d:f8:d8:35:7b:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:77:B6:43:D9:D4:25:0A:3B:F1:96:99:A1:35:C8:E7:D2:C0:03:67
X509v3 Authority Key Identifier:
keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b0:e1:21:48:a1:36:a1:f0:0b:b4:38:0a:35:56:1b:9c:85:
cf:9f:ae:f9:96:32:7c:c5:66:98:8c:4f:ec:44:df:3c:ee:7f:
6c:69:bb:2c:7e:2d:6b:0e:58:7a:28:bb:9c:dc:73:37:9d:e1:
da:2f:98:49:37:1e:49:c5:96:6c:d1:90:a3:77:22:f8:53:00:
1d:2c:df:c3:c2:83:c0:ae:3e:a9:40:6d:2c:dd:72:04:8a:23:
e9:da:bd:52:02:f8:57:b0:e4:28:6d:31:47:28:41:4d:61:81:
c8:4c:e6:dc:56:26:5b:db:df:eb:cf:57:36:6c:6b:56:c7:06:
0f:52:7d:da:21:27:ad:06:18:8b:cb:ec:9e:bf:0d:4a:68:5b:
78:c4:2e:6c:43:3d:61:ad:9e:c2:e4:42:54:d9:2e:ac:36:8e:
26:9d:84:70:f3:c1:76:ee:30:57:68:d3:6c:65:16:83:ff:34:
ef:1b:ac:a2:ee:fa:95:0f:ba:2d:2a:de:35:1b:1e:f5:6c:0a:
18:66:90:00:9a:9e:5d:ba:69:12:f5:73:36:2c:c2:4d:7b:c7:
4d:ac:4b:62:d0:4a:bd:fa:13:63:57:12:33:50:ba:32:b6:a7:
77:6e:ec:9d:b2:ad:52:2e:83:12:5e:ed:c3:ff:b8:cf:37:c3:
72:f2:35:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:16:47 2025 by rpki-client