Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier: +IAjGgVbH8gGXwoYpK0V/J9wZKcXzU5+DclmS4qXFJA=
Subject key identifier: C3:3A:EF:26:B4:0D:24:A6:3D:C3:4C:ED:5B:F1:5A:FD:62:89:A9:5B
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 0196753090311361CFFF996A5B02D408CD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number: 1085
Signing time: Sun 27 Apr 2025 03:00:39 +0000
Manifest this update: Sun 27 Apr 2025 03:00:39 +0000
Manifest next update: Mon 28 Apr 2025 03:00:39 +0000
Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: DP0J0ECWMCchv3N9jNJq2HGdcBgu435Yk55TbaKSqIQ=)
2: RNkRhX3yK-TkHlh9YWWsykby_Dc.roa (hash: vp+4Wych+XwTPbr9Bjf9hawO/Jnhv86eVFw3KntPsww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:90:31:13:61:cf:ff:99:6a:5b:02:d4:08:cd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Apr 27 03:00:39 2025 GMT
Not After : Apr 28 03:00:39 2025 GMT
Subject: CN=c33aef26b40d24a63dc34ced5bf15afd6289a95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:c0:46:85:b1:d7:ad:f9:e0:e2:42:f9:6c:
e6:16:77:1e:44:ba:9d:02:4a:9e:ff:82:f6:36:5f:
a8:54:f0:35:84:fb:5e:83:b0:b4:f8:c1:80:dc:7f:
61:44:13:02:e7:c8:65:c9:ab:71:30:4e:ee:bf:e2:
ad:4f:1a:6d:e6:9f:97:da:c2:51:a9:fb:3a:ab:46:
20:b7:4f:d7:8c:1e:9e:f9:60:bf:a9:bd:2c:90:11:
a1:3c:7d:9f:4c:92:89:3c:c8:fd:39:d1:4a:fc:59:
dd:2f:8e:0e:16:8f:43:fa:a0:b1:3a:b0:ee:0d:f8:
73:3b:14:b5:6f:ba:bf:06:0a:fd:a1:99:05:39:0a:
c9:ab:3e:ec:01:9a:7a:df:76:50:3b:b8:a2:94:c2:
8c:ad:7b:5d:87:15:98:03:d1:e2:94:3c:fd:73:2d:
02:37:a4:ec:5b:bb:4d:76:06:09:92:f8:fe:b1:b9:
0d:a4:86:d5:b5:7a:69:07:57:ae:5f:92:c4:39:70:
5a:dc:a1:93:91:6b:08:9b:de:da:73:fb:f9:fb:f2:
2a:ef:11:da:f4:5c:03:9d:f4:31:0e:ae:b4:8c:24:
21:0e:61:d4:4a:75:67:e6:26:01:ec:02:80:e1:08:
71:0e:65:77:eb:49:24:25:99:69:82:30:6d:0e:c5:
7d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3A:EF:26:B4:0D:24:A6:3D:C3:4C:ED:5B:F1:5A:FD:62:89:A9:5B
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4a:56:6e:2d:a4:42:2e:c7:a9:09:c3:2b:dc:9d:9c:72:29:
ba:60:01:43:4b:40:79:2c:33:4b:a6:bb:64:cf:18:16:4f:bc:
a7:22:4e:ae:44:91:68:3a:2f:e9:43:a4:e3:79:fc:d1:6a:96:
a7:38:e7:c6:6c:46:99:a2:f7:52:9f:7e:f6:44:fb:40:47:ea:
df:48:0f:f1:2a:30:76:c9:d6:b8:1d:d1:e1:14:2c:48:0a:26:
9c:09:81:4f:65:fb:af:0a:ae:05:0d:a6:66:b6:2a:7b:75:85:
b3:10:78:49:96:ca:8f:66:3c:30:aa:40:68:00:c4:d3:03:c8:
05:31:5f:89:ad:d0:96:de:ff:81:3a:51:4b:3b:c3:30:29:a4:
d4:78:e1:a6:16:f8:6f:8d:6b:51:e8:fd:50:b1:10:30:27:bb:
7e:95:9b:00:6c:60:85:b7:2e:b7:9a:fa:3e:0e:9a:58:0c:0b:
e9:74:46:7d:5a:be:ad:46:1a:cf:64:32:20:9d:1e:c8:a5:40:
47:35:4f:72:eb:c9:09:ec:92:38:1e:9d:ea:a7:21:b1:e9:d8:
d3:88:de:cf:56:36:78:02:3b:16:6e:09:bf:13:7e:5b:93:f2:
e7:be:fd:a1:89:0b:ce:98:56:d4:d4:df:68:ea:60:27:2f:47:
10:05:0c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:31 2025 by rpki-client