Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier: P8F/H7avEAoVud6YnI+zahIzj503CkrAQxFu18oKb08=
Subject key identifier: 7C:D9:86:67:92:0B:D7:83:64:85:5C:7B:BF:C8:B3:1E:76:AD:B9:48
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial: 019677FA7EC4F1234A4154EBFD9FE8EF3F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 16:00:27 +0000
Manifest this update: Sun 27 Apr 2025 16:00:27 +0000
Manifest next update: Mon 28 Apr 2025 16:00:27 +0000
Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: EeCYFWGaoKkhmzq1wNpWWoIFopcx0guhtl2ZQ9RTzo0=)
2: 4aMsThSQ8pto7QNh_kFB73sOXo8.roa (hash: HEBFusOcNgQfdZRF0U/he5dAzzkTri4ddTPSMK0+giU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:7e:c4:f1:23:4a:41:54:eb:fd:9f:e8:ef:3f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Validity
Not Before: Apr 27 16:00:27 2025 GMT
Not After : Apr 28 16:00:27 2025 GMT
Subject: CN=7cd98667920bd78364855c7bbfc8b31e76adb948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:ad:ef:34:a9:29:e9:88:b0:1b:89:5a:45:
d7:ef:f5:bb:aa:ff:42:dc:b5:0b:85:bf:18:e9:b2:
3d:65:d6:c7:10:6e:e3:03:f8:41:07:15:84:57:81:
81:65:c1:7f:c2:a3:ed:b8:87:c7:75:0d:56:a3:55:
c5:34:c0:5b:68:e5:29:96:90:9b:b3:15:df:16:c7:
de:09:17:37:cd:03:3f:0b:e5:98:0f:35:62:a2:2c:
0d:56:ff:ac:19:96:7b:b9:f0:28:00:af:b8:77:e3:
20:3d:a4:44:77:b1:61:e4:a9:c5:99:7e:31:d7:ac:
11:d3:5d:33:d3:61:56:73:77:8f:e0:e7:3a:8b:b3:
86:81:0b:90:62:a1:c7:16:6c:cd:4d:02:52:a0:b0:
1c:3e:44:87:25:73:6e:49:0d:40:2e:9c:03:0a:85:
be:52:9a:31:f3:02:7e:08:d8:06:94:46:6c:21:af:
5d:96:2e:05:7f:e3:e5:1e:13:e1:23:eb:44:26:11:
d0:68:2f:95:3e:d1:5c:d7:5e:71:87:bd:41:d3:53:
61:d5:ca:14:6b:38:d2:61:bf:d2:4f:71:06:be:87:
0f:db:67:38:42:fa:cd:0e:9e:e9:37:4d:33:0e:97:
8e:80:bb:bf:7a:9b:41:88:ed:0c:d7:1e:d1:dd:53:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D9:86:67:92:0B:D7:83:64:85:5C:7B:BF:C8:B3:1E:76:AD:B9:48
X509v3 Authority Key Identifier:
keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a1:90:bc:dd:5d:79:92:bf:70:0d:ac:14:fc:33:37:b7:d3:
06:9b:f9:a5:6a:f8:b5:aa:23:e8:ae:a8:ec:e6:65:70:67:ac:
2a:fe:95:1b:1c:d6:00:01:6a:e8:85:60:db:b3:96:90:cc:d9:
29:e8:d5:d1:01:b5:f9:01:b3:7d:5f:7e:1b:78:0f:09:49:cd:
0e:8b:10:70:8e:6d:e2:41:ae:c2:fd:27:8c:5d:c5:fa:2d:57:
cc:ac:ff:5c:48:e5:cb:a1:6a:de:91:37:43:23:5f:29:4d:c3:
7b:57:5d:e6:2a:df:32:3f:da:05:21:a0:31:4d:ad:fa:37:dc:
ae:e1:d5:88:32:9c:fa:83:91:ff:1b:1f:91:db:e8:c3:06:62:
93:4f:b0:d1:fe:bb:56:a0:2b:91:c4:e4:c8:f7:13:7d:9e:3c:
aa:d7:21:b3:ea:00:cd:d5:1e:aa:19:06:7c:97:1d:14:17:32:
29:c0:96:9e:43:f0:6d:df:3f:46:4f:cf:ea:8c:2d:db:17:70:
bc:6c:7a:86:09:03:0e:46:63:94:71:05:00:b2:b9:8d:2c:28:
2a:ae:ef:c8:e6:d9:c4:f5:33:af:dc:e7:a9:a3:b0:35:b0:6d:
57:41:6c:3e:84:50:fc:86:1f:11:e5:6b:e7:48:e5:6f:ef:eb:
3e:33:6a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:27 2025 by rpki-client