Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: tplpNqlAV8j5hYVJs6sbr+B32VO6/phUlFscyUyfAfw=
Subject key identifier: 37:C0:74:C7:85:10:72:E6:59:2C:58:1C:66:A6:28:20:97:E0:F9:53
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 0196759E5B2FEDACE05B1EE6EE7F846B6EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 05:00:34 +0000
Manifest this update: Sun 27 Apr 2025 05:00:34 +0000
Manifest next update: Mon 28 Apr 2025 05:00:34 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: bguJeactqltxm5+RW7F7MjM0dm4OnP+RJ6T/1bXMHuo=)
2: TWCQBg2-t-jrjyzWp02-IpHykDE.roa (hash: OzxPmG/iv0ZxRaIlS2kwO8RCX9n3cTZki/wmozkxxLc=)
3: w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa (hash: 5XUytb4Y6hE0gSnX9zthe9SyxMsKZ/nIOoxPG8EDHcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:5b:2f:ed:ac:e0:5b:1e:e6:ee:7f:84:6b:6e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Apr 27 05:00:34 2025 GMT
Not After : Apr 28 05:00:34 2025 GMT
Subject: CN=37c074c7851072e6592c581c66a6282097e0f953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:b4:43:65:6b:4b:49:d5:fb:2b:2d:26:7a:
04:6a:3d:d6:7e:7c:cd:28:e8:7c:1f:8c:db:ea:f0:
45:1f:d4:41:f9:2a:81:15:f1:b6:f0:bd:a1:8d:9b:
5c:6d:1f:f7:a6:30:4f:d9:6c:f2:93:48:4c:21:90:
54:a8:11:9b:57:61:37:e1:dc:30:fd:e2:3e:2c:0f:
2e:5e:b8:ce:92:de:42:ca:26:35:f4:ec:7a:3b:4f:
2a:d4:25:d5:7c:78:fa:f9:3d:92:7f:92:94:53:2c:
53:18:de:34:b0:85:b0:d9:83:ef:9a:90:c5:be:c7:
94:8a:87:a0:64:3d:94:58:bf:85:8f:19:64:5d:29:
15:cc:21:fa:2c:3b:25:48:fe:e7:98:06:56:bd:dc:
38:6c:5b:8c:55:24:9b:34:4a:ee:9e:b8:c8:a1:72:
3d:61:bf:52:ec:f5:d0:cf:01:75:cb:50:e4:1f:b9:
1b:2c:8e:1c:75:af:04:29:e9:01:dd:58:c2:aa:36:
45:f6:81:21:ce:c1:ee:86:5e:d5:d8:2c:df:10:1a:
fa:71:74:95:0a:07:e5:0b:d3:af:4e:a6:ff:d5:9c:
61:6d:10:06:a5:98:f7:c8:ee:ca:27:1f:36:0c:f5:
b4:f3:13:91:36:31:f2:de:8f:68:01:38:7f:ea:37:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C0:74:C7:85:10:72:E6:59:2C:58:1C:66:A6:28:20:97:E0:F9:53
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c3:58:cf:d6:57:e8:27:24:13:ed:04:ce:fe:dc:0f:cc:74:
f0:1c:ed:32:8e:98:0a:ff:d3:d0:21:aa:5a:1e:ff:6f:70:0c:
6a:a4:cc:5d:95:77:0b:b8:c4:25:90:80:7e:c7:a6:6e:ab:d3:
78:45:0b:9a:98:3e:2b:83:1e:42:a5:f5:44:b8:b0:0f:51:9d:
56:29:03:b4:f6:2e:ca:da:8c:fe:18:01:d0:d9:ce:d9:c3:98:
35:11:28:52:96:ad:58:59:60:c1:47:ab:ed:a9:03:3f:3a:f2:
d2:4f:dc:5f:f4:c2:df:58:1c:1d:de:d7:d8:91:b6:4b:85:88:
5f:ef:63:fb:4d:bd:f1:89:98:b6:1b:f6:a1:ad:70:86:ec:75:
13:55:a3:cf:5f:4d:e9:d8:20:69:16:91:6a:32:78:00:4d:ef:
3a:02:94:b5:b9:6b:43:e1:7c:c7:96:02:cc:99:4c:38:1b:2a:
9b:42:df:88:f9:15:f6:b9:e8:9d:e0:44:01:2a:b5:43:7d:f6:
b1:f8:be:e1:ad:40:1e:b6:fe:d2:54:f0:de:bc:f1:dc:a0:ff:
46:12:ef:0e:39:7b:4b:06:2a:21:d9:a0:af:46:ee:29:2b:d5:
78:dc:41:e7:a5:ef:08:cc:43:04:2a:70:d3:28:86:9b:34:ef:
24:5f:71:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:09:52 2025 by rpki-client